last executing test programs: 3m29.788602002s ago: executing program 1 (id=1701): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@getqdisc={0x30, 0x26, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xd, 0x6}, {0x8, 0xf}, {0xffe5, 0xd}}, [{0x4}, {0x4}, {0x4}]}, 0x30}}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) 3m29.719478031s ago: executing program 1 (id=1704): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/time\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x14, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a80a3888a82f15", 0x0, 0x200, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000140), 0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5e8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x1810) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="146c5c01c6bec620eabe000000", @ANYRES16=r6, @ANYBLOB="0004000000000000000004000000"], 0x14}}, 0x0) 3m29.57542s ago: executing program 1 (id=1706): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x80, 0x3509, 0x2, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x7ffffffd, 0x8, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0xd7b, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0xffffffff, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x6, 0x8, 0xf, 0x5, 0x6, 0x4, 0x5, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x1, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x7c50, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x49, 0x9, 0x7, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x1, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x5, 0x844, 0x6, 0x3ff, 0xfffffffe, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0xc59, 0x9, 0x8, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x0, 0xe256e000) r1 = socket(0x200000000000011, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000000010000000000000000008500000054000000850000000800000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETINFO(r2, 0x8917, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000180)=0x3) ioctl$PPPIOCGFLAGS1(r4, 0x8004745a, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 3m29.364433849s ago: executing program 1 (id=1708): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f00000020c0)=""/4064, &(0x7f0000000000)=0xfe0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="95000000000000009500000000000000ff210854225b8a38635cf01dd620b4677c6dc25b53a62c052a705760506dba619eb55919b8b07c1a36ad2e36b0dace463ddaa12328a5bf984d572b690513b6b912e5fa01920726308ffc061c161c16618c5a403e705dc46c9256c89db79c6535b4e930386dcca8"], &(0x7f0000000100)='GPL\x00', 0x8, 0xf6, &(0x7f0000000180)=""/246}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r2) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000180)={@dev, @multicast1}, &(0x7f0000000200)=0x8) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r5, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000040)=""/57, 0x39}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4079, 0xfef}, {&(0x7f00000002c0)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1, 0x40010022, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_netprio_ifpriomap(r6, &(0x7f0000000280), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="320500930900006f5f627269646765323400"], 0x12) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x19, 0x0, "69651f72903134d677eb70cf761a415af0ca174a96127e831ddc0d40b5fe95cf848b2640f31918d2374bfcc939898093d26101f69bfcd111df9dae3264914ae9338aeaf0af7da136bc256544dcc80cf4"}, 0xd8) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r8, 0x89a0, &(0x7f0000000dc0)='vxcan1\x00') 3m27.494964338s ago: executing program 1 (id=1718): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x20, 0x0, &(0x7f0000000180)="b90103606908068c3c270040e700009e0ff008001ffff2e1ffff8100632f0806", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8, r0}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f00000001c0)='%pi6 \x00'}, 0x20) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540), 0x4) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{0x1, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x14, 0x19, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @map_fd={0x18, 0x4, 0x1, 0x0, r2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x8, 0x94, &(0x7f0000000480)=""/148, 0x41100, 0x40, '\x00', 0x0, @lirc_mode2, r3, 0x8, &(0x7f0000000580)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x9, 0x3, 0x101}, 0x10, 0xffffffffffffffff, r0, 0x1, &(0x7f00000006c0)=[r4], &(0x7f0000000700)=[{0x0, 0x3, 0xe, 0x2}], 0x10, 0x2}, 0x94) 3m27.311997923s ago: executing program 1 (id=1721): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e20, 0x40, @local}}, 0x0, 0x0, 0x16, 0x0, "7298f48b6f55a8a225f2a3b7f6cdcd43213fdd0e94cbca89515e6b81f1751eb9db599c69871d99224ee4c4b1a5d4eacd5dbfdda9265596409f8d0d7babe8403a9837e04f6bbf7b42fd479fcb8a99b72d"}, 0xd8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xd0732ca5fafe6f0e, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000130001c3000000000000000000000800", @ANYRES32=r3, @ANYBLOB="0000d400000000000a0001"], 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev, [{0x2, 0x1, "703b744dc5c6"}]}}}}}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x30, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20000844) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r5, @ANYBLOB="050725bd7000fbdbdf25030000006c0001801400020070696d726567000000000000000000000800030002000000140002006e72300000000000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="08000300030000001400020070696d7265670000000000000000000014000200697036677265300000000000000000000500030032000000050002000400000005000500050000001400018008000100", @ANYRES32=r3, @ANYBLOB="2800030000000000"], 0xac}, 0x1, 0x0, 0x0, 0xc9c151e00ba73af1}, 0x40840) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20000051}, 0x4008090) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e20, 0x40, @local}}, 0x0, 0x0, 0x16, 0x0, "7298f48b6f55a8a225f2a3b7f6cdcd43213fdd0e94cbca89515e6b81f1751eb9db599c69871d99224ee4c4b1a5d4eacd5dbfdda9265596409f8d0d7babe8403a9837e04f6bbf7b42fd479fcb8a99b72d"}, 0xd8) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xd0732ca5fafe6f0e, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000130001c3000000000000000000000800", @ANYRES32=r3, @ANYBLOB="0000d400000000000a0001"], 0x2c}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev, [{0x2, 0x1, "703b744dc5c6"}]}}}}}}, 0x0) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x30, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20000844) (async) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r5, @ANYBLOB="050725bd7000fbdbdf25030000006c0001801400020070696d726567000000000000000000000800030002000000140002006e72300000000000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="08000300030000001400020070696d7265670000000000000000000014000200697036677265300000000000000000000500030032000000050002000400000005000500050000001400018008000100", @ANYRES32=r3, @ANYBLOB="2800030000000000"], 0xac}, 0x1, 0x0, 0x0, 0xc9c151e00ba73af1}, 0x40840) (async) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20000051}, 0x4008090) (async) 3m12.297289994s ago: executing program 32 (id=1721): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e20, 0x40, @local}}, 0x0, 0x0, 0x16, 0x0, "7298f48b6f55a8a225f2a3b7f6cdcd43213fdd0e94cbca89515e6b81f1751eb9db599c69871d99224ee4c4b1a5d4eacd5dbfdda9265596409f8d0d7babe8403a9837e04f6bbf7b42fd479fcb8a99b72d"}, 0xd8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xd0732ca5fafe6f0e, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000130001c3000000000000000000000800", @ANYRES32=r3, @ANYBLOB="0000d400000000000a0001"], 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev, [{0x2, 0x1, "703b744dc5c6"}]}}}}}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x30, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20000844) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r5, @ANYBLOB="050725bd7000fbdbdf25030000006c0001801400020070696d726567000000000000000000000800030002000000140002006e72300000000000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="08000300030000001400020070696d7265670000000000000000000014000200697036677265300000000000000000000500030032000000050002000400000005000500050000001400018008000100", @ANYRES32=r3, @ANYBLOB="2800030000000000"], 0xac}, 0x1, 0x0, 0x0, 0xc9c151e00ba73af1}, 0x40840) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20000051}, 0x4008090) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e20, 0x40, @local}}, 0x0, 0x0, 0x16, 0x0, "7298f48b6f55a8a225f2a3b7f6cdcd43213fdd0e94cbca89515e6b81f1751eb9db599c69871d99224ee4c4b1a5d4eacd5dbfdda9265596409f8d0d7babe8403a9837e04f6bbf7b42fd479fcb8a99b72d"}, 0xd8) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xd0732ca5fafe6f0e, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000130001c3000000000000000000000800", @ANYRES32=r3, @ANYBLOB="0000d400000000000a0001"], 0x2c}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev, [{0x2, 0x1, "703b744dc5c6"}]}}}}}}, 0x0) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x30, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20000844) (async) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r5, @ANYBLOB="050725bd7000fbdbdf25030000006c0001801400020070696d726567000000000000000000000800030002000000140002006e72300000000000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="08000300030000001400020070696d7265670000000000000000000014000200697036677265300000000000000000000500030032000000050002000400000005000500050000001400018008000100", @ANYRES32=r3, @ANYBLOB="2800030000000000"], 0xac}, 0x1, 0x0, 0x0, 0xc9c151e00ba73af1}, 0x40840) (async) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20000051}, 0x4008090) (async) 2m27.084535996s ago: executing program 5 (id=2353): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000)=0x1662cd33, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xd1, &(0x7f0000000040)=0x20f, 0x4) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x1}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f0000000240)=ANY=[@ANYRESOCT=r2, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000db090000a1000000bf91000000000000b7020000000000008500000084000000b70000000000000095", @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRESDEC=r1], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x6}, 0x94) 2m26.940960537s ago: executing program 5 (id=2355): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 2m26.591060666s ago: executing program 5 (id=2362): r0 = socket(0x25, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100292cd94e38b01d46230000000c002e80060001000080000008000300", @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0x48001}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) 2m26.138571365s ago: executing program 5 (id=2367): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000001100)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0x4f, 0x0, "39be251d1eabe5d383b83d7b7e3d8a239273c82b1fc06d23d50e17e69c6ee2848410590f6c0e2a534af6bf6748eb4c584401b16c30a714c496c77ddfd4e196378b7ab3ef23a522d8b89388ab4e3fb8d0"}, 0xd8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="61123000000000006113680000000000bf2000000000000015000600071b48013d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680cbc"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd70}, 0x2d) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x3c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0xff, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private0}}]}, 0x3c}}, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r3, &(0x7f00000000c0)={0x24, @none={0x0, 0x3}}, 0x14) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, 0x2d, 0x9, 0x0, 0x25dfdbfb, {0x3}, [@typed={0x14, 0x82, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0x9, 0x0, 0x0, @fd=r0}]}, 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000001100)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0x4f, 0x0, "39be251d1eabe5d383b83d7b7e3d8a239273c82b1fc06d23d50e17e69c6ee2848410590f6c0e2a534af6bf6748eb4c584401b16c30a714c496c77ddfd4e196378b7ab3ef23a522d8b89388ab4e3fb8d0"}, 0xd8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd70}, 0x2d) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x3c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0xff, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private0}}]}, 0x3c}}, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) connect$802154_dgram(r3, &(0x7f00000000c0)={0x24, @none={0x0, 0x3}}, 0x14) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, 0x2d, 0x9, 0x0, 0x25dfdbfb, {0x3}, [@typed={0x14, 0x82, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0x9, 0x0, 0x0, @fd=r0}]}, 0x30}}, 0x0) (async) 2m25.876538096s ago: executing program 5 (id=2370): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 2m25.761302847s ago: executing program 5 (id=2372): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x26, 0x9, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000017010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x70bd25, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r3, 0x400454ce, 0x8) r4 = socket(0x840000000002, 0x3, 0x9) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x4001, 0x3, 0x250, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x1b8, 0x206, 0x240, 0x1b8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @empty, 0xffffffff, 0x0, 'tunl0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x1}, 0x1ea, 0xc0, 0x120, 0x0, {0x390, 0x8f00}, [@common=@inet=@socket3={{0x28}, 0x1}, @common=@icmp={{0x28}, {0x12, "e07c", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x2, 0x3, 0x1, 0x2, 0x7], 0x2, 0x5}, {0x0, [0x3, 0x6f455bfb4ce26171, 0x6, 0x6, 0x2, 0x21debfafc4f76fce], 0x3}}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xe2002454fb7b9fcc, 0xff, 'team0\x00', 'gre0\x00', {}, {0xff}, 0x8, 0x2, 0x5}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0xf9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) syz_emit_ethernet(0x9e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000308", 0x68, 0x3a, 0x0, @private1, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b52ab", 0x0, 0x2b, 0x0, @private0, @private0, [@srh={0x0, 0x4, 0x4, 0x2, 0x1, 0x0, 0x0, [@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @dstopts={0x88, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x9}]}]}}}}}}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f0000000080)}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000050000000060a010400000000000000000100000008000b400000000028000480240001800b0001007470726f7879000014000280080003400000001308000140000000020900010073797a30"], 0xc4}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x91ee, 0x9, 0x10000000, 0x1, 0x7}, 0x9, 0x8}, [{0xd6c, 0x9, 0x8, 0xff, 0x10001, 0x9}, {0x7f, 0xffff, 0x6, 0x7fffffff, 0x1, 0x7}, {0x6, 0xb37b, 0x6, 0xb38, 0x0, 0xd0cb}, {0x4, 0x3, 0x2, 0xa318, 0x80000000, 0x1}, {0x9, 0xfffffff9, 0x2, 0x4, 0x6, 0x4}, {0x8000, 0x3, 0xe, 0x4, 0xcee8000, 0x1}, {0x9, 0x8, 0xfffffffa, 0x6, 0xa0fd, 0x8}, {0xffffffff, 0xe648, 0x7c0c3ffe, 0x8, 0x0, 0x5}, {0x3, 0x3, 0x9, 0xa}, {0x9, 0x6, 0xb6, 0x7fff, 0x5, 0x7}, {0x304, 0x66, 0x3, 0x101, 0x3, 0x9}, {0xff, 0x1, 0xe, 0xd29, 0x3, 0x56}, {0xca, 0x4, 0x9, 0xfffffff8, 0x7c, 0x7921bcf1}, {0x1, 0xff, 0x5, 0x80000000, 0xaae6, 0x9}, {0x4, 0x3, 0xa9, 0x8, 0x9, 0x4}, {0x5, 0x1000, 0x200, 0x2, 0x8, 0x6}, {0x3d648283, 0x2, 0x5, 0x9, 0x10000, 0x6}, {0x3, 0xa06, 0x1, 0x1, 0x9, 0x260ba674}, {0x6, 0xc5, 0x8d3, 0x9, 0x3, 0xffffffbc}, {0x3, 0x8, 0x3, 0x5, 0x0, 0xc80}, {0x3, 0xffffffff, 0xffff, 0x2, 0x9}, {0xfffffffa, 0x6, 0x77f, 0x160c, 0x3}, {0x1ff, 0x8, 0x0, 0x6, 0xb, 0x400}, {0x3ff, 0x9, 0xffff8001, 0x100, 0x3, 0x47}, {0x529, 0x4, 0x7, 0xffff, 0xc0a, 0xbad}, {0x8, 0x7, 0x884, 0x100, 0x9}, {0x8, 0x6, 0x6, 0xc, 0x3}, {0x4, 0x40, 0xcd6c, 0x71f, 0x8000, 0x6}, {0x5, 0x30a3, 0xa, 0x200, 0xfff, 0x9}, {0x3, 0x1, 0x5, 0x8, 0x2, 0x81}, {0x81, 0x0, 0x0, 0x49f11005, 0x9, 0x7fffffff}, {0x9, 0x0, 0x5c, 0x3bad, 0x8, 0x480}, {0xe, 0x58000000, 0x9, 0x3, 0x1ff, 0xaa2}, {0x800, 0xd1, 0x0, 0x3e, 0x0, 0x5}, {0x8, 0x4, 0x200, 0xfffffc00, 0x100, 0x10001}, {0x6, 0x7, 0x0, 0x101, 0x6, 0x81}, {0x8, 0x2, 0x200, 0x3, 0x4, 0x101}, {0xad, 0xa, 0x401, 0x0, 0x9, 0xff000000}, {0x8, 0x5, 0xd, 0x24, 0xc, 0x1}, {0xfffffff8, 0x9, 0x1000, 0xc, 0xea, 0x4}, {0x3, 0x0, 0x8, 0x1, 0x1, 0xffffff32}, {0x6, 0x5, 0xd7c9, 0x0, 0x5, 0x2}, {0xffff, 0x1, 0x5, 0x2, 0x7, 0x7}, {0x5, 0x2, 0x0, 0x401, 0x6, 0x1}, {0x3, 0x2, 0x4, 0x6, 0xfffffff8, 0x5}, {0x6, 0x0, 0x3, 0x5, 0x0, 0xffff8000}, {0x1, 0x0, 0x0, 0x9, 0x0, 0x4}, {0x2, 0x6, 0x2, 0x7, 0x9}, {0x0, 0xfffffffd, 0x756183d, 0xfffff801, 0x5, 0x8}, {0x7, 0xa, 0xfffffffc, 0x80000001, 0x7b, 0x2}, {0x7, 0x9, 0xee, 0x800, 0x1000, 0x9}, {0x10, 0x5, 0x57a2a808, 0x80000000, 0x7fff, 0x5}, {0x729, 0x25, 0x6, 0x6, 0x8, 0x4}, {0x2, 0x406, 0xc209, 0x8, 0x0, 0xfffffffc}, {0x1, 0x7, 0x8, 0xfffffffb, 0x80000000, 0x4}, {0x1, 0x5, 0x8, 0x8000, 0x1, 0x7f}, {0x8001, 0xf42, 0x1, 0x3, 0x5, 0x430}, {0x2, 0xfffffff4, 0x5, 0xd, 0xc8, 0x7}, {0x6, 0x7, 0x9, 0x8, 0x5, 0x5}, {0x5, 0x8000000, 0x7, 0x5, 0x401, 0x9}, {0x1, 0x6, 0x1ff, 0xa8de, 0x0, 0x7b}, {0x0, 0xd, 0x7fff, 0x5, 0x2, 0x7}, {0xe, 0xfffffffc, 0x7fffffff, 0x7, 0x5, 0x200}, {0x81, 0xaa, 0x1e, 0x9, 0x14fc, 0x8}, {0x9, 0xffffffff, 0x40, 0x6, 0x13b, 0xeacd}, {0x100020, 0xff, 0x6, 0x81, 0x0, 0x6}, {0x2, 0xe, 0xb, 0x0, 0x6, 0x2}, {0x8, 0x3, 0x5, 0x4, 0x4, 0x2}, {0x84, 0x3ff, 0x3d0c, 0x1, 0x8, 0x2}, {0x4, 0x4, 0xb85c, 0x1, 0x7, 0x6}, {0x3, 0xc6, 0x0, 0x1, 0x2, 0x3}, {0x7, 0x2, 0x8000, 0x2, 0x7fffffff, 0x79}, {0x6, 0x80000000, 0xfffffffe, 0x7, 0x3, 0x8}, {0xae, 0x3, 0x600, 0x9, 0xff, 0x3}, {0x1, 0xed5, 0x6de6, 0x10, 0x380000, 0x789}, {0x4, 0x7074, 0x32b, 0x3, 0xf}, {0x1ff, 0x7, 0x1, 0x96, 0x1, 0xc}, {0x9, 0x3, 0x0, 0x9, 0x1ff, 0x8}, {0x1, 0x7d, 0x8, 0x7, 0x2, 0x3}, {0xfffff001, 0x9, 0x65d, 0x3c10, 0x7, 0x53}, {0x7, 0x0, 0x7, 0x101, 0x9, 0x1}, {0x7, 0x9, 0xd, 0x6, 0xfffffff7, 0x827}, {0x113, 0xfffffffe, 0x2, 0x400, 0x28, 0x81}, {0xfff, 0x6, 0x7, 0x40, 0x6, 0x10}, {0xc, 0x9, 0x8001, 0x0, 0x9, 0x6}, {0x5, 0x11b9, 0x401, 0x4, 0x2, 0x6}, {0x9, 0x100, 0x400, 0x9497, 0x101, 0x84b7}, {0xb4, 0xb85, 0x7, 0x3, 0x51, 0x5}, {0x2, 0x4, 0x5, 0xf, 0xf, 0x1283}, {0xfffffff8, 0x1c0000, 0x2, 0x10001, 0x1, 0x6}, {0x61, 0x80, 0x1, 0x10000, 0x5, 0x8}, {0x8, 0x6, 0xc53, 0x80000000, 0x7, 0x5}, {0x0, 0x6, 0x5, 0x2, 0xdc, 0x6}, {0x0, 0xfffffffc, 0x101, 0x6cb685f2, 0x7, 0x1}, {0x0, 0xc3, 0x4, 0x5, 0x0, 0x9}, {0x8, 0xf7b5, 0x5, 0x5, 0x9, 0x7}, {0x1, 0x67f, 0x5689f935, 0x8, 0x6db, 0xff}, {0x1, 0x400, 0x3, 0x1e1, 0xa, 0x80000000}, {0xea, 0x5, 0x8, 0x5, 0x7fff, 0x1000}, {0x6, 0x5, 0x7, 0x0, 0x6, 0x80000000}, {0x9, 0x6, 0x7, 0x1, 0x9, 0x100}, {0x7202, 0x4, 0x5024, 0xf9, 0x6, 0x40}, {0x5, 0x10, 0x4, 0x5, 0xd, 0x8}, {0x1537, 0x101, 0x6, 0x1, 0x3, 0x6b}, {0x69, 0x400, 0x3, 0x81, 0xc6, 0x7fff}, {0x10001, 0x1, 0x3, 0x7fffffff, 0x7, 0x10001}, {0xcdc, 0x1, 0x7, 0x0, 0x8}, {0x1, 0x168dccf, 0x3, 0x3, 0x7fff, 0x6}, {0x3, 0x4, 0x7fff, 0x7, 0xaf68, 0x403}, {0x9, 0x0, 0x7, 0x6, 0x6, 0x80000001}, {0x5, 0x200, 0x800, 0xd00000, 0x3, 0x8}, {0x8001, 0x5d, 0xffffffff, 0x42e, 0x8, 0x55}, {0x1970, 0x89, 0x6d, 0x460ebb44, 0x2, 0x2}, {0x951, 0x9, 0x3, 0x8, 0x1, 0x2}, {0x3, 0x8, 0x627b, 0x5, 0x6, 0x4}, {0x6, 0x3, 0x9fbc, 0x4, 0x1, 0x2}, {0x401, 0x6, 0x32d84255, 0xfa, 0x27f, 0x8000}, {0x0, 0x6, 0x3, 0xc, 0x8000, 0x40}, {0x5, 0x4, 0x1, 0x3, 0x0, 0x5}, {0x7f, 0x4, 0x7f, 0x10001, 0xff, 0x8}, {0x7, 0x96a3, 0x2, 0xd7, 0x6, 0x200}, {0x1, 0x5, 0x5, 0x37a3, 0x7, 0x8}, {0x81, 0x4, 0xd, 0xffffffff, 0x200, 0x4}, {0x4, 0x3ff, 0x7, 0x4, 0x4, 0x4}, {0x1, 0xffffffa4, 0x9, 0x2, 0x3}, {0xd, 0x0, 0x3ff, 0x9, 0x8, 0x48}, {0x2, 0x10001, 0x9, 0x2, 0x8, 0x9}, {0xf, 0x1, 0xe, 0x101, 0x2, 0xc88}], [{}, {0x5}, {}, {0x1}, {0x4}, {0x2, 0x1}, {0x3}, {}, {0x5}, {0x3}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x8cd778652b20be70, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0xa4f33433e7b7e23d, 0x1}, {0x4}, {0x0, 0x1}, {0x6}, {0x2, 0xa5b0c5c50171756a}, {0x3}, {}, {0x4}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x6}, {0x1}, {0x5, 0x1}, {0x5}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x2}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x4}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000060900020073797a30000000005800048054000180090001006d657461000000004400028008000140000056d6080003400000000008000140000000010800014000000009080001400000000b080002400000001e0800014000000015080003"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000005c0)={'pim6reg0\x00'}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r9) sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x11, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x17f) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_PROP_LIST]}, 0x34}}, 0x0) 1m30.905835161s ago: executing program 33 (id=2372): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x26, 0x9, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000017010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x70bd25, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r3, 0x400454ce, 0x8) r4 = socket(0x840000000002, 0x3, 0x9) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x4001, 0x3, 0x250, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x1b8, 0x206, 0x240, 0x1b8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @empty, 0xffffffff, 0x0, 'tunl0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x1}, 0x1ea, 0xc0, 0x120, 0x0, {0x390, 0x8f00}, [@common=@inet=@socket3={{0x28}, 0x1}, @common=@icmp={{0x28}, {0x12, "e07c", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x2, 0x3, 0x1, 0x2, 0x7], 0x2, 0x5}, {0x0, [0x3, 0x6f455bfb4ce26171, 0x6, 0x6, 0x2, 0x21debfafc4f76fce], 0x3}}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xe2002454fb7b9fcc, 0xff, 'team0\x00', 'gre0\x00', {}, {0xff}, 0x8, 0x2, 0x5}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0xf9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) syz_emit_ethernet(0x9e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000308", 0x68, 0x3a, 0x0, @private1, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b52ab", 0x0, 0x2b, 0x0, @private0, @private0, [@srh={0x0, 0x4, 0x4, 0x2, 0x1, 0x0, 0x0, [@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @dstopts={0x88, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x9}]}]}}}}}}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f0000000080)}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000050000000060a010400000000000000000100000008000b400000000028000480240001800b0001007470726f7879000014000280080003400000001308000140000000020900010073797a30"], 0xc4}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x91ee, 0x9, 0x10000000, 0x1, 0x7}, 0x9, 0x8}, [{0xd6c, 0x9, 0x8, 0xff, 0x10001, 0x9}, {0x7f, 0xffff, 0x6, 0x7fffffff, 0x1, 0x7}, {0x6, 0xb37b, 0x6, 0xb38, 0x0, 0xd0cb}, {0x4, 0x3, 0x2, 0xa318, 0x80000000, 0x1}, {0x9, 0xfffffff9, 0x2, 0x4, 0x6, 0x4}, {0x8000, 0x3, 0xe, 0x4, 0xcee8000, 0x1}, {0x9, 0x8, 0xfffffffa, 0x6, 0xa0fd, 0x8}, {0xffffffff, 0xe648, 0x7c0c3ffe, 0x8, 0x0, 0x5}, {0x3, 0x3, 0x9, 0xa}, {0x9, 0x6, 0xb6, 0x7fff, 0x5, 0x7}, {0x304, 0x66, 0x3, 0x101, 0x3, 0x9}, {0xff, 0x1, 0xe, 0xd29, 0x3, 0x56}, {0xca, 0x4, 0x9, 0xfffffff8, 0x7c, 0x7921bcf1}, {0x1, 0xff, 0x5, 0x80000000, 0xaae6, 0x9}, {0x4, 0x3, 0xa9, 0x8, 0x9, 0x4}, {0x5, 0x1000, 0x200, 0x2, 0x8, 0x6}, {0x3d648283, 0x2, 0x5, 0x9, 0x10000, 0x6}, {0x3, 0xa06, 0x1, 0x1, 0x9, 0x260ba674}, {0x6, 0xc5, 0x8d3, 0x9, 0x3, 0xffffffbc}, {0x3, 0x8, 0x3, 0x5, 0x0, 0xc80}, {0x3, 0xffffffff, 0xffff, 0x2, 0x9}, {0xfffffffa, 0x6, 0x77f, 0x160c, 0x3}, {0x1ff, 0x8, 0x0, 0x6, 0xb, 0x400}, {0x3ff, 0x9, 0xffff8001, 0x100, 0x3, 0x47}, {0x529, 0x4, 0x7, 0xffff, 0xc0a, 0xbad}, {0x8, 0x7, 0x884, 0x100, 0x9}, {0x8, 0x6, 0x6, 0xc, 0x3}, {0x4, 0x40, 0xcd6c, 0x71f, 0x8000, 0x6}, {0x5, 0x30a3, 0xa, 0x200, 0xfff, 0x9}, {0x3, 0x1, 0x5, 0x8, 0x2, 0x81}, {0x81, 0x0, 0x0, 0x49f11005, 0x9, 0x7fffffff}, {0x9, 0x0, 0x5c, 0x3bad, 0x8, 0x480}, {0xe, 0x58000000, 0x9, 0x3, 0x1ff, 0xaa2}, {0x800, 0xd1, 0x0, 0x3e, 0x0, 0x5}, {0x8, 0x4, 0x200, 0xfffffc00, 0x100, 0x10001}, {0x6, 0x7, 0x0, 0x101, 0x6, 0x81}, {0x8, 0x2, 0x200, 0x3, 0x4, 0x101}, {0xad, 0xa, 0x401, 0x0, 0x9, 0xff000000}, {0x8, 0x5, 0xd, 0x24, 0xc, 0x1}, {0xfffffff8, 0x9, 0x1000, 0xc, 0xea, 0x4}, {0x3, 0x0, 0x8, 0x1, 0x1, 0xffffff32}, {0x6, 0x5, 0xd7c9, 0x0, 0x5, 0x2}, {0xffff, 0x1, 0x5, 0x2, 0x7, 0x7}, {0x5, 0x2, 0x0, 0x401, 0x6, 0x1}, {0x3, 0x2, 0x4, 0x6, 0xfffffff8, 0x5}, {0x6, 0x0, 0x3, 0x5, 0x0, 0xffff8000}, {0x1, 0x0, 0x0, 0x9, 0x0, 0x4}, {0x2, 0x6, 0x2, 0x7, 0x9}, {0x0, 0xfffffffd, 0x756183d, 0xfffff801, 0x5, 0x8}, {0x7, 0xa, 0xfffffffc, 0x80000001, 0x7b, 0x2}, {0x7, 0x9, 0xee, 0x800, 0x1000, 0x9}, {0x10, 0x5, 0x57a2a808, 0x80000000, 0x7fff, 0x5}, {0x729, 0x25, 0x6, 0x6, 0x8, 0x4}, {0x2, 0x406, 0xc209, 0x8, 0x0, 0xfffffffc}, {0x1, 0x7, 0x8, 0xfffffffb, 0x80000000, 0x4}, {0x1, 0x5, 0x8, 0x8000, 0x1, 0x7f}, {0x8001, 0xf42, 0x1, 0x3, 0x5, 0x430}, {0x2, 0xfffffff4, 0x5, 0xd, 0xc8, 0x7}, {0x6, 0x7, 0x9, 0x8, 0x5, 0x5}, {0x5, 0x8000000, 0x7, 0x5, 0x401, 0x9}, {0x1, 0x6, 0x1ff, 0xa8de, 0x0, 0x7b}, {0x0, 0xd, 0x7fff, 0x5, 0x2, 0x7}, {0xe, 0xfffffffc, 0x7fffffff, 0x7, 0x5, 0x200}, {0x81, 0xaa, 0x1e, 0x9, 0x14fc, 0x8}, {0x9, 0xffffffff, 0x40, 0x6, 0x13b, 0xeacd}, {0x100020, 0xff, 0x6, 0x81, 0x0, 0x6}, {0x2, 0xe, 0xb, 0x0, 0x6, 0x2}, {0x8, 0x3, 0x5, 0x4, 0x4, 0x2}, {0x84, 0x3ff, 0x3d0c, 0x1, 0x8, 0x2}, {0x4, 0x4, 0xb85c, 0x1, 0x7, 0x6}, {0x3, 0xc6, 0x0, 0x1, 0x2, 0x3}, {0x7, 0x2, 0x8000, 0x2, 0x7fffffff, 0x79}, {0x6, 0x80000000, 0xfffffffe, 0x7, 0x3, 0x8}, {0xae, 0x3, 0x600, 0x9, 0xff, 0x3}, {0x1, 0xed5, 0x6de6, 0x10, 0x380000, 0x789}, {0x4, 0x7074, 0x32b, 0x3, 0xf}, {0x1ff, 0x7, 0x1, 0x96, 0x1, 0xc}, {0x9, 0x3, 0x0, 0x9, 0x1ff, 0x8}, {0x1, 0x7d, 0x8, 0x7, 0x2, 0x3}, {0xfffff001, 0x9, 0x65d, 0x3c10, 0x7, 0x53}, {0x7, 0x0, 0x7, 0x101, 0x9, 0x1}, {0x7, 0x9, 0xd, 0x6, 0xfffffff7, 0x827}, {0x113, 0xfffffffe, 0x2, 0x400, 0x28, 0x81}, {0xfff, 0x6, 0x7, 0x40, 0x6, 0x10}, {0xc, 0x9, 0x8001, 0x0, 0x9, 0x6}, {0x5, 0x11b9, 0x401, 0x4, 0x2, 0x6}, {0x9, 0x100, 0x400, 0x9497, 0x101, 0x84b7}, {0xb4, 0xb85, 0x7, 0x3, 0x51, 0x5}, {0x2, 0x4, 0x5, 0xf, 0xf, 0x1283}, {0xfffffff8, 0x1c0000, 0x2, 0x10001, 0x1, 0x6}, {0x61, 0x80, 0x1, 0x10000, 0x5, 0x8}, {0x8, 0x6, 0xc53, 0x80000000, 0x7, 0x5}, {0x0, 0x6, 0x5, 0x2, 0xdc, 0x6}, {0x0, 0xfffffffc, 0x101, 0x6cb685f2, 0x7, 0x1}, {0x0, 0xc3, 0x4, 0x5, 0x0, 0x9}, {0x8, 0xf7b5, 0x5, 0x5, 0x9, 0x7}, {0x1, 0x67f, 0x5689f935, 0x8, 0x6db, 0xff}, {0x1, 0x400, 0x3, 0x1e1, 0xa, 0x80000000}, {0xea, 0x5, 0x8, 0x5, 0x7fff, 0x1000}, {0x6, 0x5, 0x7, 0x0, 0x6, 0x80000000}, {0x9, 0x6, 0x7, 0x1, 0x9, 0x100}, {0x7202, 0x4, 0x5024, 0xf9, 0x6, 0x40}, {0x5, 0x10, 0x4, 0x5, 0xd, 0x8}, {0x1537, 0x101, 0x6, 0x1, 0x3, 0x6b}, {0x69, 0x400, 0x3, 0x81, 0xc6, 0x7fff}, {0x10001, 0x1, 0x3, 0x7fffffff, 0x7, 0x10001}, {0xcdc, 0x1, 0x7, 0x0, 0x8}, {0x1, 0x168dccf, 0x3, 0x3, 0x7fff, 0x6}, {0x3, 0x4, 0x7fff, 0x7, 0xaf68, 0x403}, {0x9, 0x0, 0x7, 0x6, 0x6, 0x80000001}, {0x5, 0x200, 0x800, 0xd00000, 0x3, 0x8}, {0x8001, 0x5d, 0xffffffff, 0x42e, 0x8, 0x55}, {0x1970, 0x89, 0x6d, 0x460ebb44, 0x2, 0x2}, {0x951, 0x9, 0x3, 0x8, 0x1, 0x2}, {0x3, 0x8, 0x627b, 0x5, 0x6, 0x4}, {0x6, 0x3, 0x9fbc, 0x4, 0x1, 0x2}, {0x401, 0x6, 0x32d84255, 0xfa, 0x27f, 0x8000}, {0x0, 0x6, 0x3, 0xc, 0x8000, 0x40}, {0x5, 0x4, 0x1, 0x3, 0x0, 0x5}, {0x7f, 0x4, 0x7f, 0x10001, 0xff, 0x8}, {0x7, 0x96a3, 0x2, 0xd7, 0x6, 0x200}, {0x1, 0x5, 0x5, 0x37a3, 0x7, 0x8}, {0x81, 0x4, 0xd, 0xffffffff, 0x200, 0x4}, {0x4, 0x3ff, 0x7, 0x4, 0x4, 0x4}, {0x1, 0xffffffa4, 0x9, 0x2, 0x3}, {0xd, 0x0, 0x3ff, 0x9, 0x8, 0x48}, {0x2, 0x10001, 0x9, 0x2, 0x8, 0x9}, {0xf, 0x1, 0xe, 0x101, 0x2, 0xc88}], [{}, {0x5}, {}, {0x1}, {0x4}, {0x2, 0x1}, {0x3}, {}, {0x5}, {0x3}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x8cd778652b20be70, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0xa4f33433e7b7e23d, 0x1}, {0x4}, {0x0, 0x1}, {0x6}, {0x2, 0xa5b0c5c50171756a}, {0x3}, {}, {0x4}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x6}, {0x1}, {0x5, 0x1}, {0x5}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x2}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x4}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000060900020073797a30000000005800048054000180090001006d657461000000004400028008000140000056d6080003400000000008000140000000010800014000000009080001400000000b080002400000001e0800014000000015080003"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000005c0)={'pim6reg0\x00'}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r9) sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x11, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x17f) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_PROP_LIST]}, 0x34}}, 0x0) 8.999358504s ago: executing program 0 (id=2962): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000d40)={&(0x7f0000000540)=@can, 0x80, &(0x7f0000000600)=[{&(0x7f00000001c0)="4cfd2cfe3d24a06d29302d70d530e2309ba59747b88e8414e00af49a650ec9167a31a56fe463bd89b677fb69d2f1483d4703f3d71348", 0x36}, {&(0x7f00000006c0)="7457aa6a5a61c76ec987bff75f882eff9d22897612c7d0df90e27672dbf3f5605d24d2742cdd132cf0ad4ec0781623b79fe222b1357a83745dd8ea4b2a8c3722d631ea0c36b38566da849e091339c5a396e76acaf82847430971cc4bec11ed5c6dcb09b3a867b047f3031f9fc0f8b5012d25d1d9c5be2dc0507206a8e201609d95346c350e955e81be860a3f7b1e7ad9437ff02537687cf5763638170d4114532a3c3c1ccbd9b3683c29365f76affe0bb1921c58b3e5d642e5c86ea393b7895949cc961f5f5785247d0d0f3dddfb0f3e66f6", 0xd2}, {&(0x7f0000000240)="ac0d49522cc02b2bea519977975123e6ba8ce04a7da494b203267f312f8d8cf8e2", 0x21}, {&(0x7f00000003c0)="1dcd5fbd508131b0b8875d2b6d46009727d4f053f07ec1b797644be7f9c8f27336b41fe4a272cb049ea47fef3b529a72fec2f3a1047d21f20547cc4e0a262477", 0x40}, {&(0x7f00000005c0)="816f429c9318a924f9d2c34bb67dc4ebc73171ec494a3b64c21818cdc10a4183b0720dab4295084d7890f098bcb78e520dc695bf9ff67ae002210f", 0x3b}], 0x5, &(0x7f00000007c0)=[{0x18, 0x6, 0xfffffffd, "2fe04585fb8b88"}, {0x100, 0x10c, 0xc, "6caa3685a51bce7b44b495e112fdec146ba894ad15952228e5119a00d6820ca49d5274508c350e4b521b7ef32deeb90a04e7cbecea9112f0849be5101726af54a9f6e1a839fb93a2172ff132417ecaf18a6c6b16c10df4258ffd30186c529c5a85cfa9d1999ff652cce5847fcda39448b1b7859b9d87d8bee6f70b7cb4160101e577d0f23ffe512111e94c56c51e45c51f7174d9bf52cca3f97574d5621fd7f832bab75078b6e587168c6b5596658458cae71982f80a26b998fdeb9b6d361ac73f8e900daac704e643f3b596c68a87e2558101a00bdf71abcecb0b1b15496f807a322a69450226f2e4716aa7be"}, {0x88, 0x1, 0x30000, "1e3b28248ba43d1e7046b6140bc6ac4bc6f8fc5053d44a720bb449bf6bbf6562ae7f8d0a5a41f58638f381bf02f290f3eec5426887c900a8bdf2354941363c7124f543b15baf097c0b8faeee4a2fa825f1d1f4a575a86edab4365dc7b3d4d6220755299abe744127c2847857d6601f62cc19fcf2"}, {0xf8, 0x102, 0x200, "e93e3765a3e57910205b195327e0218a7c166ad4393a7f0ef4b4adee4f3cb8188e4b6d02d26797f2e09d9fc411ec433b4b985b8feeff2175d74f69549f3517b7a318643801efc4769846d6d3793cd6721f5a1708b436b1ef137fe3fd2889bc7da83f9d8f8f7dfb190aa0e6437eab764a724bfb5767e4e27f3c26cb6ec32418f82b3eb8b2e53ac43446574f72808ac3911e4334fae7d75bbae35b0ee786f710f7872bbb1469219555b38e64bbcc1701fa6bfbf81dfbf2fdad148a004754c291866ecfc7637701970d33e4bcad23d332c663cdfd7392a1340407936351c3640b93eb8d9f62"}, {0x40, 0x119, 0x9, "198bb7e8682786d3e0e9bc70990e7aff4531fcccef7ffec5582bf90cbb558fe3fdc362dc6b261fadea61dc0c45ab"}, {0x88, 0x101, 0x4, "f09deda981f254e80ac08deccdc3f1035df65eacb8367c406c6305ae2c4985f11fa8e8084af102fc3c23e607cd49a17cfc34e45eab3722cd7d9c0f2d0ab51c28bf06bee24f4a9aa5cafe04bbd4559c6d8de360390f21a4ebbe48ae1a2e5f169d368d9f82544b3aa56381d41d373d05ab4ec94f5a9939"}, {0x100, 0x113, 0x7, "4bf005d6ec6d3b04ac1df2459c4c761656539a442d77e5cd068710418d7c6d30d77ed0036d47a603f0168eddb17828b4da3723a9dd9c4851028cf28917cfbfa44bbea86e1870afd28be7def23661d520cc5af94737fb91c70b44f3c3697c5919dd3e2f9b000af234f63f347648ff6e161e2e56fd8bcc5422b9a68ec7d5282af5f18afa90da0e3c568f6432a339f16897ac4d65a07e58145b3d345b4b610febb487d64e350cd79848596856266906ce41203f2a80b3f2d5eb3a738889ec475ac1d816870b3ecdc29ee3e870496789c311dc6df40d1f076228f13701d7236b477d0a2ca77125535cef84"}, {0xf8, 0x118, 0x8, "3eb76b02ddbec7bad50dfcb49df2259cc9966fac421b95c265a2c69e29682eee2e5fa8eae3434aac81c3986581b63d9719efa3c1581901de782570fbaa57a3ed9327863fd242a9c9731876ad6f0b29aaa333a02e66953787d960728aa20059a52e66286737fd47fc4813ccb689af3116c55e39f6fdc30362eeb567296da3de85845d92906104bea3ac78e00ca2fbdadb7ad1be92b8efb71a2168092c328854dcbdf4e5a228e42ec749074f0a7ad288c6fbcf97e4cb43a65be11e41f8a82521e5c8345208951549e855ecc231c74edc94ba64b1b638c8a699a837d7a836cd1ec1ed"}], 0x558}, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0x81, @loopback, 0xfffffffa}}, 0x8, 0x0, 0x7, 0x9, 0x1}, &(0x7f0000000140)=0x98) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x700, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000480)={'ip_vti0\x00', r4, 0x80, 0x40, 0x93, 0xa, {{0x23, 0x4, 0x2, 0x2f, 0x8c, 0x68, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback, {[@cipso={0x86, 0x62, 0x3, [{0x6, 0x11, "30bce5a75fd4e59efe21e2ae98c750"}, {0x5, 0xf, "d24388afd64f78a8c987198708"}, {0x0, 0xf, "d82d692118c4ab19822ac1d3b9"}, {0x2, 0x7, "8febebaf7a"}, {0x6, 0x5, "f1edc6"}, {0x0, 0xc, "88e01391e65dc4bab632"}, {0x0, 0x3, '_'}, {0x5, 0xc, "d334c202037d46fd5b66"}, {0x2, 0x2}, {0x6, 0x4, "9792"}]}, @ssrr={0x89, 0x13, 0x70, [@rand_addr=0x64010102, @local, @dev={0xac, 0x14, 0x14, 0x3e}, @multicast1]}]}}}}}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000340)="89e7ee0c7cdad9b4b47380c988cafb2f51bbb2b5f21f85f55c141df9ca72056fb94c59a26ef700275f96479780c767954aa754b56f85426356bbca4b006ef8e7aadb3e9aa53425656a58", 0x4a}], 0x1) 6.608928583s ago: executing program 0 (id=2980): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x2, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000040)={'virt_wifi0\x00', @link_local}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x0}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a000014001000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe10000000001001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80080, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 6.125663335s ago: executing program 0 (id=2988): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0xfffffffd, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x1, 0x1, {@ip4=@loopback=0xff020000}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 6.005985361s ago: executing program 0 (id=2991): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080), 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x3, "416643c46427168209669d736b27af61"}}}]}, 0x48}}, 0x0) 5.872501505s ago: executing program 0 (id=2993): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffece}, 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000010004000200002a22f2abdd016b32dd96cff06f60000000"], 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x60b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d88a8", 0x12, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) r8 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f00000003c0)={[{0x2d, 'rlimit'}, {0x2b, 'hugetlb'}, {0x2b, 'cpuset'}, {0x2b, 'freezer'}, {0x2b, 'rlimit'}, {0x2b, 'blkio'}, {0x2d, 'cpuset'}, {0x2b, 'freezer'}]}, 0x42) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x4, 0x4, 0xff, 0xfffffff7, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x80, 0x7800, 0x9, 0xfffffff0}}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r10, &(0x7f0000000080)=[{&(0x7f0000000000)='Z%G}', 0x4}], 0x1, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0xa, '\x00', r9, r10, 0x1, 0x1}, 0x50) r12 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000380)={0x1, 0xfffffff8}, 0x8) sendmsg$nl_route_sched(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x18, 0x32, 0x1, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8800}, 0x20048030) socket(0x11, 0xa, 0x0) getsockopt$EBT_SO_GET_INFO(r11, 0x0, 0x80, &(0x7f0000000440)={'nat\x00', 0x0, 0x0, 0x0, [0x3, 0x4b1, 0x5, 0x1, 0x5, 0x3]}, &(0x7f00000004c0)=0x78) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000700)=ANY=[@ANYRESOCT=r10, @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x5d, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)={r13, &(0x7f00000001c0)="a294238a60599e0c170c975906b66fefb05768afcb889fda2d66465d950225082ac8e85b9d51", &(0x7f0000000340)=""/86, 0x5943bb55469cc16e}, 0x20) 4.884691406s ago: executing program 0 (id=3008): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="040100001600010000000000000000007f000001000000000000000000000000ff0100000000000000000000000000010000000300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000033000000fffffff95e3f801c8ab2c4587bc977f242ff000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe5d00000c0015005c07350001000000"], 0x104}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000000000008001240000000000500050002000000050004000000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0xffff0080) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x8) 1.763556136s ago: executing program 4 (id=3050): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x9d}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.588579169s ago: executing program 4 (id=3052): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r1, 0xff09, 0x110c2300fe) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x50) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000300)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xbc, 0x8, 0x8, 0x8000, 0x8}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)={0x14, 0x4, 0x6, 0x201}, 0x14}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0xb4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x400}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x6d, 0x7, 0x1, 0x0, "1b552f975e19ba580cf5593257f3b380f645c0b564798bf82eafa95f041863e9ba604c46aaf7ac63d69de7cda8a2bb65851a35808ba2ac2e1d90af8117020d5d89236d11971a177eed55a0c750b2a4ec88ab44f39452973d85c276ba8dcbba87924beeb2364a9dcca4"}]}], {0x14}}, 0xdc}}, 0x0) close(r5) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x4c) r6 = accept4(r4, 0x0, 0x0, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x8000, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup=r7, 0xc, 0x0, 0x1, &(0x7f0000000080)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0]}, 0x40) 1.411079782s ago: executing program 6 (id=3055): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xe, 0x21}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40c4}, 0x20000000) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r2, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x2, 0x2}, {0x7, 0x1}, {0xc, 0x2}, {0xf}, {0x4, 0x3}, {0x4, 0x2}, {0x5, 0x5}, {0x0, 0x1}], "e0f062ab91c270d3"}}]}, 0x38}, 0x1, 0x0, 0x0, 0x88050}, 0x800) (async) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r2, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x2, 0x2}, {0x7, 0x1}, {0xc, 0x2}, {0xf}, {0x4, 0x3}, {0x4, 0x2}, {0x5, 0x5}, {0x0, 0x1}], "e0f062ab91c270d3"}}]}, 0x38}, 0x1, 0x0, 0x0, 0x88050}, 0x800) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x0, 0x5, 0x56, @empty, @dev={0xfe, 0x80, '\x00', 0xf}, 0x20, 0x8, 0x8, 0x64}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x0, 0x5, 0x56, @empty, @dev={0xfe, 0x80, '\x00', 0xf}, 0x20, 0x8, 0x8, 0x64}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x8, 0x2, 0x44, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, @empty, 0x20, 0xff30, 0x9, 0x80}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000640)={'erspan0\x00', &(0x7f0000000480)={'tunl0\x00', 0x0, 0x8, 0x7800, 0x9d14, 0x2, {{0x5b, 0x4, 0x1, 0x6, 0x16c, 0x65, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x24}, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0x3c, 0xf8, 0x3, 0x9, [{@local, 0x240}, {@multicast1, 0xfffff800}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x7}, {@loopback, 0x8}, {@rand_addr=0x64010102, 0x8}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x5}, {@loopback, 0xfffffff7}]}, @rr={0x7, 0x7, 0xbb, [@broadcast]}, @rr={0x7, 0x23, 0x7d, [@loopback, @empty, @private=0xa010102, @rand_addr=0x64010101, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0xe}, @empty, @multicast2]}, @timestamp_prespec={0x44, 0x4c, 0xa3, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x14}}, {@private=0xa010102, 0x2}, {@multicast1, 0x6}, {@private=0xa010102, 0x3}, {@rand_addr=0x64010100, 0x6}, {@multicast2, 0xffffffff}, {@rand_addr=0x64010100, 0x3}, {@multicast1, 0x2}, {@multicast2, 0x2}]}, @cipso={0x86, 0xe, 0x1, [{0x5, 0x8, "3ad8bf3232ca"}]}, @end, @ssrr={0x89, 0x1f, 0xa, [@remote, @loopback, @multicast2, @loopback, @rand_addr=0x64010101, @multicast1, @multicast1]}, @rr={0x7, 0x1b, 0x1c, [@multicast2, @empty, @loopback, @remote, @multicast1, @multicast2]}, @timestamp_prespec={0x44, 0x3c, 0xd7, 0x3, 0x5, [{@multicast1, 0x24000000}, {@remote, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@multicast2, 0x15d}, {@remote, 0x1d4}, {@local, 0x7}, {@rand_addr=0x64010100, 0x4}]}, @rr={0x7, 0x1f, 0x8f, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @private=0xa010101, @local]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000640)={'erspan0\x00', &(0x7f0000000480)={'tunl0\x00', 0x0, 0x8, 0x7800, 0x9d14, 0x2, {{0x5b, 0x4, 0x1, 0x6, 0x16c, 0x65, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x24}, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0x3c, 0xf8, 0x3, 0x9, [{@local, 0x240}, {@multicast1, 0xfffff800}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x7}, {@loopback, 0x8}, {@rand_addr=0x64010102, 0x8}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x5}, {@loopback, 0xfffffff7}]}, @rr={0x7, 0x7, 0xbb, [@broadcast]}, @rr={0x7, 0x23, 0x7d, [@loopback, @empty, @private=0xa010102, @rand_addr=0x64010101, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0xe}, @empty, @multicast2]}, @timestamp_prespec={0x44, 0x4c, 0xa3, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x14}}, {@private=0xa010102, 0x2}, {@multicast1, 0x6}, {@private=0xa010102, 0x3}, {@rand_addr=0x64010100, 0x6}, {@multicast2, 0xffffffff}, {@rand_addr=0x64010100, 0x3}, {@multicast1, 0x2}, {@multicast2, 0x2}]}, @cipso={0x86, 0xe, 0x1, [{0x5, 0x8, "3ad8bf3232ca"}]}, @end, @ssrr={0x89, 0x1f, 0xa, [@remote, @loopback, @multicast2, @loopback, @rand_addr=0x64010101, @multicast1, @multicast1]}, @rr={0x7, 0x1b, 0x1c, [@multicast2, @empty, @loopback, @remote, @multicast1, @multicast2]}, @timestamp_prespec={0x44, 0x3c, 0xd7, 0x3, 0x5, [{@multicast1, 0x24000000}, {@remote, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@multicast2, 0x15d}, {@remote, 0x1d4}, {@local, 0x7}, {@rand_addr=0x64010100, 0x4}]}, @rr={0x7, 0x1f, 0x8f, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @private=0xa010101, @local]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000006c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000740)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000007c0)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000007c0)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000008c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x78, r4, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4002}, 0x80) syz_genetlink_get_family_id$wireguard(&(0x7f0000000900), r1) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000900), r1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r1) (async) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x58, &(0x7f00000009c0)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x58, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000001c00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000000a80)={0x1140, r11, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_MODES={0xa4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x9c, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc935}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'vlan0\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '/@$-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_WOL_SOPASS={0x1004, 0x3, "886383b5f8f524586c9fefca1eae8e664f9fb4253665a703eef0fab46dbb3d9d33597271f6fd30d91116b2c741abb2e86c8e412c53a4d6409b9705416392146dfcc724fd98a5f20fbfb3fcd83573d0be2160b3706e231475b9dc97a7a660e2b16831f2488e470ff681d564e67683afc065585654613a062a5dd6434e33362b5d22726e2de4e7ccc66770f1f81b82c80470a44aa5acfdb71190a25a0ce6cf9c43b363e958587e4f850a203614f2d467a516a17b7375f7c6855b768f6f85e37c599887eb25224c0354ebe827e7c5a8d6dadc4fb730d6e86c0a4b0a6b180be5f331a659d8499aa525b5004061795d3c0e2bff60ac4882ec4af5b0012ce061e2e771243a557092210d34e40c4d833d1d8e935a06757ea262c0386f09e3e335859e8ae56f574faa91c30348a71859bd369c620cc9e89ba8e4bf53376a0cdfb9d289d36deb098cf19e62593b6e3d035505a03cb6da00e7ee27828562fedb6aa9e5e10f16bf5129f977baf547310f20bce4d0b24b6f9482489d723cff1dac7cf30a0f5a3984062d53158f14aa2764b9b4aaa7f820d93bdd550cb84646d3db27fde659906b092e31eeffc8c9aa58ba5d633c9f3a3875322c436e2f71781d54cbad43f2fdf71a3fcd11c3d9f6a37a81065a38e613ffef5fed7b587fb55cd8ff2dcf267438eaba03249a5ce9f7c4550f4454a5ca3f1d5874a895aa3394bdbf10d8a3193eb8346b8b25a686cffbf6dbdeab0eeffbe43892690423f98f911a5fa257fd5e4c1c4c28d168507b9c62ef9bbf51fccbe17f2fa0dd481a8faa215d4a98859854dc7a50918ab684c85413a5e9905e2d1fe27cad79e73376ca4fb4f353dd7d35797c299f3a8ff9dd127fee2551c9fa18374c30afcbe4888fa17aa9e642e57ddcfa81030cbee18b8078768452b1e5ed27a5f27be97bb059d129552bacaf68c74cc818a3c044d6d483471c77f942ab119acda47af01e7a9c54027582a6410061be46ed076b2abdc1735264b146dd03cb4e5d0458554e6ea00818ee36cde7c8b43d869609856d1c44d4481ee7264ed11bb0972be5dd345faf21526d799a1f61f614f1e97da207b0cc26e5303db4f3d403ad0bbe545ab0df001d6c0b2b71854a648f8b49936c24b88c50264d7a7a42466800d339286c0459a851bc85e76c5bb4cb37f0fc88d808ea78ed3f44ab61bfc3f5c1a780dbdafdd90da2cebd0414d2c9f241159007b702e9795484ff34c140d71a9ac30cd62f14b8325b9d4beef80935fe80b7c132a0071a8f1952a5c351fe9ca3b4795d8eccf45a8a703fccaeee5f919fc0b1785f67f208a1f83483909ae9b3bdcdec04cf7ec02bc5fb05cd7e76d5ac55f77cddbb39414874130ff8bdb3b562bd458ef83877ffac065ee58f63cff359f6d55db83ddc5b7bc2b5972d995d31a07c5fe47eb6e2c14b71518c8e64ba0276ce02092796ee0b664eaeea1c18d2557cc532b32b21f3d533f33b5656a85b09be8246a008b66f9a7df1c4f763afa5f28ba49d769e4883cc1133e4d0dcaa53796f158e750b24e36f28f4043ab44a3d7ca00970022f1ae04cb17f2321d3026b7297670f0060b54665237f9371c9b3dff37dd8e13cfac99921070c73e31519936398d479e7e059ff017d09adf8ff3b8ab75b32c96236f1d37e4f351fc374030de98434f890f3ae2057aade52c45271987fbdbebea22e25d84e257e6c48e877e47767e8374916a3090dba08d77bf4f2d03fd0c58c43ad8c861ec9d7158eb8deff99333eb7c79205f6588b2c7fd569e215b4e1809cc8d9a1b88cb54cec0bc3d949c6f9ec4577883efab896ceb96d0488a76614109ba78418b569a8bb50236cc25ad2b63a0b1fbb964bb197a6469f079d855ed50ce04bf85e04de3a860ab22d30966ea7c92a337f24b59f11e57c02b803f9249520acba5ae859431e4a4772b44f6a9f72b4fa5980d2219019d864535f87f540754573cd55ba65266640ec9f9d3b382a570d632acf66ed52ad5833c15d905cd9cb98a8b20f4c5d58aacec633df6c973e829222c6ea0efabdf73d74646fd5c2d1df46dc796ccdacf9644dac10c967446171ffd44fa9e528c2c879026b7da9b7bc9102ac442046b8c24015a62369ecfb063d507c4e754d94a1aee229ba5109dd9b3de7b715555ef950e2fb6c4b845841a653a13215284193c02eae81709c5dc3fc84c7d9494606ff267d92d486ec7a5e53bb0b8d7862be5afdddbccb49e02078bc90fbc904573296f8b7f68cd503d690de55ab6a9888d4ba7fa0f01e374c8b6237eb06ada9ea61e5001162710b6773056ff3972ad45048f4bf91cc35648a86a4e664a468257b73a85584542fbbfbba91b3c3bce57c83c454e3172a384f4e422dc4cff48301725233fe8692280f6bb00accef5a0db4d7f3bb864daf097a7e1de83747f39552e0ca5bab3c1a5e4866db485a39ee463c2fb332cf79f7bf76c4a85ac139533bce1843062fcf3b5c1885100d4f910be98c9e1f4736cbed0da65ef4a4563807b2b24048cce3d6cda69dbd5ff362d03678aac475b5a32e35bfbfbd1cd7ff651144603b0190b93f9bf769e780d42ae4bc11efed5014b92f550dc879bcba2e18484e3a05e9dd24d4f34a8327e0b9abfb47c25b094e8b212536cbf6b7188b725ff2734439416170cc8dfbe11095525c24307e36e8e51a7bcfcbcf75940eda19808e3eaeed05b29c7be1f0a227e5595a2170c424bcc7243ffccaf43658801966c0a307ddda88a28f6921dd657fe5b1d58df927022528f245e40294e11265d49fec9c14679d3036dad19422bdcae8bc5aec414d1525025b7584a06dbdd05b1cbd9facbb9cf694d9981065965cb1fdd3b1cf9c7d0b350695b48702fcbaa9e1ead8e839bdf9d9fc78f2059221ed12f53227e95acd9dc13a05c3214b3116738030d2a8acafe477706f1af1db468826017d49fe3960ee4663c35833420774139f3c662c91013236a61254cfd67977b574c2f87f9597c487998a8b07feae9b8d057cf693b25d18ba029e6e1d92824f4ef9bfde1391079c85cd02901e4dfd983ed392d623fd7ac43ce80b980ea352bbf0f26296240d07a16d48028f58462bd1c29fa1e956eb741b5753bfdc35889ff70de95e6e112b3c8fb294074280875829f1e21c9cdc3ba311640b2804a7550efc5418d5c737167164b091f0c7a707f8ac446ecf21ff5567c889cd57e0cab35c6877610fdf7985283f604b78f0c348b5e59fdfc1a2a5529ef05e68041b46b012686ab3add933f5ed94ec9582c5a10e0d9f0bfb2d7a1b7eadad681de642dd7f9397f2bbdb69c0efe9de98aa3fe811b0510a3181c3b79c3a0879314d9392948f5b8c8420eece71151e9f517edcde42dd7dd86b59cbfaff3247d80c537d6159ae9b6cfb80674d2c0c5d218e70a6cda3dc513f6c26f824ef57f2439d1587422b15b7e51912fe779335ed671451a13bee1b6ccb78aa207ade73470d8a4b6dd782a3ca52b27c4b9c3118467e69e275e513017f5710985bbd61856f75d11404d4d07c6969bf433e40cc5a718cf67e87f8d077cba20a2e31555676c55e6a622e6ba997a91f929ec8f091c3792490ad0c53aabeeab4e890c7d083806202c702dbe212a0ae35ca50b44f9ccd55c31850aee91edb9224ce3f539a75475d8bc5226f545ac3cbd788c75619bc6894d2b0c3926ae34b3d63f30f797a167c8be0737142504ea80c0207043292541a453d7fc7011b959149046e6ff9d7072f0ef79bc970e17064cb8fce9e81b555cccf091212179eac8ac50fec2b5310fadcf1d491fd8a97a8e9657840e970f75e504538a6616eba853289ca8456782a089467230e27a67111679322403ba39f107637cfa715d674d5303f57582e72df4f8f310081085092779551ce50cf776f4e6921f543d4a42321cd14a73d511a623e461fae740216959b2233bb946cc456625e1733a76df287b1d4696cbf33881fdb06dfd0774f8a42dc4ab6f89e46ffd9fbbf101597cf455b6a6bca9f17e6ec918b40dfb9ce4155553e2cd7e63da3078ab0e7ac0e1cb5ea165b5270104557e9556e23311d9f07a45c1d3fb3b4c402eff2ff3ebcec2bec610699038dace1c9a7d8e4f30aa3a684e348cba7fab4b81c492ccdf5c4fa8d1e8f12f07e04d68bfb189c33027a3726f954f51e3f22b8cbc7951300e3ba897fd1e69b48faf496f904a10d3166ca77863af4024ae0bf0eeb7324ea3f2633b9a1ea06e94f8f3ffe7c0b35a2d2584e432324763023719c3ad8c07c9febacb0bf7127d5f46ec9d5bdf449f467c641acbe0bca16d038d9b22dba3bc8ad982bae3400163e04b108edac66b5e7a3c9aa6ba27e1444742a7b271be80bd0ba37228548b3ec359d445ca1c790f904615e6b35e12a9ca315d7d3d48ae25526b9ebfdccd637553925cd0acfe2156ff85d01764516704b2093ae057202ae0e487a19e847c1caab5b4e1b07f39c458cd27273624183ee07ce74a7473857fc961943a639b623f4546d02235dccc8f30bb6be742a80891dfd72e9d6bc558c9ee115d404c8d42bfbb96437405ca315c74542ab908cc32efac221354354fcfc9a2c96f62777a44a3f8755899494e52e7de54a2b194e1ecf8212cc764d1a1e0e9dfdc18b6fa16161553ac322bbe98089652cd1767cdd8141bcfbbf7eddd34215a7654153b80c79532079849b03c2a337833266d041ff4fbc5ca688506c442b2de70955f71a017912b7558919a56ad37f4a5bea1f4968230651037eac33952af197086853ca7f6178b6cfbfc5e3eb7a12dbfdb864000bab41d94eebd54700c6634fdac55bbc18a9ec8363d2d26817713136372d2481f8b8bf1155ee3898d2ff91e34565ce328378d953346238df71e6503de927a48386f3856449aaac2ffb44096bfb9567a620389c3e0814ce3b46cc9be3873683f836e573329f168176f4106818b63742ea4c78ef1a5cc8ba39d000dec642057be9321a4bcf23d021308e489d4ac6121720dd49abed1124bcf551f1aa09b599f58dead9885aaa2fe262dda14c51fb40d15937660013a3970778d26a3b1a497273ba8284ff8d147cce7cc3d08faaa71da5f675b8f1a76290d7dfac43a7391dac275068459c372d85ac8a42a4ac40c7fbd6cbf928942e26f7ed7508531f3b8b6f2f94773e6c42cc9ff89e9618344da4aa5090ae40ac5717539cdd35ac2c18367e8f0527ba2701c7d8fd4d8f33593d06f1654606416bab46f232943a9a908be7a6c43a6765a275f749390cb3fbc9a664a312a1505c2adb9d6f77b6fede5a78645897ddeb37a9e85f9cc2d3ae497baa2c02506b40f7b01f8eee32896a9056f4eb29aaa52bd067f6e8d06f027128fd74df85abb5a0550f9f3d25f47ffd563ca801858642a16667a860fafa784ade8f8b1f8a9ebd6215d441bee1703e05f3699193a6d05e1d6561c234d8db5c75ce0568b03f9aea5ecdc387e39d106261f14e75f4d336f414443b0374d9ddf2febae0a4faa81bc8b1ca9ad6fb5040960bcc0ad8113d77b34c3be490eea4d5c1b71efb847cdf273c0dca5ee5c768a3ba42cd9c67b375ec4fe06b9c52df68bfe1086394366e2e98907e3a727d8ae17d67210f7eb427253ace6a0d926f2af226c8be2c3198f43a70449bdf1b7235bd2d2587c5d7c65ec9a31e4d913679c672b7787d622d353ebf15af87d8ba0dba3104da45e07fb2d750844824ff09050ec7870489fc749b5aba5b2e1e05239b5821afe1e9c265e79b840932a825ba5949ea54efc407c2373e682ba77b3ea56fbc2e364145e6c117c2a382d4a2d64874574057644f6e0c20c9d6901cd70c7fbd8b"}, @ETHTOOL_A_WOL_MODES={0x78, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x71, 0x4, "2c29cc05a99ce75804ce9eabff3c15870cf3133dc0314d2831ce2fe3a8c4963ef03606a13a244506ddb21e37571d0518e397ae1a4d4e8728f51da82cf33844f6ef99a9c10d58736196e4668bd2774384596c6108d113fee3b7476b24b09db1e3957e01d51a719f02376bc00ccd"}]}]}, 0x1140}, 0x1, 0x0, 0x0, 0x4800}, 0x20040080) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000001d80)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001c80)={0x94, 0x2, 0x8, 0x300, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3f}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a2}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x8004) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000001f40)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e00)={0x100, 0x0, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xfffffff8}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_TUPLE={0xa0, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3ec9}, @CTA_EXPECT_MASK={0x2c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7390f946}]}, 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000001f40)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e00)={0x100, 0x0, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xfffffff8}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_TUPLE={0xa0, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3ec9}, @CTA_EXPECT_MASK={0x2c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7390f946}]}, 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f00000020c0)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002080)={&(0x7f0000001fc0)={0x98, r2, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x534}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x3f, 0xbe, "0613855c58d236d922ea0b554e7f341c7270081ea8205dbf070bd1f92f80fdf76809ec6bc37e114e345de87c2e9bcf232d6df4d203439d130301d4"}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x21, 0x13, [{0x60}, {0x60, 0x1}, {0x1, 0x1}, {0x24}, {0x1b}, {0x1}, {0xb, 0x1}, {0x60, 0x1}, {0x24}, {0x18}, {0xb, 0x1}, {0x6c}, {0x1b, 0x1}, {0x2}, {0xc}, {0x4}, {0x1}, {0x6}, {0x36, 0x1}, {0x36}, {0xc, 0x1}, {0x36, 0x1}, {0x36}, {0x12}, {0x30, 0x1}, {0x17, 0x1}, {0xb}, {0x16, 0x1}, {0x6}]}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}]}, 0x98}, 0x1, 0x0, 0x0, 0x41005}, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) (async) r13 = socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r13, &(0x7f0000002100)="ed04d2a46ecb6e077498fae09419a0a9b7feb68f836a05bb11c45542bace2b21da592ffe0a29fb23f7fc4263c92753fa6ad937ea43fe395347c8b0c99cbc02311d870671403abe4d137b1b2f80665b617fb1da750c80beacd479509190726843d029588552becc8a18545f2184988561b9f95a48d28291676ae207ad9e8f7d8136b5346b22f468b03a838e468ad1", 0x8e, 0x20000043, &(0x7f00000021c0)={0x23, 0x8, 0x4f, 0x7f}, 0x10) r14 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r14, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x38, 0x1410, 0x400, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40c0}, 0x800) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r14, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x38, 0x1410, 0x400, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40c0}, 0x800) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002340), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r15, &(0x7f0000002540)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002500)={&(0x7f0000002380)={0x170, r16, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x110, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "ae15e89b18e40ca77391e5019ff5527949cc1b29ef2da3eaf51d7905c6"}}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "a9aedcc562b4df7b28c9a6b6ff7536deb754d6c661417ee95393df38b407"}}, @TIPC_NLA_NODE_ID={0x2f, 0x3, "7b1f3ee90a0284050491bce6054e8d799cb69014cbaba28294a6978d85fbe423a1925d6ec51568f0da460b"}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "bec69a97b74833944c2bd6931c6861b88c946a9408d0f9dc55af6727b7c865"}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xaa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffb}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040004) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000002580)={'bond0\x00'}) 1.287711867s ago: executing program 6 (id=3058): r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000129bd7000fcdbdf250e000000080004000200000008000500ff00000000000600000200000808000500060000001400028008800700f9ffffff0800030002000000"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20048890) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0xffffffffffffff1a, &(0x7f0000000200)={&(0x7f0000000040)=@getnexthop={0x20, 0x6a, 0x501, 0xfffffdbe, 0x25dfdbff, {}, [@NHA_MASTER={0x8, 0xa, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0xc0c4) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x2, @empty}]}, &(0x7f0000000180)=0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@TCA_INGRESS_BLOCK={0x0, 0xd, 0x80000000}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677470000c00028008000100", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) socket(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) (async) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000129bd7000fcdbdf250e000000080004000200000008000500ff00000000000600000200000808000500060000001400028008800700f9ffffff0800030002000000"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20048890) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0xffffffffffffff1a, &(0x7f0000000200)={&(0x7f0000000040)=@getnexthop={0x20, 0x6a, 0x501, 0xfffffdbe, 0x25dfdbff, {}, [@NHA_MASTER={0x8, 0xa, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0xc0c4) (async) socket$packet(0x11, 0x3, 0x300) (async) socket(0x2, 0x80805, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x2, @empty}]}, &(0x7f0000000180)=0x10) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@TCA_INGRESS_BLOCK={0x0, 0xd, 0x80000000}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677470000c00028008000100", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) (async) 1.250981239s ago: executing program 2 (id=3060): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=@ipv4_delroute={0x20, 0x18, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x8}, [@RTA_METRICS={0x4}]}, 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000600), &(0x7f0000000280)=0x68) recvmsg$unix(r0, &(0x7f00000002c0)={&(0x7f0000000140), 0x6e, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/65, 0x41}, {&(0x7f0000000340)=""/101, 0x65}, {&(0x7f0000000740)=""/174, 0xae}], 0x3, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x60) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0x4}, {0x2, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 1.022943819s ago: executing program 6 (id=3062): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r1, 0x0, 0x0, 0x48094) (async) r2 = socket$alg(0x26, 0x5, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000016c0)=[{{&(0x7f0000001300)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001940)=[{&(0x7f0000001340)='Y', 0x1}, {0x0, 0x18}], 0x2}}], 0x1, 0x0) (async) getpeername$llc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x1, 0x9}}}}}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r5, 0xfffffffd) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001000), 0x581, 0x40000000, 0x0) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) (async) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x3a}, {0x18, 0x110, 0x8000000, "025f0dc359"}], 0x28}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newqdisc={0xa4, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x13a260736e98a861}, @TCA_TBF_PBURST={0x8, 0x7, 0x1cdf}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x766c, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x6, 0x3, 0x9, 0x1, 0x54, 0x101}}, {0x4}}]}]}, 0xa4}}, 0x240040d4) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000200)=r8, 0x4) (async) getsockopt$sock_buf(r7, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x104}, 0x1, 0x0, 0x0, 0x20044895}, 0x800) (async) socket$igmp(0x2, 0x3, 0x2) 998.337703ms ago: executing program 3 (id=3063): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8f7ffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x5}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000003000000000000faff000000cd000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0xccea7a0d5ced4d05}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x1000000, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r8, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x31, &(0x7f0000000640), 0x4) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x403, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r2}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r7}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8f7ffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x5}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000003000000000000faff000000cd000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0xccea7a0d5ced4d05}, 0x4000800) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x1000000, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$kcm(0x2, 0x2, 0x0) (async) setsockopt$sock_attach_bpf(r8, 0x1, 0xf, &(0x7f00000002c0), 0x161) (async) sendmsg$inet(r8, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) (async) setsockopt$sock_attach_bpf(r8, 0x1, 0x31, &(0x7f0000000640), 0x4) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x403, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r2}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r7}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0) (async) 871.918717ms ago: executing program 2 (id=3064): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, r2, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x4010) (async) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r2, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffc}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4c044}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000081000fffa", @ANYRES32=0x0, @ANYBLOB="37ec000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r3, @ANYBLOB="08000400ff010000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001080)=ANY=[@ANYBLOB="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"/2295], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) socket(0x9, 0x1, 0x10000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x158, 0xb, 0x1, 0x201, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x5}, [@generic="30044db7332924844b17dc9f340b69dfeebb0c96cfda82d9d6b171ead47a10f5bc5dfc6b326870e0245127bc791b9c49850a0e465809e080264dbb08b2b5cbc1f9b3c954b2268ac619581e0d963c8fd0d9fb9761f8d0d49d707eee291b183a79cb1c379e73983500bb93c59e843ce00ed63492742293d395357d5b40060d435f937da6557ef4a72bd2c0d69e5170b17dba0e0b89afb1962e40e4a9ff88747f6529b086", @generic="ecaced2c634aefc97ee50ebb9347e14be1fcd88e382290846f32b5fc9553f5d7d877297f74aebf9272f2d7e8a6d0a5d00605fb781e84415bac949bf1cd29ec6f4d07f4dfd687c8f1269c7d2208de50c2f029ffcb08f8c98de4e102e868876efa547975349fa06a7cb81558eda717bc6f00d8efd27d43683cdbb8a308ceb1481697f6403c2e29b1f3fe0b1d82c758526522946d21b639489ed21b9a7bc66991"]}, 0x158}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 870.106738ms ago: executing program 6 (id=3065): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) openat$cgroup_type(r1, &(0x7f0000000000), 0x2, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000500), 0x4) r3 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x547b31180522e14c}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast}, 0x0, @in6=@private1}}, 0xe4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001800)={'wlan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002e40), r9) sendmsg$NL80211_CMD_NEW_MPATH(r9, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000002e80)={0x1c, r10, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20044884) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000400)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000680)={0x24, r5, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) connect$inet6(r3, &(0x7f00000000c0), 0x1c) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004050}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r11, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r5, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048040}, 0x40844) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x0, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c) 833.199715ms ago: executing program 3 (id=3066): syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000e8ff000003424203"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x1e}}, &(0x7f0000000480)='GPL\x00'}, 0x80) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x30, 0x1e, 0x1, 0xfffffffc, 0x0, {0x7, 0x0, 0x0, r2}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x9}]}, 0x30}}, 0x48000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x864, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x200000}]}) close(0x3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r9, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r11 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r11, 0x89e0, &(0x7f0000000180)={r9, r10}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYRES8=r12, @ANYRES16=r12, @ANYBLOB="e38c8a64a8368fb8dfaabe4ed27b6346afba", @ANYRES32=r13, @ANYBLOB="0c009900ff0700007400e3ff1300040073797a6b616c6c6572300000000000000800050004000000"], 0x44}, 0x1, 0x0, 0x0, 0x8081}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x1407, 0x100, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x4001) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r5, 0x208, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4040810) 796.085876ms ago: executing program 2 (id=3067): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0175de31562ee4cbcf19670d69f036c8a11c46eca735f77bf525ebc0b780d8f419f47a3d4f427f83bc239e6ce6f658a3892361594a52f2645570e2f570b6cba26e9d69c9ca151efebea654739daff38a"], 0x48) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404000000c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a3449abe802f5ab3e89cf6cfdffffffb8580218ce740068720000074e8b1715807ea0ca469e46968eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000000000000005335000000143ea70c2ab40c7cb70c943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a33e680846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2200af6c7784a1975fa807de38a3a61e44a9ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf652e28e700000000000000b24478a78a0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8ff7e7d1c94c450503009688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0000f5e1671bc5eb7739daa7820a91cb0e732df2ae1d39c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b4cbaf5a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13e434aae9df81ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a384002421d898913c45a9ac091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c045a17e9a61c3b064e679508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd911e0e5f00019be25b5910a3193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4218cea744b332ab232a09cf1ec375627074ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b8840558b3f918d675a79907a72a8252cd3fbaea5d3006a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbdf6ad488f43f46b2536f175f46dfb27d522946727024de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc856df00000000000000000000dfa4c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5d00f26126d4cf2c73e5f94030000000000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d0e68d7eef5d32d5fcc7923d7544fa492aa38717481c55e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62fc9dfffeb13b4858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1ef90ed4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1af45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d78429d358aa54b4b49926c4be9ee4659153d9f9f5d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000d0267ac40d1130a9000000000045f50812a1a0530b02baed19f4c977ac0d397ed6371ec589bf5943690250bdfa5b676d5d53d2ab3aeee1a6910c1a33b6c06c93386768f8b1bb27ec31cffbd4f5c7b0c2e14e4fc6c2f089ab08567254e93780afdddefb3f0d2143ad73c0bf2467859049d46dc5aa91f918a307e7dcaaccd6cbe66e8a04d201392a487f681f82528a800e27d65200ae10e1b5d39a29d8a2c8ed2dfa77e21249b45806733e674a9e8e72ad1cb0d3bfadb00a18a5008ea1e4c8fb93d311f52a476c576a3f65c9bdd4e4b870aed4cb9906a8aa25986e6e30be249d9911114b42b2fb51168e56000a62b794c193f7797ebeb7f8b91c70b6e720af06ecfcfb89a2d5a25f"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x18000000000002a0, 0x160, 0x0, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x7ec, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc083}, 0x2000400c) (async) syz_emit_ethernet(0x86, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800450000780000000200119078000000000000000000000000006490780200000000000000000000009d42a08597d3b2f44ac89b1b52cc6728d6697d4cebc8f2f062c6f91f224aaacc99bd3410936eefeb3ea898dafab974aa96deedc95f5d10a12027128db2e9bdf6f838a300aff90e19ecdf00b206000000"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d000100000000000400000007000000", @ANYRES32=r6, @ANYBLOB="800002000a0002"], 0x28}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000780)={0x3a4, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4000000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x82}]}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc985}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x39}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x94}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x400}]}, @TIPC_NLA_NODE={0xb0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa9, 0x3, "75880bc6a758990e05b428fce57c58ad4b07934fdd81ff1a99caa8f493aefddbe1850109764d47f1632a3a4c115705c36d24ae0ecea6892afcc8143962ed09e2a94cfed3af474804ef447f222dd5bf87eb491e36e0cb73846cc10ba3128648d4422c6ae3e5ae3ff56cfa3c40c646bba91d997f621a6cec87b6540119b8879d4c9a93dfa05834823656787210b4f019aba274260123bfab022c8d62cfdda3586ad96f174e21"}]}, @TIPC_NLA_NODE={0xec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xc2, 0x3, "1bcf93638fb72d4b711f3152d6b6bdc0bad2ede4e57ebcdbb16692ed9329102abfeb0144a06d3f59aeb682203745735e9ff6998f0efacf582cac344633e1a94c69deef901d976199ab80d2296ea24ad2ff803ab41481233c57d552e9bd1bd2b65fb888968f1819e725ec71e9a5a2abf70e6d726161a61d35141b0499980456677437db94f9c4affa72c9f49e53f7ca91d86ac3921aff50265505695fbce637fde080ca6d1adc8fa5311fd09683f946576f9f57bb5f0d80f516edef92ddf3"}, @TIPC_NLA_NODE_ID={0x1e, 0x3, "53cc4d278ef2d79ad0159dfb13cff281130233b7071f57974a3d"}]}, @TIPC_NLA_BEARER={0xec, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x40, @mcast1, 0xfffffffc}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x9, @local, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x700}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vcan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}]}, 0x3a4}, 0x1, 0x0, 0x0, 0x24044811}, 0x4008010) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fedbdf253700000008000300", @ANYRES32=r8, @ANYBLOB="080057000600000008003dc475557a6b43849bfaffffff"], 0x2c}, 0x1, 0x0, 0x0, 0x4000811}, 0x20044000) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_REVISION_MATCH(r10, 0x0, 0x42, &(0x7f00000003c0)={'ah\x00'}, &(0x7f0000000400)=0x1e) (async) sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="10010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e2000004e2300000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e00fe8000000000000000000000000000bb0a0015005b0735003b000000"], 0x110}}, 0x0) (async) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r11, 0x0, 0xb, 0x0, 0x0) (async) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="040100001a0007002abd700000000000fe80000000000000000000000000001be07534c547cd3972aab618000001000000000000000000000000ffff00004e2200020000000000000000566d7780f7a0b027922517d4b9e4be690a49e6be8fed8a5b6859f984e02d64f3e8ca7f6af3db061c735e944a0f322674cba2197751f5866ef030577693822f1777979eddd824a48ea993", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000005a0000000000000000b40000000000000200000000000000010000007ffffffe0000000000000000000006000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x40) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r14, 0x0) (async) writev(r13, &(0x7f0000003500)=[{&(0x7f00000035c0)='42', 0x2}, {&(0x7f0000000080)='C&', 0x2}, {0x0}, {&(0x7f0000001240)="d3", 0x1}], 0x4) (async) sendmsg$nl_generic(r3, 0x0, 0x84) 707.507394ms ago: executing program 4 (id=3068): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010429bd7000fddbdf2505000000200001800d0001007564701e735c6d8d99"], 0x34}, 0x1, 0x0, 0x0, 0x4c444}, 0x4000140) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES16=r2, @ANYBLOB="04000000020000000400"/28], 0x50) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x2, 0x0, 0x4}}, 0x2e) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000cbd701004eb000005000000080009000200000008000c00a80a000008000b00000000000600010007000000"], 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x26) (async) connect$pppl2tp(r11, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x26) ioctl$PPPIOCGMRU(r11, 0x80047453, &(0x7f0000000100)) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x3}, {0x9}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x40004) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f00000001000000040000000500000003030400", @ANYRES32=r3, @ANYBLOB="0100"/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="04000000"], 0x50) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r12, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) socket(0x1, 0x803, 0x0) (async) socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c00028008000100080000000800050006afc1fe6710c32b6e02000000000000005d3b501f2d4a78f416a382e59ea6f0d9d08b7903f565d1291f6af8ffffffffffffffb3582be838d15c6131530f02889e34feab3e511cdb9f0bdda3", @ANYRES32=r13, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r13, @ANYBLOB], 0x4c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c00028008000100080000000800050006afc1fe6710c32b6e02000000000000005d3b501f2d4a78f416a382e59ea6f0d9d08b7903f565d1291f6af8ffffffffffffffb3582be838d15c6131530f02889e34feab3e511cdb9f0bdda3", @ANYRES32=r13, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r13, @ANYBLOB], 0x4c}}, 0x0) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) r15 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r15, 0x84, 0x7d, 0x0, &(0x7f0000000300)=0x9b) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan4\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r14, @ANYBLOB="20002bbd7000fbdbdf252e00000008002c000300000008000200", @ANYRES32=r16, @ANYBLOB="0a0001007770616e30000000"], 0x30}, 0x1, 0x0, 0x0, 0x88004}, 0x48041) 704.517333ms ago: executing program 6 (id=3069): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f00), r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f0000000180)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021501700001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000024170380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995afac076948000000f01600800c00054000000000000000000c00054000000000000000000c00044000000000000000000c00044000000000000000000600064019d20000ac0201802800028008000340000000000900020073797a3100000000080003400000000008000180000000003800028008000340000000000800018000000000080003400000000008000340000000000900020073797a300000000008000340000000002c00028008000340000000000900020073797a31000000000900020073797a32000000000800034000000000d0000100b408b1e286b5c8f7a7321d1f80c982b3c96b4dac7dead86aceee30544dfdb289f2cae899fc3fe86ee3f122505d76d6b5878270ecb40c37908d60b9ed31d97a3e0ee856f3cf3c2fdfee967991f8d1ef7fdce37b30f8842735e543ac808675a64f66eb37009373328ddf992e92b3a5765bd5f765d73c578babbb08efd7b59dab641a88f3099e34bb7fbc04cb298bb0df6eb0dc4ca79864758aff38b7192698c89435c5699f4a9222ad4a2c68c9356b741f04ef667f7a169b8976632c7cb98f18ba558bc302c7b73401c42a76160c0002800800034000000000440002800900020073797a310000000008000340000000000900020073797a32000000000900020073797a320000000008000180000000000900020073797a3200000000fc0001"], 0x17d4}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000002000010300000000fbdbdf25022000000000000000000000080001000000000008001b"], 0x2c}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xe, 0x1}, {0xffff, 0xffff}, {0x1e, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r13, 0x0, 0x0, 0x2000c040, &(0x7f0000000080)={0x11, 0x8, r12, 0x1, 0xd8, 0x6, @random="9af19b590d2b"}, 0x65) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000cbbc9e00", @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf2523000000050028000a0000000a0001007770616e33000000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 688.543706ms ago: executing program 2 (id=3070): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff01c}, {0x16}]}, 0x10) syz_emit_ethernet(0xfc8, &(0x7f00000011c0)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xfba, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @broadcast}, "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"}}}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0xc0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={r2, 0x3, 0x4, 0x7}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0xf, 0x0, r2, 0x4, '\x00', r4, r5, 0x0, 0x4, 0x4}, 0x50) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 608.040887ms ago: executing program 3 (id=3071): r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) close(r0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) r2 = syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/user\x00') splice(r0, &(0x7f00000000c0)=0x1000, r2, &(0x7f0000000100)=0x6, 0x2, 0x2) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000140)) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = accept4(r3, &(0x7f00000001c0)=@un=@abs, &(0x7f0000000240)=0x80, 0x80800) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x40, 0x20, 0x8, 0xd, {{0x27, 0x4, 0x2, 0x14, 0x9c, 0x67, 0x0, 0x8, 0x29, 0x0, @local, @private=0xa010100, {[@cipso={0x86, 0x1a, 0x0, [{0x5, 0xb, "64250ad79c1d41fd23"}, {0x6, 0x9, "26d6f4e55ca450"}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0xb9, 0x3, 0x6, [{@loopback, 0x4}]}, @rr={0x7, 0x13, 0xbd, [@multicast2, @empty, @empty, @empty]}, @cipso={0x86, 0x17, 0x3, [{0x7, 0xc, "2a41eaab6389e81baf83"}, {0x5, 0x5, "3c865c"}]}, @timestamp_prespec={0x44, 0x34, 0x91, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@multicast1}, {@empty, 0x10000}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x6}, {@local, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x25}]}]}}}}}) bind$xdp(r5, &(0x7f0000000380)={0x2c, 0xa, r6, 0x6}, 0x10) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000440)={r5, r3, 0x9, 0x49, &(0x7f00000003c0)="3dbe4689930944bb30eff120d6518bc5114da33a568ec70e78173f406d2c348eefc7d0d241ca07661ea1dcc7409cd328e600fe104084e96a37b42e1849020f3ccebed99221ac4a52a8", 0x8, 0x35, 0x4, 0x80, 0x3, 0x2, 0x3, 'syz1\x00'}) bind$xdp(r5, &(0x7f0000000500)={0x2c, 0xb, r6, 0x14}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x2, &(0x7f0000000580)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @jmp={0x5, 0x0, 0xebdfc95d7c1f8263, 0xb, 0x1, 0xffffffffffffffe0}], &(0x7f00000005c0)='syzkaller\x00', 0x5eb, 0x21, &(0x7f0000000600)=""/33, 0x41000, 0x20, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0xf, 0xdb, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[0x1], 0x0, 0x10, 0x4}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000540)='io_uring_submit_sqe\x00', r7, 0x0, 0x1}, 0x18) sendto$packet(r5, &(0x7f0000000800), 0x0, 0x8000, &(0x7f0000000840)={0x11, 0x15, 0x0, 0x1, 0x5, 0x6, @remote}, 0x14) openat$cgroup_procs(r4, &(0x7f0000000880)='tasks\x00', 0x2, 0x0) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@bloom_filter={0x1e, 0xd, 0x5, 0x0, 0x40, 0x1, 0x8, '\x00', r6, 0xffffffffffffffff, 0x3, 0x1, 0x3, 0x5}, 0x50) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c80)=@generic={&(0x7f0000000c40)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d40)={{r4, 0xffffffffffffffff}, &(0x7f0000000cc0), &(0x7f0000000d00)=r7}, 0x20) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x18, 0x16, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x6, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0x2e}, @map_val={0x18, 0x7, 0x2, 0x0, r12, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000ac0)='GPL\x00', 0x1, 0xb0, &(0x7f0000000b00)=""/176, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000c00)={0x5, 0x0, 0xfffffe01}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r13, r0, 0xffffffffffffffff, r8, r14], &(0x7f0000000dc0)=[{0x3, 0x4, 0x10, 0x5}, {0x0, 0x2, 0x8, 0xc}, {0x3, 0x3, 0x8, 0x5}, {0x3, 0x5, 0x0, 0xa}], 0x10, 0x8001}, 0x94) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000ec0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001000)={@cgroup=r9, 0x5, 0x1, 0x8, &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000f40)=[0x0, 0x0, 0x0], &(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001040)={r10, r16, 0x1, 0x0, @val=@netkit={@void, @value=r15, @void, @void, r17}}, 0x1c) readv(r12, &(0x7f00000014c0)=[{&(0x7f0000001080)=""/160, 0xa0}, {&(0x7f0000001140)=""/243, 0xf3}, {&(0x7f0000001240)=""/50, 0x32}, {&(0x7f0000001280)=""/33, 0x21}, {&(0x7f00000012c0)=""/233, 0xe9}, {&(0x7f00000013c0)=""/182, 0xb6}, {&(0x7f0000001480)=""/1, 0x1}], 0x7) r18 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x18, 0x1c, &(0x7f0000001580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@cb_func={0x18, 0xa}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @jmp={0x5, 0x1, 0xb, 0x6, 0x1, 0x6, 0xfffffffffffffffe}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x29}}, @generic={0x2, 0x3, 0x8, 0x3, 0x2}, @call={0x85, 0x0, 0x0, 0x6b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r13}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x1, 0x8, 0x7, 0x1, 0xfffffffffffffffc, 0xffffffffffffffff}]}, &(0x7f0000001680)='GPL\x00', 0x1, 0xc0, &(0x7f00000016c0)=""/192, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001780)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000017c0)={0x2, 0x9, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001800)=[r12], &(0x7f0000001840)=[{0x4, 0x4, 0x9, 0x7}, {0x4, 0x2, 0xb, 0x4}], 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001940)={&(0x7f0000001540)='sys_exit\x00', r18, 0x0, 0x5c76fc7b}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000019c0)={0x1b, 0x0, 0x0, 0x7f, 0x0, r12, 0x8, '\x00', 0x0, r9, 0x3, 0x1, 0x4}, 0x50) 428.448835ms ago: executing program 4 (id=3072): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @loopback, 0x1, "4f6f144a011a00000000000000000200", 0xd0, 0xfffffffc}, 0x3c) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x0}, 0x94) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000200000000000000010000130200"/49], &(0x7f0000000080)=""/233, 0x32, 0xe9, 0x1}, 0x28) socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x3}}) 426.833174ms ago: executing program 3 (id=3073): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x8946, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x80, 0x18}, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, 0x0, 0x0) (async, rerun: 32) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, 0x0, 0x1a) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@dev={0xac, 0x14, 0x14, 0x28}, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x3502, 0x2}, [@offload={0xc, 0x1c, {r6, 0x6}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x148}}, 0x0) (async) sendmsg$tipc(r2, &(0x7f0000000300)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x4}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000440)="5a342a8fc3f2d7c24053ea9ed9a8c374c5d7c69ba8b65d119267baafd296c96d957dafc6daef288163e1725ab1c583547272a76180743867ac4d0ff621822fb7deedb11cdb7aa3fe04ed845a2e831a8f4caa73fb786ace1cf6cb92a5b13ed5c876d369dd421c54429eb2415adad7872a766e4ec41039849aed78818e03e6bfbea10b7225197d5a71f794bae97986c06b9267cf4c411b3170f14e3d7cb56383f2633c3503b491b8fca415ce04a2ac516a5d047fcadb45acba3db24582189382dfff8c4d99d60511620169806301a06c57ae4c25a800662de7c1522c9391a33ec05902b3c8f22a9aeae83644be9aa6071b5f", 0xf1}, {&(0x7f0000000e80)="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", 0x1000}, {&(0x7f0000000100)="1dcba37804430bdca171d918f7254fcfa9c169074baad76d97cabb51930ba77259fc818e6d4df1feda1a8fed714ffd429684b12eb21668d296f4ec6d2368cd7e8671d9a8ab5fa01e7cf5c4c40c5ac2a4eb2139b1b490cb9f21620c9af75f07c078f5a3e71680d33f20dbec123ca9", 0x6e}, {&(0x7f00000001c0)="6fdbbce8c1cdac769017f7c2929808ff4047342feb30fbc1fb4b33ce366356fcb78b4b15e60c240fb932e30d8856b689e46f4cbabadc79b744a8890bf00528e693689f6cab14f4", 0x47}], 0x4, &(0x7f0000000540)="e411180c7db539e6f6ab524a67d6e05602da2b1afb6bb4d453872e837d1070a9b63dd94461c5fb7dbb6e51fa58b694afeab25813530917e42230bb85dc9d8212b2cbb27a1866ab5f95256a53b5dd72192e9fcd49e699c501048f84f3449c3c593c41ca381c61fa458f9c037539db14d343f29f01ace76b9876e5990fbc4a0309", 0x80, 0x2005c040}, 0x20000000) (async) sendmsg$tipc(r3, &(0x7f0000003040)={&(0x7f00000005c0)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x3}}, 0x10, &(0x7f0000002f40)=[{&(0x7f0000000600)="ab70b25163c45e2370d20a9f8724bdc2922fbaa9c19c4ea554a1b4177bff50e8dd9160f78a735624c53d6cb4cf28069555826465061854c67cea77595dad7dcb63a0ad232b87afbe9b62261f2e7e3970ddb96e3a5d83f22fc1c6a7d240fdebeed8b90e0280db9942911391765110a314f4c0d6d8258ae39b0e0786d777df65ad5f43f3fc18a8291489cdce145f247a6e49329b1397920d5cfe1af13fdc4b7fc78886daa852f12867d35e57ceb9e864e4454398f39b7e779b5b77173a3b384c350276db4d8134bdd0c0fa", 0xca}, {&(0x7f0000000700)="b4ad0d6d732e0fdc58d1af87e5095fcc88ed03bfd856053053f7129e1c8b8aebafc50574ac66432953f417b2f0968c352fa77c7f1603f1943a55e91e18cbe1e3722c51511c4a5bfcc3657da06696ceabe2e662adb3696c5d5167edc6b6ae4e0eda071060d335480e0b469545a1297ff078c5b8dcc55d204dc8e6013c0d016e1bef4686caa3e7e15316b7ab7f96ae5aee64e28f6d9444ba4f448f173f7bf88be0c954a278bd285bbc3ab812f9d6bb1b824215", 0xb2}, {&(0x7f00000009c0)="287645d09fd877faa907bc88f7712b147cdaf3c4fa737c60ae25173a4f9469b5e66f661ec090d90e8b9bf61925c4294e825863c14322c089f207b86c4077374e5b7d15cc3afc77f9fa2aed07ebc64d68213ae2a79e11869e6d7b0e5281f6f4063930136cdcc5f32421629b0d52251f21d29b95cc566d4c7a315fcedd4fc6b15b17ffb90eec04d3fd", 0x88}, {&(0x7f0000000a80)="ce1f6b679c2f2ae151cd2b6b43aedeea83c2d5dce7f45f21cfa8d9ade63bf96ddff8fd50ab98128d0358babdff0e516ba1f5b7f6158e3b4b28e31c9ce56409292b62560a9fa8810d64500ae0b0cd0bcdeebaf1f77cf54ba6b13a287d8a36367eac2774bf283d06569ee9e4b9f392748a30b13134d9b5b3ce135f7e50668b8a4488d76b4e5fed2e8f9a961cc2ee5307b539535b12d838a762a38295d6a280dca350aa2c4dd8ef43f2594d815681e1cc98e208fd7d37510234fd03d435520044175c8035370e278007f9684903fdd0710952b44a0a41653ae20cbc28de54b3cd9f88c0cb299019d0c220c8dadfe563fead1bd4db", 0xf3}, {&(0x7f0000000b80)="258dbd342acba348eb4732c1940a4a4fb37e30a9487ceb382fd83f0321e142eab15e9f228e26cd23619298912f480bf6d1b8f27f30beb64507825ae2b8d5a6b1c8658415f7d6488afa0131a66a645c58b88e403f960c32729938d1a7e26d0d913dbc634e6e23ab91b07dfa400b0e41d7f10e0b2fda8f1459e218640fd52729959b57be8baf9b6741a14f914012046921c4be14a8a51f7ae67c030941b431ac7f3af6759bd329c35d6ef6fbc01efff9ba8bbe1a4e022c84fc6e4186e018c192923f8782708dfc4f0cc1", 0xc9}, {&(0x7f0000001e80)="80bba6930e3dec0ffdabf16d82862d287bbe60846d51a7d1df43ac058cfa01c4e05f871c58fedd8038888c79ca07ef1c2a800f0080ef82b1a2e96b805a18d3dffd2a2f522de7d0e0f4b3beaa005788a9f9e365c76580b82c214176162536c4065189037dcd59fdb0a82d944831b4148e8636813b0a3d94b77254e018e115d58001d9a8424695bcf2617108a858d750f758c67c5c11c77b44139400d26568573d0f7f9d37728f8a8eb9b1d18a7c333fcf1cf303a1f9c1b7e5dcc0ca0ec6c211615f81c03b229eb07849afa9b9ad434549362793a56deca231458a84830fa765604b54d92e8d9e47807b83f6ce2b5db0edb79bf445613df842cc8c63ba7b1b68fa9f41ff98e9dd716629808fc397f1461eb859705961219d6a6064367bb10b5e9877daab8e1308e7c393ce96b3bac64e5cd6b9982f7efb817256da09691d1ab21c6a026f53f3da3c040724ca37193c21d15d357b31862aeaa51647b402c25dd8bee1080be6ce5ee8012f1e12e82078eb0e1193ee3d60da15268efde061e8ba75dfb7165052fe2b066f9758b8dec6fdeab12dfca3ced004c9e6bd05baf3ef8a99e501a2152fda4270c4c0ffcc30aba56c781f52694f9611b119b586d5331c14c56f1828ead459ec40e8a39206d29120a4c937053288a1a7b4a84f9239a3badee9afad937f4b34ad2c383d77fd1ebce14e48cd59e516ebf0ecb5a32715a74c269dbcfcf973e6546d6cd2d2e0e546d3e02a3d22c8d69af0a769200191c1311328325922227b341876ca438ada4ab27eba4c13ca245ae58589a3baec562c05aab6866d5cd07323ed984a839fdbd777aaa4facbddfd95aedb754bc90157318ccd06c0a28c03c9896f733ae85007b43788ef85537c418c7837752fc844dc249ee2213dcb6e98af463b3d5a4eaf1b77ab69d7d79f60c717d04181dca95903d812f799dde8db5c4ed1b5a1e4be9a7cafbb4b783492c867697bb0926f91053715f1666facbd0222cf36a894c15a4649ce07e831a34ba69a63f412eea3b33c84abe8e766a0a6a3df48781d5d99161a573a927b0ad642752aef9112b0f23fcc3e4a6286141e5ec76a9058a5757fa66775b191db8cf6baafff9a6ca70b5248939ceeab08e44289bee204f939a11fb2cfaa4a6f7458726880b6c7e821baa70fcd0e5e5a5ae41a9867a452e884cc091f3ee32557635ba33d085015d561e5db160f02965393129e9a0cdc957e8c4cdb754a911bc87d132479fcfc5d2aab0ddd9a4c87836642e788fd2e27d0a0801f39c396db90de64317e138406c72e42bdb0b129b88595c51bf342a2cf1a0aab7e86e3cd243bf14f186b3a1e568ed5fba047fb054e7e71182337169bd44e38d998949eb0181f356a527ebd51f05f2f11beba505827aab6c15d105b62f6ec621f185e3b0bf46272e5d117cea346ad197ce744571bd44b2a1d14f0d8e48b5acad48374b33f996ef507f38d3db030b9276a578f342c3da9cea6a0fc0ee299d4f358e8f3f6db9a6e7fccadae798ff16ba5a1ed496f44094e054e5e071ffc0002fc964df3e586cb2d1b3ba92de8f14dbb3dd87182ad46538a727e01179f367b366942cdb8adf7f5486933bd50c163e3778525f56ddc060bc22ef1b06d479b773175a175506775973a01218ffa5221890d562a24da2519c2e03a94eb9edae4f82ab4c68d404f8d00302f39c0e6d13f377ef67ff648873bfeb008f810baf73de7e0fd4836889703ba8507619e77b358274c86ae0960d97bd4b70257a71dec5501379b6c6b0c696ccfd2148e98fd712279c72ee3fbc1b73fe4075a0cc2baf32af11862ba61a5ded3cb9096a351a7b9404d060a5d43157aea558ad565b3b18f5f7f6762bb2bb2d57efb4491ff49eca2a9468ee6e1fc9b307a878256e66d545158d86a89023b0363c67e9bca1024a07d4aec9215ac888cc023d12db42f5907f45282a661b35817ea22f7e465fe74bbc79fd0e8de7594164c4ae6a0514e75460fa467dcb02645a73d87517b37866319edfe6360523049841e76d3f194e63b2762f774719123344418093f1a44963828a62bf9cd8b9aa2a44f522354c342d85bf3add4b60b425a6b921856c72e1c1c89b6f49b128b0b25d0d51f8621c8eee99ca6db28c8cda5e7ccf7b40cb31c33d6bba2f31c2f7a581d1d3522f165982f81da9f413d8372ac69df8fdb7ad6577277fdd84ab8c71303015cab2c523ca9bada68428d8e86e0a3f1e2c6920a8bf527e470027fbeaf7920757c0afc28b205ee10a44e9896a9adff3f38a725ddf96827fe3bf79806f1e67046921f3812a9b8de00fc8408a4b66698203bcb5992c735a7bc96b7250ba910b8428c4427cbc68b06fa839e6173c440c6698bf2e6b8666dfefceed6000f0d7e9e6fb4ec46d656c9958e8315ee005ff69f232e0be9a3ee2c3d132319b0b2b14a03a5e18b6b94b19845add85e2261630f5953509b459a8c87809299bed6255adb00b037729eda84b8de8964242e2610b3015b8d456d59884257e83cbd30e87ef3f27f0de6ba95474807d1b09f9a1ed1f607986caa3652209e58165219d7c0330269f4f11a8e8b82ce672d6f3bbf2ab60f4a8b995f65b2599d47318dc06ad91434e903ca5d9b490ce29c45d0c603b75a1ce42ddfe9d9cf3c419eeb81c7c760c48ca9c0f7778b2d37052be1f165e9b069ab48162566eac8a84c0a86b93dd20eae14aaae9a2521e4672ce9584cf6378d6e643c6a180a406b5cc5d4f29c2ce5ef5aa63d62990579680e4cda524e47ae6b990fb9a1d37b6be2a066ed350bcd0281150b7f2ce352dd16571e864408769b561365a21b90038350fab00d0175772f0b40d8a4709f9a81e6ebdafcc7a23d26b3d58021a8edbfc319120b1bf77762878f7840fc867903195eed6e7e7f4a3331a17aa12736971625d5d9dd812f78db9867aa6b99abe8bece8b156376b40900ee8dcb765dd487097155ba9eebf0e463d6d1b6c1351a61b8e6867b4887e4d868e933a7ba1bb5fb7f6a4e6540b857e7c4e23331b239026301da3e676cc2798bc2044bd271f68850d2f16184aa7c28ba3c1eb0c46caca5c152b82771632673c946cb58ee51058c742c30acd98f105a5accb5e6068edab8751533f3714bd5794035c38e9c59e67509bee272d0364b1549e74e9f510a564cc10b8d149b7f67eaba1371b8e8ae2bbaf83de4a44cffdb1dfc2d824466cca82f60b7ce49db00aa909fd6eaf44c064130638553e753ead7eb9da34d333174f0d69534951ae2a7999e0d6562e68618642b9262a7088b2b82a298fae6e3ec7d4708c103aad76d1f8b598e9b3dfc7704bee9472d595a1295f61073df264869cc26954625e4f60d98274f15138ae685b81cc360ce126ec9d330c3a1085168269939299cb614b1976c1269f681e2b329394aa6ad9a53fbddc08215926282384d3b65e8a3de5e7430ebd8eb637966d4c00ef84604270412c5b995b3333420e08dd855d0ea0f763c8e75d4e1205e830f02ebbcb9a14ee470340f3757400895881b451added95ec1a78fc183d7a3398b74a99207cb3abd33660a60621278d221fcd925cc6e019214cd03557271333baf0a9a337c039a0232b0eb0f247bd84c5449a8969db35dcee62342d3c25334b0ee743eb16c35200163681d0dda56c0fe778f20544477e6f79ff26126f8a183351f9488e99d80b4453a4877b2000d0bea67ed41c745e83c81345350f5d984e9993fcc98a7514540a3ef601298f9eb29ca20227823e96c77a2d00dd47527bf7d3aacc0a4dd0d13fc28bee8f189c8b458fe98d1fc2e533647b25695e53748c1681ef4eafab10ecf2153318121bdcbc4f394b1d96f62959ffebae805a4c9d6d1c1c67c89aa88e5150545edb7d47cdbba60392b5c13bed1fbb7c8d4cddf788c21a455368f911ce6ab0def670c4f424d27999e35d24f73fe2ce6cd245998619cf67f3e61171d21ed0f310c5fadbe18fb2f3c819c07f845bacd66d949576e429337d8112629e80ff729a184fbf987f42860c81ea60f19a38d7cee014b2b6e8bb98b9ddc8cf261ec03d846213c5fe012f6bb89b78b8c6f0bdf98fda8d2fa5320bc0d7bbb2f384164dd7e3d7b0662f0cfbfa3c9bcdc470b9610a48ea24219e9bc79c041483281b8badd1f86e82b82b5fe9eb76ddb7964a515591d4ea99f90d1a712a26838b6191deac2c61bed638fe5464e86b3cc9581ad6415712d60b40b03a6bf1cfd920d1d6b2b98a27115977538b103f756e858e61d4d12a076506f5478fb0c33d89b6bbee0ce19ab90e776b0c600d1b249c7ea1a45ffa72480f53265c9ce0874ce06da36b1c3d440ad37e98fe2e3a4d0388d473e9c7a308e0694d5470afc2b01176d71bac3b3dfdfbbadec8a4ae3b6a3b12092da8b85eec078633c7bbb1bcbdbaa43935fa1216eb82a2167558bc09e325dbfd956182e4a056a6afe3fa5628439e728b225bfdb1f79ab3069bdf9879c9449c004c7ceef282b4d139e4946c322e454a8211b0867db30a5f21a5f27c4033abec8d752e60d32b40726ea9ca9bea021ec7d70025e32961d5288f21742e1b42e8cd01607e053c2ff574040c475bedb281ff3892e38fea956250cd0d6a40d91d8e72dc475314498004541136bea50708131f3a8fdb31a511ec9253950ee31af6532716d67ed43f4616df77d5bf81ec239d14eb2d4cb54cec877b276642385930c198fd039a95763c2fb853d9e49b9c576a6b506e1b7818f35d3f44ca9c3d6b68b3a32c9957995af8798907bbbf2d7055af8f7b023f77220ecbfef6f8bcdf8435569d015d2c39f5e45855e7b0fb728c71d70bed6e688053d7b11ca08ac58a081c0bb8330aa6b7a987652e487d8009ccf64a57fe9ecd7c608c9b0390d264d7f33fb02faa74abe85d4c931f11d78eae14fa1173bbb394ee9d588e53376daafa07a29d97809df1e2dcb93c6358355380eef2fd9bc18677cbdd2006a5db33184356294e4fc3a84c459a338086726ca931ddde32129bf7d301e641ef860d3d96a8917de5cab684e131c37afc858b61b0800e4179df89a7b42a00a005ec17762a23695860666c05048e0c5ec393bcd8a1ad2a290ae169d3b6531f9e4e882fa664f5db12c5eff9b242eda21f5963358c5a4d01a9f1695f1aa539341407f1f4131bcc4995f22e301f6139e96b1e1e2553949c67d015c4416d7a6a7dffb8d6ede6df36bf90f9ab7ed7350b883441fe71113a873a1993e3d3df46e4b4a54243f6ed2bbb7308095385a7562c696812ceca4c832095ade4e965a587c2d4e0eeaa946a93989139d50e091d36798ef4fe3e3732c3d33da61529b9db9aa2da766d42ff38cdcc49338ffde83e74694e91f2408a6fa04b719b73d160732fc9f8a492a12c64e8ea6589cabf88c957a62c26b45d30d8d880aab045bccadb670a9299a28ca6ff8fcbc2f70f7a3f08acf15af61509f85fd217d5eb5799f95095ee246eaf91a126197acab99ce629bce8ffd424f360beee4c6bfdee31007ed4e4e8ff8eb1acf94370744354d0073fddefe4804af47fc7b39508f0e6a9dd5c7dd4ae2671e74585678ceecc286913c7db03f0a7acb70bb0d2817c8e29fb4a1a9a4f4effe67385c80d4ea6f0edbcbf7c2b79a1dc2e2e49ffb61b9b1123978456c51e793b346709c6862b0756ec4be64691de7ca72c35d65b90dd1f096945c37d719d8a503f109fc8fdbdccef495e48345f92442a40a4b6bf7f4199c3948a8e9cb6bad5f5ea958312ee47948a21cb1e450c5c8c168cc3a478bb13fce477fd86721cb8f5ffbb7aebcadad3e0224847c55abbbe44c4cefcfbc1fa7f7dbebf93d1", 0x1000}, {&(0x7f0000000c80)="8a11619bf03d11a22840233a1b4245952f21a4f521fd4a58f659fccc37defcbdce41c3ab009d5596dde9e3b8e8845f06a762fc143d0ea9c37eb6bc335aaff408ef8585370cf6f1d6fe60504d16e3600be10ce905a31e2615b717d709d2e77e2f238ef535e6b215c75d8e5319f4fc5d88f16d5849a812225a4f4fe2571bda2164adb6e41f225d1b8365300452c7a4b8ff07e559538c5d5b2392d86cb08c54c0fb5c7b5f0323bc3bc69caf0314c39ab37c26be923e82b00385f7e5822c32287a4447e96d849ba3ea3bb5a1cde71035f3e2233e08b8", 0xd4}, {&(0x7f0000002e80)="0edc416e0b30c4cccf306c0437580f0c53a436ba8606a3a99547e9fdf9b21e8eae1086377101a1f55e99ba3211fb338fc7c9b14ebd7b0f7420221c04a12560dd5c14c4b4f49b8f710f8ed4b4462286e635be7f24bc540136a3eaf5f521dbd976d5418d2f9f83c3ec6a99400588bb3c9e758676c63673625ce563e69a8f2f6bc809aceab8ea4666794f2f50bc7ba6ca38a1df70b3bd", 0x95}], 0x8, &(0x7f0000002fc0)="03478155f4d4fe80c54bc05497c9e04587801f0543ec82979da41fea97f9c906e5f8aa64e7d5f324734bdae1ae4579662579cc9fd8f4e94af0ba417f786857b0a308326ab3f53eb754c6ab4d2f5eea017c0c3217078ffea975e5a242a95da11c207518b78351bf864dd839523ed6536c1d58a5127fe6fb9d65c88c5451", 0x7d, 0x80}, 0x4000010) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r9 = accept$alg(r8, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000005500)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="77167ead34cd1eaf2108c04de96e99fa4435f9041368e8", 0x17}], 0x1}], 0x1, 0x4814) recvmmsg(r9, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000340)=""/21, 0x15}], 0x2}, 0x3}], 0x2, 0x2001, 0x0) (async) getpeername(r8, &(0x7f0000003080)=@generic, &(0x7f0000003100)=0x80) (async, rerun: 64) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x20008844) (rerun: 64) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) (async, rerun: 64) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000300000000000000"], 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc89000000000000b5090100000000009500000000000000b509000002000000639af0ff000000008709000000000000c39af0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000000000000b70000050000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 367.225108ms ago: executing program 4 (id=3074): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000001d00000000000000000a40000000160a030200000000000000000200fffdb46dfdc23c03fa0b18f4e8e80900020073797a32000000000900010073797a30000000001400038008000240000000000800014000000000140000001100010000000000000000000000000a"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan0\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}}, 0x0) 223.020733ms ago: executing program 2 (id=3075): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x26, 0x0, @void}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r1, r2, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x10, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="18150000", @ANYRES32=r2, @ANYBLOB="000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000003d850c00040000009c81ff7f0f0000001800005f5669e2000080000000000000fdffffff8500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000010085000000"], &(0x7f0000000100)='GPL\x00', 0xd0, 0x6d, &(0x7f0000000140)=""/109, 0x41100, 0x2, '\x00', r4, @fallback=0x17, r5, 0x8, &(0x7f00000002c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x9, 0x7, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000400)=[{0x4, 0x4, 0x5, 0x8}, {0x0, 0x4, 0xf, 0x4}, {0x0, 0x2, 0x5, 0xacee3e77be552122}], 0x10, 0x2}, 0x94) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x15}}]}, 0x1c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x9, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_MARK_MASK={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}]}, 0x24}, 0x1, 0x0, 0x0, 0x100}, 0x814) 144.031436ms ago: executing program 3 (id=3076): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x4, 0x0, &(0x7f0000000000)) (async) syz_emit_ethernet(0xf9, &(0x7f0000000040)={@local, @random="aea2eefe00", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @igmp={{0x16, 0x4, 0x2, 0x15, 0xe7, 0x66, 0x0, 0x8, 0x2, 0x0, @broadcast, @broadcast, {[@ra={0x94, 0x4}, @rr={0x7, 0x23, 0x48, [@remote, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @local, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100]}, @ssrr={0x89, 0x1b, 0x44, [@dev={0xac, 0x14, 0x14, 0x3f}, @local, @multicast2, @broadcast, @private=0xa010102, @loopback]}]}}, {0x3f, 0x40, 0x0, @multicast1, "ce8390300572c8dc2ca40bf24a4033eeba53273d7380718a6cb3eb0c89503fc7430ca0edfc8098bf3e4571a5efc22cca2765e610b29597a0e13b5ea1874681a93676b3e1c5224cac1f5307174c3761eb70feedeae1839e356656cbf1f73ee7aef1452b443f13f0f8bf38c410f451463e262b7713cabbf35406896559f06dc1bb3a3c7c64114ad9"}}}}}, 0x0) 123.199513ms ago: executing program 6 (id=3077): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000010000000000000000000000850000005300000085000000050000009500000000000000a94be0c51261be6a99fe3d0000a232d5e1f59f18f845f82e9a7bde9e8f4b9197701b547edf612a03f1737d95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x2b, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r0, 0x8, 0x2, 0x2}) setsockopt$MRT_PIM(r4, 0x0, 0xcf, &(0x7f0000000200)=0x4, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mmap(&(0x7f0000196000/0x4000)=nil, 0x4000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0) sendmsg$inet6(r5, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b00400"], 0x5b0}, 0x20008001) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000180), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(r2) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000240)={'filter\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffc, 0x5, 0x9, 0x4, 0x32c5, 0xffffffffffffffd6]}, &(0x7f00000002c0)=0x78) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0), 0x4) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000480)=0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000022c0)={0x1240, 0x18, 0x301, 0x0, 0x0, "", [@nested={0x122e, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x7}, @nested={0x11b4, 0x9f, 0x0, 0x1, [@typed={0xc, 0x98, 0x0, 0x0, @u64=0x7fffffffffffffff}, @nested={0xad, 0xe4, 0x0, 0x1, [@generic="f18833138ae3c4b22c46a7f17161ccf45f13d4d6913d5b5b58cf13f3012db7a68149be21f2bde459cbdffe43e960eee643c6fc974124bb70608c9d9492dc8e77d1e1329272ccae84214a25013a41a100bcfbebacd75e3baef7d79b31782bdb71b75f548868a7b21766308b5d81c68155d195bbb391d369331a5abdce077b817c05aa84f945a78cb2c9511faf475e6bdc55bec58e87dae372d73b3ea9ca2a67f74ce84e4aaa", @nested={0x4, 0x6f}]}, @nested={0xcb, 0xd2, 0x0, 0x1, [@generic, @generic="c50b06544aedcbebaa457d78167ac483b139f7445e40cfd8d6984968748dcf64d709c04f43d61db29da65ff203259fd32b1b0d3d3a84e5d7ccde510e7ba81343cdf5b80ef1d2ef559265f32f0fb19cead74f13d998e35ed7ad372838dfbbc0707dbfdff0139f2ead35f6c42aae62f464859aacbfbafa70f0eb6e24a8009a599cad9eeaadfa716fa0d337a9358c365ab2ec7c1a8942e593dd6c31010e634d1aa7031b92cb646e8fae5e7732e70be5280bba97a78f228fac", @typed={0xc, 0x7c, 0x0, 0x0, @u64=0x2}, @nested={0x4, 0x8a}]}, @typed={0x8, 0xcf, 0x0, 0x0, @uid=r6}, @nested={0x18, 0xad, 0x0, 0x1, [@nested={0x4, 0x82}, @typed={0x4, 0xce}, @nested={0x4, 0x72}, @nested={0x4, 0xc9}, @nested={0x4, 0x12e}]}, @typed={0x8, 0x34, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="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"]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89"]}]}, 0x1240}], 0x1}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8}, @NFTA_META_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'U'}]}], {0x14}}, 0x84}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000400)={@local, @multicast2}, &(0x7f0000000440)=0xc) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 63.550865ms ago: executing program 4 (id=3078): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f0000003900)=@dellinkprop={0x38, 0x6d, 0x511, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2, 0x440c0}, [@IFLA_IFNAME={0x14, 0x3, 'gre0\x00'}, @IFLA_PROP_LIST={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x58, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) 15.069482ms ago: executing program 2 (id=3079): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="9b4307000001", @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xfffffffe, @local}, @echo_reply={0xe0, 0x0, 0x0, 0xfffd}}}}}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x4683adfa, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map=r3, 0x1e, 0x1, 0x13, &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0]}, 0x40) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000100)=0x4) syz_emit_ethernet(0xe4d, &(0x7f0000001180)={@local, @random="e130aeaaba30", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xe17, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[], "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"}}}}}, 0x0) write$bt_hci(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2f0100003201"], 0x138) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000500), &(0x7f0000000380)=0x68) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="300034e1a5c8d712c144f9ffffffffffffff0000e82783d064e5c38d6078343631b88f7789841b", @ANYRES32=0x0, @ANYBLOB="0000000000000000080029007267060008001b0000000000"], 0x30}}, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000002480)=""/4105, 0xff4}, {&(0x7f0000000140)=""/155, 0xd1}], 0x29}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 0s ago: executing program 3 (id=3080): r0 = socket$caif_seqpacket(0x25, 0x5, 0x3) recvmmsg(r0, &(0x7f0000004640)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001f"], 0x3}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) r3 = socket(0x28, 0x5, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x4) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) recvmmsg$unix(r3, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x6cfc686d3553f0e1, 0x0) epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0) kernel console output (not intermixed with test programs): 174.837393][T10309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1205'. [ 175.016888][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.027206][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.284311][T10343] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1217'. [ 175.329140][T10343] bond2 (unregistering): Released all slaves [ 175.368787][T10346] netlink: 'syz.4.1220': attribute type 32 has an invalid length. [ 175.650332][T10372] syzkaller0: entered promiscuous mode [ 175.657987][T10372] syzkaller0: entered allmulticast mode [ 175.669820][T10373] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 175.726067][T10372] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 175.762399][T10372] netlink: 'syz.0.1222': attribute type 11 has an invalid length. [ 175.770830][T10372] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1222'. [ 176.385260][T10407] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.392971][T10407] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.732548][T10407] bond4: left allmulticast mode [ 176.740400][T10407] ip6erspan0: left promiscuous mode [ 176.753057][T10407] bond5: left promiscuous mode [ 176.760117][T10407] bridge4: left promiscuous mode [ 176.781107][ T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.816100][ T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.841860][ T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.870891][ T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.898286][ T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.916814][ T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.947868][ T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.969270][ T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.347823][T10466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1247'. [ 177.374759][T10470] xt_ipcomp: unknown flags 1D [ 177.389168][T10466] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1247'. [ 177.488606][T10475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1248'. [ 177.522567][T10476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1250'. [ 177.544320][T10478] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1251'. [ 177.652647][T10486] netlink: 'syz.2.1254': attribute type 10 has an invalid length. [ 178.013242][T10511] IPv6: addrconf: prefix option has invalid lifetime [ 178.026762][T10511] IPv6: addrconf: prefix option has invalid lifetime [ 178.104264][T10517] openvswitch: netlink: Flow key attribute not present in set flow. [ 178.325975][T10531] vcan2: entered promiscuous mode [ 178.348628][T10531] vcan2: entered allmulticast mode [ 178.386268][T10533] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1272'. [ 178.403801][T10535] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1270'. [ 178.672774][T10555] netlink: 'syz.3.1279': attribute type 10 has an invalid length. [ 178.732751][T10553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.743149][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.845586][T10563] netlink: 'syz.1.1283': attribute type 1 has an invalid length. [ 178.977720][T10573] sit0: entered promiscuous mode [ 178.983003][T10573] sit0: entered allmulticast mode [ 178.999884][T10577] unsupported nla_type 33542 [ 179.074623][T10582] netlink: 'syz.1.1289': attribute type 4 has an invalid length. [ 179.100844][T10582] netlink: 'syz.1.1289': attribute type 4 has an invalid length. [ 179.185615][T10591] netlink: 'syz.1.1292': attribute type 10 has an invalid length. [ 179.728561][T10620] vxcan1: tx address claim with dest, not broadcast [ 179.772083][T10622] netlink: 'syz.0.1300': attribute type 1 has an invalid length. [ 179.826895][T10626] netlink: 'syz.1.1302': attribute type 11 has an invalid length. [ 179.912115][T10622] macvlan2: entered promiscuous mode [ 179.928701][T10632] __nla_validate_parse: 5 callbacks suppressed [ 179.928718][T10632] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1306'. [ 179.931559][T10631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1302'. [ 179.945297][T10622] macvlan2: entered allmulticast mode [ 179.963009][T10622] bond5: entered promiscuous mode [ 179.972406][T10622] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 179.993317][T10622] bond5: left promiscuous mode [ 180.040807][T10631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1302'. [ 180.073165][T10626] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1302'. [ 180.141704][T10631] netlink: 'syz.1.1302': attribute type 7 has an invalid length. [ 180.171597][T10631] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1302'. [ 180.270628][T10650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.280755][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.315306][T10654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.319852][T10655] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1308'. [ 180.610379][T10675] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 180.834263][T10689] netlink: 'syz.4.1323': attribute type 2 has an invalid length. [ 180.842937][T10689] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1323'. [ 180.950125][T10696] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.972172][T10696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.056544][T10698] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1326'. [ 181.076944][T10698] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1326'. [ 181.299175][T10715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1330'. [ 181.334845][T10719] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 181.462574][T10729] sctp: [Deprecated]: syz.1.1331 (pid 10729) Use of int in max_burst socket option deprecated. [ 181.462574][T10729] Use struct sctp_assoc_value instead [ 181.496812][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.541268][T10730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.551635][T10730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.560979][T10730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.686815][T10729] bond7: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 181.704038][T10729] bond7 (unregistering): Released all slaves [ 183.318290][T10863] siw: device registration error -23 [ 183.325167][T10861] siw: device registration error -23 [ 183.344368][T10860] x_tables: unsorted underflow at hook 4 [ 186.456925][ C1] net_ratelimit: 49 callbacks suppressed [ 186.456939][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.474156][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.136943][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.419640][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.503533][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 201.503612][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 201.511198][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 205.403479][T10877] syzkaller0: entered promiscuous mode [ 205.419203][T10880] __nla_validate_parse: 6 callbacks suppressed [ 205.419221][T10880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1375'. [ 205.436266][T10877] syzkaller0: entered allmulticast mode [ 205.459252][T10885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.468781][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.476877][T10880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1375'. [ 205.486202][T10880] validate_nla: 4 callbacks suppressed [ 205.486219][T10880] netlink: 'syz.1.1375': attribute type 12 has an invalid length. [ 205.500148][T10880] netlink: 'syz.1.1375': attribute type 11 has an invalid length. [ 205.523419][T10885] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1378'. [ 205.568848][T10885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.578591][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.659694][T10893] netlink: 'syz.3.1382': attribute type 1 has an invalid length. [ 205.750582][T10893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1382'. [ 205.767267][T10902] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1384'. [ 205.780137][T10899] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1383'. [ 205.806856][T10902] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1384'. [ 205.826954][T10902] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1384'. [ 205.861954][ T53] block nbd0: Receive control failed (result -1) [ 206.208503][T10917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1386'. [ 206.332286][T10920] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1388'. [ 206.464012][T10927] netlink: 'syz.2.1391': attribute type 10 has an invalid length. [ 206.507996][T10924] bridge0: entered allmulticast mode [ 206.625938][T10927] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.662781][T10927] bond0: (slave team0): Enslaving as an active interface with an up link [ 207.114238][T10947] bond7 (unregistering): Released all slaves [ 207.738474][T10996] bridge6: port 1(veth3) entered blocking state [ 207.745363][T10996] bridge6: port 1(veth3) entered disabled state [ 207.752803][T10996] veth3: entered allmulticast mode [ 207.777204][T10996] veth3: entered promiscuous mode [ 207.790848][T10997] bridge6: port 2(veth0_to_bond) entered blocking state [ 207.809250][T10997] bridge6: port 2(veth0_to_bond) entered disabled state [ 207.822004][T10997] veth0_to_bond: entered allmulticast mode [ 207.837163][T10997] veth0_to_bond: entered promiscuous mode [ 208.451941][T11022] batadv_slave_0: entered promiscuous mode [ 208.510038][T11017] batadv_slave_0: left promiscuous mode [ 209.040982][T11088] xfrm1: entered promiscuous mode [ 209.053677][T11088] xfrm1: entered allmulticast mode [ 209.359809][T11113] netlink: 'syz.4.1437': attribute type 11 has an invalid length. [ 209.439029][T11117] syzkaller1: entered promiscuous mode [ 209.451995][T11117] syzkaller1: entered allmulticast mode [ 209.752750][T11139] netlink: 'syz.0.1445': attribute type 29 has an invalid length. [ 209.893790][T11146] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 210.258745][T11165] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 210.431846][T11178] __nla_validate_parse: 16 callbacks suppressed [ 210.431863][T11178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1460'. [ 210.452380][T11175] openvswitch: netlink: IP tunnel dst address not specified [ 210.487052][T11175] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1458'. [ 210.648822][T11182] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1461'. [ 210.715240][T11186] netlink: 'syz.4.1462': attribute type 12 has an invalid length. [ 210.723761][T11182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1461'. [ 210.733174][T11186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1462'. [ 210.763985][T11186] netlink: 'syz.4.1462': attribute type 12 has an invalid length. [ 210.786475][T11186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1462'. [ 219.897395][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.859792][T11219] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1468'. [ 237.887500][T11228] netlink: 'syz.3.1471': attribute type 6 has an invalid length. [ 238.053773][T11234] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1477'. [ 238.092254][T11239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.303626][T11257] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1482'. [ 238.323293][T11258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1481'. [ 238.465553][T11257] sit0: left promiscuous mode [ 238.561821][T11257] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.639719][T11265] tipc: Enabling of bearer rejected, failed to enable media [ 238.938771][T11286] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1490'. [ 239.139526][T11304] netlink: 'syz.1.1495': attribute type 1 has an invalid length. [ 239.154238][T11304] netlink: 'syz.1.1495': attribute type 1 has an invalid length. [ 239.163505][T11304] netlink: 9172 bytes leftover after parsing attributes in process `syz.1.1495'. [ 239.551757][T11325] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.1501'. [ 239.846999][T11353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1511'. [ 239.851608][T11352] ip6t_srh: unknown srh match flags 4000 [ 239.869999][T11353] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1511'. [ 239.893006][T11353] netlink: 'syz.0.1511': attribute type 11 has an invalid length. [ 239.936372][T11353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1511'. [ 240.019517][T11353] netlink: 'syz.0.1511': attribute type 11 has an invalid length. [ 240.126144][T11378] netlink: 'syz.3.1516': attribute type 8 has an invalid length. [ 240.269118][T11382] openvswitch: netlink: Flow key attr not present in new flow. [ 240.279722][T11381] openvswitch: netlink: Flow key attr not present in new flow. [ 240.309427][T11381] netlink: 'syz.1.1517': attribute type 10 has an invalid length. [ 240.329444][T11381] team0: Port device geneve0 added [ 240.335504][ T3922] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.368119][ T3922] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.400830][ T3922] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.433259][ T3922] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.989172][T11424] netlink: 'syz.0.1531': attribute type 1 has an invalid length. [ 240.998100][T11425] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 241.060288][T11421] bond2: option arp_all_targets: invalid value (18446744073709551613) [ 241.071368][T11421] bond2 (unregistering): Released all slaves [ 241.108196][T11429] batadv_slave_1: entered promiscuous mode [ 241.114711][T11423] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 241.237463][T11427] batadv_slave_1: left promiscuous mode [ 241.295463][T11438] netlink: 'syz.1.1535': attribute type 1 has an invalid length. [ 241.354705][T11438] 8021q: adding VLAN 0 to HW filter on device bond7 [ 241.432379][T11442] bond7: (slave gretap1): making interface the new active one [ 241.436350][T11450] syz.0.1540: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 241.461025][T11450] CPU: 0 UID: 0 PID: 11450 Comm: syz.0.1540 Not tainted syzkaller #0 PREEMPT(full) [ 241.461052][T11450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 241.461062][T11450] Call Trace: [ 241.461070][T11450] [ 241.461078][T11450] dump_stack_lvl+0x189/0x250 [ 241.461107][T11450] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.461128][T11450] ? __pfx__printk+0x10/0x10 [ 241.461153][T11450] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 241.461173][T11450] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 241.461194][T11450] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 241.461216][T11450] warn_alloc+0x214/0x310 [ 241.461235][T11450] ? stack_trace_save+0x9c/0xe0 [ 241.461262][T11450] ? __pfx_warn_alloc+0x10/0x10 [ 241.461288][T11450] ? kasan_save_track+0x4f/0x80 [ 241.461304][T11450] ? kasan_save_track+0x3e/0x80 [ 241.461319][T11450] ? __kasan_kmalloc+0x93/0xb0 [ 241.461335][T11450] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 241.461350][T11450] ? xskq_create+0x56/0x170 [ 241.461373][T11450] ? xsk_setsockopt+0x4dc/0x8d0 [ 241.461393][T11450] ? do_sock_setsockopt+0x17c/0x1b0 [ 241.461410][T11450] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 241.461427][T11450] ? do_syscall_64+0xfa/0xf80 [ 241.461449][T11450] __vmalloc_node_range_noprof+0x134/0x16a0 [ 241.461501][T11450] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 241.461525][T11450] ? __kasan_kmalloc+0x93/0xb0 [ 241.461550][T11450] vmalloc_user_noprof+0xad/0xf0 [ 241.461567][T11450] ? xskq_create+0xbf/0x170 [ 241.461591][T11450] xskq_create+0xbf/0x170 [ 241.461618][T11450] xsk_init_queue+0xb0/0x110 [ 241.461644][T11450] xsk_setsockopt+0x4dc/0x8d0 [ 241.461669][T11450] ? __pfx_xsk_setsockopt+0x10/0x10 [ 241.461695][T11450] ? __pfx_aa_sk_perm+0x10/0x10 [ 241.461718][T11450] ? aa_sock_opt_perm+0xff/0x1a0 [ 241.461742][T11450] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 241.461758][T11450] ? __pfx_xsk_setsockopt+0x10/0x10 [ 241.461791][T11450] do_sock_setsockopt+0x17c/0x1b0 [ 241.461815][T11450] __x64_sys_setsockopt+0x13f/0x1b0 [ 241.461844][T11450] do_syscall_64+0xfa/0xf80 [ 241.461863][T11450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.461880][T11450] ? clear_bhb_loop+0x60/0xb0 [ 241.461901][T11450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.461918][T11450] RIP: 0033:0x7fedccd8f749 [ 241.461935][T11450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.461948][T11450] RSP: 002b:00007fedcdc3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 241.461967][T11450] RAX: ffffffffffffffda RBX: 00007fedccfe5fa0 RCX: 00007fedccd8f749 [ 241.461979][T11450] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 241.461989][T11450] RBP: 00007fedcce13f91 R08: 0000000000000004 R09: 0000000000000000 [ 241.462000][T11450] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.462010][T11450] R13: 00007fedccfe6038 R14: 00007fedccfe5fa0 R15: 00007ffda837dc48 [ 241.462042][T11450] [ 241.462112][T11450] Mem-Info: [ 241.480133][T11442] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 241.483347][T11450] active_anon:4529 inactive_anon:6 isolated_anon:0 [ 241.483347][T11450] active_file:2756 inactive_file:40076 isolated_file:0 [ 241.483347][T11450] unevictable:768 dirty:64 writeback:0 [ 241.483347][T11450] slab_reclaimable:11160 slab_unreclaimable:106544 [ 241.483347][T11450] mapped:29042 shmem:1360 pagetables:1244 [ 241.483347][T11450] sec_pagetables:0 bounce:0 [ 241.483347][T11450] kernel_misc_reclaimable:0 [ 241.483347][T11450] free:1316916 free_pcp:16135 free_cma:0 [ 241.597757][T11446] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 241.602090][T11450] Node 0 active_anon:18016kB inactive_anon:24kB active_file:11024kB inactive_file:160100kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115968kB dirty:256kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13220kB pagetables:4960kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 241.915290][T11450] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 241.947958][T11450] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 241.999886][T11450] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 242.006042][T11450] Node 0 DMA32 free:1352584kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18416kB inactive_anon:24kB active_file:11024kB inactive_file:160100kB unevictable:1536kB writepending:264kB zspages:0kB present:3129332kB managed:2559356kB mlocked:0kB bounce:0kB free_pcp:46228kB local_pcp:20352kB free_cma:0kB [ 242.047665][T11450] lowmem_reserve[]: 0 0 1 1 1 [ 242.057248][T11450] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 242.101279][T11450] lowmem_reserve[]: 0 0 0 0 0 [ 242.106177][T11450] Node 1 Normal free:3901232kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16320kB local_pcp:5920kB free_cma:0kB [ 242.144019][T11450] lowmem_reserve[]: 0 0 0 0 0 [ 242.150020][T11450] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 242.166893][T11450] Node 0 DMA32: 2686*4kB (UM) 2199*8kB (UM) 1399*16kB (UME) 426*32kB (UME) 244*64kB (UME) 401*128kB (UME) 345*256kB (UME) 247*512kB (UM) 179*1024kB (UME) 8*2048kB (UM) 197*4096kB (UM) = 1352672kB [ 242.190654][T11450] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 242.204917][T11450] Node 1 Normal: 184*4kB (UM) 60*8kB (UME) 43*16kB (UME) 114*32kB (UME) 30*64kB (UME) 12*128kB (UME) 4*256kB (UME) 4*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 948*4096kB (M) = 3901232kB [ 242.227764][T11450] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 242.241143][T11450] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 242.254889][T11450] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 242.269015][T11450] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 242.284206][T11450] 44184 total pagecache pages [ 242.289618][T11450] 0 pages in swap cache [ 242.294043][T11450] Free swap = 124996kB [ 242.316895][T11450] Total swap = 124996kB [ 242.321111][T11450] 2097051 pages RAM [ 242.325014][T11450] 0 pages HighMem/MovableOnly [ 242.354140][T11450] 425122 pages reserved [ 242.363368][T11450] 0 pages cma reserved [ 242.442598][T11490] netlink: 'syz.1.1549': attribute type 9 has an invalid length. [ 243.165049][T11550] __nla_validate_parse: 47 callbacks suppressed [ 243.165066][T11550] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1564'. [ 243.188031][T11550] validate_nla: 1 callbacks suppressed [ 243.188050][T11550] netlink: 'syz.4.1564': attribute type 1 has an invalid length. [ 243.210906][T11550] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1564'. [ 243.231761][T11552] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1565'. [ 243.377521][T11561] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20001 [ 243.401213][T11561] x_tables: duplicate underflow at hook 2 [ 243.621455][T11582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1573'. [ 243.641070][T11582] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1573'. [ 243.668653][T11583] netlink: 26 bytes leftover after parsing attributes in process `syz.0.1574'. [ 243.763101][T11591] sctp: [Deprecated]: syz.4.1577 (pid 11591) Use of int in max_burst socket option deprecated. [ 243.763101][T11591] Use struct sctp_assoc_value instead [ 244.220327][T11631] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1585'. [ 244.233118][T11632] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 244.244574][T11626] syzkaller0: entered promiscuous mode [ 244.251358][T11626] syzkaller0: entered allmulticast mode [ 244.335767][T11639] netlink: 'syz.3.1588': attribute type 2 has an invalid length. [ 244.473443][T11642] xt_l2tp: v2 sid > 0xffff: 1114112 [ 244.601381][T11652] netlink: 'syz.4.1592': attribute type 1 has an invalid length. [ 244.675267][T11652] bond6: entered promiscuous mode [ 244.681661][T11652] 8021q: adding VLAN 0 to HW filter on device bond6 [ 244.808602][T11668] netlink: 'syz.4.1598': attribute type 1 has an invalid length. [ 244.826459][T11665] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1597'. [ 244.880441][T11671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1598'. [ 244.959405][T11674] netlink: 'syz.2.1600': attribute type 21 has an invalid length. [ 245.029300][T11668] 8021q: adding VLAN 0 to HW filter on device bond7 [ 245.049664][T11679] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1601'. [ 245.065179][T11672] bond7: (slave gretap1): making interface the new active one [ 245.082356][T11672] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 245.092861][T11674] netlink: 'syz.2.1600': attribute type 1 has an invalid length. [ 245.124867][T11680] workqueue: name exceeds WQ_NAME_LEN. Truncating to: “&˜%àï÷åQÍ0@æjÛÈÊ«–Óéôð} [ 245.222978][T11682] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 245.552317][T11703] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 245.869222][T11730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.187739][T11757] netlink: 'syz.3.1620': attribute type 1 has an invalid length. [ 246.309540][T11764] tipc: Enabling of bearer rejected, failed to enable media [ 246.549090][T11782] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 247.306884][T11840] netlink: 'syz.4.1641': attribute type 33 has an invalid length. [ 247.953729][T11884] netlink: 'syz.4.1654': attribute type 10 has an invalid length. [ 247.985397][T11884] bond0: (slave wlan1): Opening slave failed [ 248.233931][T11899] bridge3: entered promiscuous mode [ 248.241340][T11903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.250902][T11899] bridge3: entered allmulticast mode [ 248.287756][T11899] team0: Port device bridge3 added [ 248.653721][T11934] __nla_validate_parse: 10 callbacks suppressed [ 248.653739][T11934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1663'. [ 248.798412][T11945] netlink: 'syz.4.1667': attribute type 4 has an invalid length. [ 248.810044][T11945] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1667'. [ 248.827893][T11945] `: renamed from bond0 (while UP) [ 248.837516][T11946] netlink: 'syz.1.1668': attribute type 22 has an invalid length. [ 248.845844][T11946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1668'. [ 248.868058][T11946] netlink: 'syz.1.1668': attribute type 22 has an invalid length. [ 248.878752][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.880931][T11946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1668'. [ 248.890415][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.910678][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.920666][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.940241][T11949] ªªªªª,: renamed from bond_slave_0 [ 249.093229][T11960] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1672'. [ 249.111214][T11959] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1672'. [ 249.121887][T11959] bridge0: left allmulticast mode [ 249.127622][T11959] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1672'. [ 249.406176][T11975] syzkaller0: entered promiscuous mode [ 249.411990][T11975] syzkaller0: entered allmulticast mode [ 249.729072][T11995] netlink: 'syz.3.1682': attribute type 1 has an invalid length. [ 249.751961][T12002] ip6gre1: entered allmulticast mode [ 249.762696][T11995] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 249.874138][T12007] netlink: 'syz.1.1686': attribute type 1 has an invalid length. [ 250.121517][T12025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1691'. [ 250.143818][T12017] bond8: (slave veth5): Enslaving as an active interface with a down link [ 250.156158][T12025] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 250.165230][T12029] netlink: 'syz.2.1693': attribute type 20 has an invalid length. [ 250.174001][T12029] IPv6: NLM_F_CREATE should be specified when creating new route [ 250.174296][T12025] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1691'. [ 250.241117][T12007] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1686'. [ 250.252474][T12007] 8021q: adding VLAN 0 to HW filter on device bond8 [ 250.346281][T12031] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.441678][T12042] bond0: option xmit_hash_policy: invalid value (64) [ 250.458623][T12042] bond0 (unregistering): Released all slaves [ 250.487024][T12039] syzkaller1: entered promiscuous mode [ 250.498230][T12047] netlink: 'syz.1.1699': attribute type 1 has an invalid length. [ 250.506332][T12039] syzkaller1: entered allmulticast mode [ 250.506922][T12047] nbd: error processing sock list [ 250.528700][T12047] block nbd1: shutting down sockets [ 250.540231][T12049] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 250.585784][T12031] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.653110][T12052] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 250.730516][T12031] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.893195][T12031] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.936181][T12073] sit2: entered promiscuous mode [ 250.942511][T12073] sit2: entered allmulticast mode [ 251.022600][ T66] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.049234][ T6036] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.084925][ T6036] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.142233][ T66] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.349340][T12084] syzkaller0: entered promiscuous mode [ 251.371788][T12084] syzkaller0: entered allmulticast mode [ 251.607724][T12100] block nbd1: server does not support multiple connections per device. [ 251.618902][T12100] block nbd1: shutting down sockets [ 253.075881][T12126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.272804][T12146] wlan0 speed is unknown, defaulting to 1000 [ 253.308593][T12146] wlan0 speed is unknown, defaulting to 1000 [ 253.346085][T12146] wlan0 speed is unknown, defaulting to 1000 [ 253.400382][T12146] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 253.473288][T12146] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 253.602117][T12146] wlan0 speed is unknown, defaulting to 1000 [ 253.629940][T12146] wlan0 speed is unknown, defaulting to 1000 [ 253.646381][T12146] wlan0 speed is unknown, defaulting to 1000 [ 253.663055][T12173] __nla_validate_parse: 10 callbacks suppressed [ 253.663072][T12173] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1727'. [ 253.704983][T12146] wlan0 speed is unknown, defaulting to 1000 [ 253.741444][T12146] wlan0 speed is unknown, defaulting to 1000 [ 253.768864][T12177] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1730'. [ 253.797502][T12177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1730'. [ 253.988744][T12181] openvswitch: netlink: Flow actions attr not present in new flow. [ 254.061436][T12188] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1731'. [ 254.098878][T12188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1731'. [ 254.108408][T12188] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 254.320443][T12211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1740'. [ 254.340666][T12207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1739'. [ 254.355676][T12207] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.1739'. [ 254.531185][T12227] netem: change failed [ 254.616522][T12236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.904635][T12263] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1755'. [ 255.357555][T12295] syzkaller1: entered promiscuous mode [ 255.363314][T12295] syzkaller1: entered allmulticast mode [ 255.478530][T12297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1758'. [ 255.913005][T12323] sctp: [Deprecated]: syz.3.1767 (pid 12323) Use of struct sctp_assoc_value in delayed_ack socket option. [ 255.913005][T12323] Use struct sctp_sack_info instead [ 256.062669][T12327] syzkaller1: entered promiscuous mode [ 256.071576][T12327] syzkaller1: entered allmulticast mode [ 256.237834][T12340] netlink: 'syz.0.1772': attribute type 4 has an invalid length. [ 256.692407][T12371] netlink: 'syz.0.1779': attribute type 7 has an invalid length. [ 256.726345][T12371] netlink: 'syz.0.1779': attribute type 8 has an invalid length. [ 257.109180][T12380] IPVS: set_ctl: invalid protocol: 29 172.20.20.16:20000 [ 257.130066][T12391] tipc: Enabling of bearer rejected, media not registered [ 257.632805][ T9] IPVS: starting estimator thread 0... [ 257.727085][T12413] IPVS: using max 26 ests per chain, 62400 per kthread [ 257.852093][T12418] syzkaller0: entered promiscuous mode [ 257.858156][T12418] syzkaller0: entered allmulticast mode [ 258.125714][T12388] wlan0 speed is unknown, defaulting to 1000 [ 258.155905][T12433] batman_adv: batadv0: Adding interface: veth5 [ 258.163055][T12433] batman_adv: batadv0: The MTU of interface veth5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.190470][T12433] batman_adv: batadv0: Interface activated: veth5 [ 258.738626][T12463] __nla_validate_parse: 13 callbacks suppressed [ 258.738645][T12463] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1804'. [ 258.837291][T12465] netlink: 'syz.0.1805': attribute type 2 has an invalid length. [ 258.850150][T12467] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1806'. [ 259.067749][T12474] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1810'. [ 259.210717][T12486] C: renamed from lo (while UP) [ 259.229959][T12486] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 259.336998][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.345524][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.401506][T12491] sctp: [Deprecated]: syz.2.1813 (pid 12491) Use of struct sctp_assoc_value in delayed_ack socket option. [ 259.401506][T12491] Use struct sctp_sack_info instead [ 259.518872][T12496] xt_addrtype: ipv6 does not support BROADCAST matching [ 259.635380][T12503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1819'. [ 259.644998][T12503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.825305][T12503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.883877][T12521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1824'. [ 260.047317][T12534] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 260.068168][T12534] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 260.102614][T12537] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1830'. [ 260.112525][T12534] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 260.264225][T12551] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1832'. [ 260.356559][T12554] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1834'. [ 260.431892][T12558] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1836'. [ 260.451012][T12558] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1836'. [ 260.477050][T12558] netlink: 'syz.2.1836': attribute type 6 has an invalid length. [ 260.493802][T12558] netlink: 'syz.2.1836': attribute type 5 has an invalid length. [ 260.892108][T12593] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 260.963601][T12593] team1: entered promiscuous mode [ 260.974692][T12593] team1: entered allmulticast mode [ 260.984829][T12598] netlink: 'syz.3.1848': attribute type 1 has an invalid length. [ 261.348060][T12621] block nbd1: server does not support multiple connections per device. [ 261.367131][T12621] block nbd1: shutting down sockets [ 261.823928][T12651] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 261.861769][T12653] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.123959][T12672] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 262.136189][T12674] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 262.839044][T12717] netlink: 'syz.4.1889': attribute type 21 has an invalid length. [ 262.859472][T12717] netlink: 'syz.4.1889': attribute type 21 has an invalid length. [ 262.887881][T12717] netlink: 'syz.4.1889': attribute type 3 has an invalid length. [ 263.091120][T12731] nbd: socks must be embedded in a SOCK_ITEM attr [ 263.163731][T12737] netlink: 'syz.3.1897': attribute type 21 has an invalid length. [ 263.402549][T12762] netlink: 'syz.4.1904': attribute type 1 has an invalid length. [ 263.484689][T12765] vlan3: entered allmulticast mode [ 263.593577][T12772] netlink: 'syz.2.1905': attribute type 4 has an invalid length. [ 263.623337][T12775] netlink: 'syz.0.1908': attribute type 1 has an invalid length. [ 263.715756][T12775] 8021q: adding VLAN 0 to HW filter on device bond8 [ 263.862319][T12785] bond8: (slave veth5): Enslaving as an active interface with a down link [ 263.893232][T12787] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 263.993973][T12794] __nla_validate_parse: 24 callbacks suppressed [ 263.993990][T12794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1913'. [ 264.027854][T12794] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1913'. [ 264.104126][T12818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.107932][T12794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.252862][T12823] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1918'. [ 264.436289][T12839] netlink: 'syz.4.1924': attribute type 15 has an invalid length. [ 264.445698][T12839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1924'. [ 264.473524][T12839] netlink: 'syz.4.1924': attribute type 15 has an invalid length. [ 264.481707][T12839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1924'. [ 264.488025][ T6616] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 264.514039][ T6616] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 264.554876][ T6616] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 264.577371][ T6616] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 264.639851][T12849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.706278][T12852] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1931'. [ 264.712928][T12854] netlink: 'syz.4.1929': attribute type 1 has an invalid length. [ 264.776838][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.827465][T12859] bond0: (slave geneve2): making interface the new active one [ 264.845236][T12859] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 264.846002][T12855] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1930'. [ 264.863724][ T6012] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 264.873499][T12863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1932'. [ 264.883994][ T6012] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 264.904683][T12863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.924124][ T6012] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 264.953417][ T6012] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 265.186491][T12884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1939'. [ 265.238855][ T53] block nbd1: Receive control failed (result -32) [ 265.466480][T12902] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 265.488413][T12897] siw: device registration error -23 [ 265.496441][T12897] xt_cgroup: xt_cgroup: no path or classid specified [ 265.506250][T12897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1942'. [ 265.697779][T12916] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 265.964074][T12930] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 266.543584][ T7055] hid-generic 0005:0C45:1010.0001: item fetching failed at offset 3/5 [ 266.578244][ T7055] hid-generic 0005:0C45:1010.0001: probe with driver hid-generic failed with error -22 [ 266.858417][T12986] syz.3.1969 uses old SIOCAX25GETINFO [ 266.951230][T12992] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.987917][ T9] IPVS: starting estimator thread 0... [ 267.006202][T13000] xt_recent: Unsupported userspace flags (000000b1) [ 267.013898][T12991] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 267.098323][T12997] IPVS: using max 32 ests per chain, 76800 per kthread [ 267.177022][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.185459][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.884897][T13061] validate_nla: 9 callbacks suppressed [ 267.884908][T13061] netlink: 'syz.2.1987': attribute type 29 has an invalid length. [ 267.979461][T13068] netlink: 'syz.3.1986': attribute type 4 has an invalid length. [ 268.004662][T13068] netlink: 'syz.3.1986': attribute type 4 has an invalid length. [ 268.323160][T13080] xt_nat: multiple ranges no longer supported [ 268.396127][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 268.405971][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 268.414200][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 268.423583][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 268.431722][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 269.048057][T13104] __nla_validate_parse: 17 callbacks suppressed [ 269.048077][T13104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1999'. [ 269.299787][T13110] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2003'. [ 269.409478][T13112] syzkaller0: entered promiscuous mode [ 269.415056][T13112] syzkaller0: entered allmulticast mode [ 269.424680][T13113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2004'. [ 269.435377][T13114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2004'. [ 269.448011][T13114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2004'. [ 269.480043][T13113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2004'. [ 269.502455][T13114] geneve1: entered promiscuous mode [ 269.512513][T13114] geneve1: entered allmulticast mode [ 269.746911][T13121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2006'. [ 269.857251][T13126] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2008'. [ 269.881655][T13126] syzkaller0: entered promiscuous mode [ 269.897468][T13126] syzkaller0: entered allmulticast mode [ 269.907446][T13081] wlan0 speed is unknown, defaulting to 1000 [ 270.342370][T13081] chnl_net:caif_netlink_parms(): no params data found [ 270.457343][ T53] Bluetooth: hci5: command tx timeout [ 270.567230][T13147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2012'. [ 270.832877][T13150] bridge4: port 1(veth5) entered blocking state [ 270.839713][T13150] bridge4: port 1(veth5) entered disabled state [ 270.846486][T13150] veth5: entered allmulticast mode [ 270.855301][T13150] veth5: entered promiscuous mode [ 270.875697][T13154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2015'. [ 270.884859][T13081] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.902795][T13081] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.916725][T13081] bridge_slave_0: entered allmulticast mode [ 270.934907][T13081] bridge_slave_0: entered promiscuous mode [ 270.957370][T13081] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.976343][T13081] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.994105][T13081] bridge_slave_1: entered allmulticast mode [ 271.006697][T13081] bridge_slave_1: entered promiscuous mode [ 271.096851][ C1] net_ratelimit: 110 callbacks suppressed [ 271.096870][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.125595][T13081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.139747][T13156] netlink: 'syz.3.2016': attribute type 6 has an invalid length. [ 271.175525][T13081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.412242][T13081] team0: Port device team_slave_0 added [ 271.454145][T13081] team0: Port device team_slave_1 added [ 271.556924][T13081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.564148][T13081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.625695][T13081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.660073][T13081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.680051][T13081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.723953][T13081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.878551][T13081] hsr_slave_0: entered promiscuous mode [ 271.889138][T13081] hsr_slave_1: entered promiscuous mode [ 271.901445][T13081] debugfs: 'hsr0' already exists in 'hsr' [ 271.909028][T13081] Cannot create hsr debugfs directory [ 272.499140][T13152] wlan0 speed is unknown, defaulting to 1000 [ 272.547501][ T53] Bluetooth: hci5: command tx timeout [ 272.771828][T13184] tipc: Failed to remove unknown binding: 66,0,0/400963431:2022166239/2022166240 [ 272.800184][T13184] tipc: Failed to remove unknown binding: 66,0,0/400963431:2022166239/2022166240 [ 272.912732][T13081] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 272.983766][T13081] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 273.037424][T13081] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 273.091152][T13081] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 273.155326][T13200] netlink: 'syz.3.2030': attribute type 30 has an invalid length. [ 273.393298][T13081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.453649][T13081] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.504055][ T4370] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.513966][ T4370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.582007][ T3468] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.589466][ T3468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.196181][T13081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.254484][T13227] __nla_validate_parse: 3 callbacks suppressed [ 274.254501][T13227] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2035'. [ 274.382981][T13089] Set syz1 is full, maxelem 65536 reached [ 274.617684][ T53] Bluetooth: hci5: command tx timeout [ 274.752773][T13246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2041'. [ 274.865297][T13081] veth0_vlan: entered promiscuous mode [ 274.894176][T13081] veth1_vlan: entered promiscuous mode [ 274.924775][T13250] tipc: Enabling of bearer rejected, failed to enable media [ 274.955857][T13250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2042'. [ 274.988594][T13081] veth0_macvtap: entered promiscuous mode [ 275.000295][T13251] tipc: Enabling of bearer rejected, failed to enable media [ 275.013289][T13081] veth1_macvtap: entered promiscuous mode [ 275.055613][T13081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.099032][T13081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.168061][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.203171][T13262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2047'. [ 275.225013][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.245357][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.308318][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.559751][T13277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2050'. [ 275.570060][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.597811][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.847513][ T1314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.874854][ T1314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.971801][T13312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2060'. [ 276.122116][T13321] netlink: 'syz.5.1991': attribute type 1 has an invalid length. [ 276.150142][T13321] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1991'. [ 276.251763][T13328] netlink: 'syz.2.2065': attribute type 2 has an invalid length. [ 276.401787][T13327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2064'. [ 276.421836][T13337] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2067'. [ 276.541468][T13349] netlink: 'syz.4.2070': attribute type 11 has an invalid length. [ 276.557371][T13349] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2070'. [ 276.595908][T13352] netlink: 'syz.4.2070': attribute type 11 has an invalid length. [ 276.697427][ T53] Bluetooth: hci5: command tx timeout [ 276.834283][T13366] netlink: 'syz.3.2074': attribute type 1 has an invalid length. [ 276.901941][T13366] netlink: 'syz.3.2074': attribute type 11 has an invalid length. [ 277.274611][T13388] : entered promiscuous mode [ 277.362403][T13396] netlink: 'syz.0.2085': attribute type 12 has an invalid length. [ 277.545449][T13408] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 277.817838][T13427] netlink: 'syz.5.2095': attribute type 15 has an invalid length. [ 277.878507][T13427] netlink: 'syz.5.2095': attribute type 15 has an invalid length. [ 277.909082][ T36] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 277.922092][T13430] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 277.937177][ T36] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 277.984234][ T36] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 278.065854][ T36] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 280.217285][ T53] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 298.541157][T13456] GUP no longer grows the stack in syz.2.2104 (13456): 200000003000-20000000a000 (200000001000) [ 298.617378][T13456] CPU: 0 UID: 0 PID: 13456 Comm: syz.2.2104 Not tainted syzkaller #0 PREEMPT(full) [ 298.617405][T13456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 298.617416][T13456] Call Trace: [ 298.617425][T13456] [ 298.617434][T13456] dump_stack_lvl+0x189/0x250 [ 298.617466][T13456] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.617489][T13456] ? __pfx__printk+0x10/0x10 [ 298.617521][T13456] ? find_vma+0xe7/0x160 [ 298.617563][T13456] __get_user_pages+0x2465/0x29f0 [ 298.617586][T13456] ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190 [ 298.617618][T13456] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 298.617666][T13456] ? rcu_is_watching+0x15/0xb0 [ 298.617694][T13456] __gup_longterm_locked+0xde4/0x1660 [ 298.617725][T13456] ? try_grab_folio_fast+0x1bf/0x6a0 [ 298.617761][T13456] ? gup_fast_fallback+0x1b82/0x22d0 [ 298.617788][T13456] gup_fast_fallback+0x1d6b/0x22d0 [ 298.617865][T13456] ? __pfx_gup_fast_fallback+0x10/0x10 [ 298.617887][T13456] ? __mutex_lock+0x335/0x1350 [ 298.617916][T13456] ? is_valid_gup_args+0x11f/0x200 [ 298.617943][T13456] ? get_user_pages_fast+0x4d/0xb0 [ 298.617970][T13456] __iov_iter_get_pages_alloc+0x39f/0xb40 [ 298.618000][T13456] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 298.618023][T13456] ? wait_for_space+0x248/0x2d0 [ 298.618046][T13456] iov_iter_get_pages2+0x5e/0xa0 [ 298.618071][T13456] __se_sys_vmsplice+0x548/0x10d0 [ 298.618126][T13456] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 298.618150][T13456] ? __pfx_futex_wait+0x10/0x10 [ 298.618192][T13456] ? __ia32_sys_rt_sigreturn+0x743/0x860 [ 298.618274][T13456] ? do_syscall_64+0xbe/0xf80 [ 298.618299][T13456] do_syscall_64+0xfa/0xf80 [ 298.618319][T13456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.618337][T13456] ? clear_bhb_loop+0x60/0xb0 [ 298.618360][T13456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.618378][T13456] RIP: 0033:0x7f453058f749 [ 298.618395][T13456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.618410][T13456] RSP: 002b:00007f45313d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 298.618431][T13456] RAX: ffffffffffffffda RBX: 00007f45307e5fa0 RCX: 00007f453058f749 [ 298.618445][T13456] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a [ 298.618457][T13456] RBP: 00007f4530613f91 R08: 0000000000000000 R09: 0000000000000000 [ 298.618470][T13456] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 298.618481][T13456] R13: 00007f45307e6038 R14: 00007f45307e5fa0 R15: 00007fffad8067b8 [ 298.618516][T13456] [ 298.901586][T13466] __nla_validate_parse: 13 callbacks suppressed [ 298.901603][T13466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2109'. [ 298.993698][T13463] : entered promiscuous mode [ 299.032470][T13466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2109'. [ 299.099691][T13480] can: request_module (can-proto-0) failed. [ 299.579451][T13521] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2124'. [ 299.690234][T13530] netlink: 'syz.4.2126': attribute type 6 has an invalid length. [ 299.713674][T13530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2126'. [ 299.743183][T13530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2126'. [ 299.760085][T13530] netlink: 'syz.4.2126': attribute type 1 has an invalid length. [ 299.833071][T13538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2129'. [ 300.048931][T13555] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2135'. [ 300.061867][T13555] openvswitch: netlink: Flow key attr not present in new flow. [ 300.207549][T13569] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 300.215007][T13569] IPv6: NLM_F_CREATE should be set when creating new route [ 300.222337][T13569] IPv6: NLM_F_CREATE should be set when creating new route [ 300.229611][T13569] IPv6: NLM_F_CREATE should be set when creating new route [ 300.244103][T13569] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 300.263087][T13573] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2140'. [ 300.474475][T13590] wg1: entered promiscuous mode [ 300.500585][T13590] wg1: entered allmulticast mode [ 300.643485][T13601] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2146'. [ 300.767534][T13615] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2150'. [ 301.013585][T13631] netlink: 'syz.2.2157': attribute type 4 has an invalid length. [ 301.094195][T13635] netlink: 'syz.5.2156': attribute type 2 has an invalid length. [ 301.166047][T13635] 9: entered promiscuous mode [ 301.540244][T13657] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 301.693391][T13657] bridge5: entered promiscuous mode [ 301.729247][T13657] bridge5: entered allmulticast mode [ 301.886177][T13682] openvswitch: netlink: IP tunnel dst address not specified [ 301.942202][T13684] netem: change failed [ 301.961919][T13689] unsupported nlmsg_type 40 [ 302.054104][T13687] syzkaller0: entered promiscuous mode [ 302.059947][T13687] syzkaller0: entered allmulticast mode [ 303.588731][T13725] bond0: entered promiscuous mode [ 303.604533][T13725] bond0: entered allmulticast mode [ 303.954890][T13751] __nla_validate_parse: 17 callbacks suppressed [ 303.954910][T13751] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2192'. [ 304.061900][T13760] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2194'. [ 304.092637][T13764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2195'. [ 304.102981][T13762] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2196'. [ 304.103831][T13764] bridge_slave_0: left promiscuous mode [ 304.119187][T13764] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.139418][T13762] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2196'. [ 304.198576][T13772] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2195'. [ 304.566198][T13790] netlink: 'syz.3.2201': attribute type 26 has an invalid length. [ 304.651336][T13795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2202'. [ 305.188412][T13823] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2208'. [ 305.575943][T13850] sctp: [Deprecated]: syz.3.2215 (pid 13850) Use of struct sctp_assoc_value in delayed_ack socket option. [ 305.575943][T13850] Use struct sctp_sack_info instead [ 305.594047][T13851] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2216'. [ 305.606147][T13849] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2216'. [ 305.739876][ T5848] Bluetooth: hci5: command 0x0405 tx timeout [ 305.988923][T13881] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 306.265034][T13903] geneve2: entered promiscuous mode [ 306.319852][T13913] netlink: 'syz.2.2230': attribute type 21 has an invalid length. [ 306.351527][ T4370] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.360564][T13913] netlink: 'syz.2.2230': attribute type 21 has an invalid length. [ 306.377328][ T4370] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.400069][ T4370] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.423670][ T4370] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.485670][T13915] tipc: Enabling of bearer rejected, media not registered [ 306.651426][T13932] netlink: 'syz.5.2235': attribute type 1 has an invalid length. [ 306.679211][T13932] netlink: 'syz.5.2235': attribute type 1 has an invalid length. [ 306.714159][T13932] netlink: 'syz.5.2235': attribute type 1 has an invalid length. [ 306.754617][T13932] netlink: 'syz.5.2235': attribute type 2 has an invalid length. [ 306.778347][T13933] netlink: 'syz.5.2235': attribute type 1 has an invalid length. [ 306.786210][T13933] netlink: 'syz.5.2235': attribute type 1 has an invalid length. [ 306.807473][T13933] netlink: 'syz.5.2235': attribute type 1 has an invalid length. [ 306.815514][T13933] netlink: 'syz.5.2235': attribute type 2 has an invalid length. [ 307.091506][T13963] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 307.098843][T13963] IPv6: NLM_F_CREATE should be set when creating new route [ 307.106113][T13963] IPv6: NLM_F_CREATE should be set when creating new route [ 307.155014][T13965] syzkaller1: entered promiscuous mode [ 307.162072][T13965] syzkaller1: entered allmulticast mode [ 307.170846][T13965] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 307.276166][T13972] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 307.283513][T13972] IPv6: NLM_F_CREATE should be set when creating new route [ 307.290816][T13972] IPv6: NLM_F_CREATE should be set when creating new route [ 307.327239][T13972] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 307.460005][T13989] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 307.504575][T13989] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 307.515858][T13989] gretap1: entered promiscuous mode [ 307.521832][T13989] gretap1: entered allmulticast mode [ 308.399336][ T6109] netdevsim netdevsim5 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 308.417757][ T6109] netdevsim netdevsim5 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 308.434925][ T6109] netdevsim netdevsim5 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 308.464180][ T6109] netdevsim netdevsim5 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 308.539703][T14015] bond7: entered promiscuous mode [ 308.552900][T14015] 8021q: adding VLAN 0 to HW filter on device bond7 [ 308.691853][T14015] bond7: (slave bridge6): making interface the new active one [ 308.722055][T14015] bridge6: entered promiscuous mode [ 308.736227][T14015] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 308.751147][T14027] pim6reg1: entered promiscuous mode [ 308.756495][T14027] pim6reg1: entered allmulticast mode [ 308.778049][T14034] tipc: Enabling of bearer rejected, failed to enable media [ 308.794516][T14040] netlink: 'syz.0.2265': attribute type 11 has an invalid length. [ 309.068818][T14060] __nla_validate_parse: 29 callbacks suppressed [ 309.068836][T14060] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2271'. [ 309.095049][T14062] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2268'. [ 309.203412][T14067] netlink: 119 bytes leftover after parsing attributes in process `syz.5.2273'. [ 309.348458][T14076] syzkaller0: entered promiscuous mode [ 309.366181][T14076] syzkaller0: entered allmulticast mode [ 309.480424][T14083] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 309.491958][T14088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2281'. [ 309.569114][T14091] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2281'. [ 309.720903][T14101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2285'. [ 309.787264][T14108] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2285'. [ 309.824657][T14105] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2286'. [ 309.856560][T14116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2288'. [ 309.910376][T14116] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2288'. [ 310.007988][T14116] Bluetooth: MGMT ver 1.23 [ 310.294020][ T30] audit: type=1800 audit(1767090853.345:2): pid=14137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2292" name="memory.events" dev="tmpfs" ino=2446 res=0 errno=0 [ 310.441609][T14156] tipc: Failed to obtain node identity [ 310.466851][T14156] tipc: Enabling of bearer rejected, failed to enable media [ 310.693324][T14185] nbd: must specify a size in bytes for the device [ 310.704018][T14185] nbd: must specify an index to disconnect [ 310.924425][T14196] xt_CT: You must specify a L4 protocol and not use inversions on it [ 311.901361][T14267] validate_nla: 13 callbacks suppressed [ 311.901378][T14267] netlink: 'syz.3.2323': attribute type 33 has an invalid length. [ 311.961801][T14253] ` (unregistering): Released all slaves [ 312.270675][T14278] bond2: Unable to set up delay as MII monitoring is disabled [ 312.362150][T14278] bond2 (unregistering): Released all slaves [ 312.590398][T14310] syzkaller0: entered promiscuous mode [ 312.606911][T14310] syzkaller0: entered allmulticast mode [ 312.754313][T14316] vlan2: entered allmulticast mode [ 312.760640][T14316] gretap0: entered allmulticast mode [ 313.143056][T14355] sctp: [Deprecated]: syz.0.2348 (pid 14355) Use of int in max_burst socket option. [ 313.143056][T14355] Use struct sctp_assoc_value instead [ 313.183635][T14355] sctp: [Deprecated]: syz.0.2348 (pid 14355) Use of int in max_burst socket option. [ 313.183635][T14355] Use struct sctp_assoc_value instead [ 313.286493][T14360] 8021q: adding VLAN 0 to HW filter on device bond2 [ 313.309655][T14360] syzkaller1: entered promiscuous mode [ 313.316242][T14360] syzkaller1: entered allmulticast mode [ 313.487565][T14379] pim6reg527: entered allmulticast mode [ 313.755683][T14382] team0 (unregistering): Port device team_slave_0 removed [ 313.775481][T14382] team0 (unregistering): Port device team_slave_1 removed [ 313.957227][T14402] netlink: 'syz.0.2360': attribute type 1 has an invalid length. [ 314.067985][T14411] tls_set_device_offload_rx: netdev not found [ 314.240918][T14421] openvswitch: netlink: IP tunnel TTL not specified. [ 314.468001][T14435] __nla_validate_parse: 81 callbacks suppressed [ 314.468019][T14435] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2367'. [ 314.682270][T14443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2368'. [ 314.723403][T14443] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2368'. [ 314.739854][T14443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2368'. [ 314.754248][T14443] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2368'. [ 314.860206][T14461] Cannot find del_set index 0 as target [ 314.952897][T14466] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2372'. [ 314.984954][T14467] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2374'. [ 315.038818][T14470] netlink: 'syz.4.2375': attribute type 11 has an invalid length. [ 315.062466][T14470] netlink: 'syz.4.2375': attribute type 4 has an invalid length. [ 315.091612][T14470] netlink: 199768 bytes leftover after parsing attributes in process `syz.4.2375'. [ 315.463167][T14500] netlink: 284 bytes leftover after parsing attributes in process `syz.2.2384'. [ 315.690291][T14516] bond9: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 315.711469][T14516] bond9 (unregistering): Released all slaves [ 315.781578][T14529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.849117][T14522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2387'. [ 315.910040][T14516] netlink: 'syz.4.2387': attribute type 1 has an invalid length. [ 316.002973][T14536] bond9: Removing last ns target with arp_interval on [ 316.035233][T14536] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 316.135629][T14555] netlink: 'syz.0.2397': attribute type 1 has an invalid length. [ 316.235908][T14560] bond10: (slave veth7): Enslaving as an active interface with a down link [ 316.273539][T14555] bond8: (slave veth0_to_bond): Releasing active interface [ 316.322061][T14555] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 316.376112][T14560] bond10: entered promiscuous mode [ 316.403404][T14560] bond10: entered allmulticast mode [ 316.734235][T14592] veth0: entered promiscuous mode [ 316.762208][T14592] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 316.802133][T14588] veth0: left promiscuous mode [ 317.081178][T14616] netlink: 'syz.3.2414': attribute type 10 has an invalid length. [ 317.125839][T14616] hsr0: mtu greater than device maximum [ 317.648758][T14645] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 317.753611][T14657] netlink: 'syz.2.2429': attribute type 20 has an invalid length. [ 317.870180][T14665] netlink: 'syz.0.2431': attribute type 1 has an invalid length. [ 318.061742][T14682] SET target dimension over the limit! [ 318.927908][T14765] SET target dimension over the limit! [ 319.299882][T14821] bond11: entered promiscuous mode [ 319.306157][T14821] bond11: entered allmulticast mode [ 319.314125][T14821] 8021q: adding VLAN 0 to HW filter on device bond11 [ 319.356139][T14836] +: renamed from syzkaller0 [ 319.369401][T14836] netlink: 'syz.3.2460': attribute type 10 has an invalid length. [ 319.381409][T14840] FAULT_INJECTION: forcing a failure. [ 319.381409][T14840] name failslab, interval 1, probability 0, space 0, times 0 [ 319.397249][T14840] CPU: 1 UID: 0 PID: 14840 Comm: syz.0.2462 Not tainted syzkaller #0 PREEMPT(full) [ 319.397271][T14840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 319.397291][T14840] Call Trace: [ 319.397299][T14840] [ 319.397306][T14840] dump_stack_lvl+0x189/0x250 [ 319.397331][T14840] ? __pfx____ratelimit+0x10/0x10 [ 319.397349][T14840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.397369][T14840] ? __pfx__printk+0x10/0x10 [ 319.397393][T14840] ? __lock_acquire+0x6b6/0x2cf0 [ 319.397420][T14840] should_fail_ex+0x414/0x560 [ 319.397448][T14840] should_failslab+0xa8/0x100 [ 319.397471][T14840] kmem_cache_alloc_noprof+0x88/0x710 [ 319.397494][T14840] ? __netlink_lookup+0xbd/0x8a0 [ 319.397515][T14840] ? skb_clone+0x212/0x3a0 [ 319.397541][T14840] skb_clone+0x212/0x3a0 [ 319.397566][T14840] __netlink_deliver_tap+0x404/0x850 [ 319.397597][T14840] ? netlink_deliver_tap+0x2e/0x1b0 [ 319.397619][T14840] netlink_deliver_tap+0x19c/0x1b0 [ 319.397640][T14840] netlink_unicast+0x7fa/0x9e0 [ 319.397668][T14840] ? __pfx_netlink_unicast+0x10/0x10 [ 319.397690][T14840] ? netlink_sendmsg+0x642/0xb30 [ 319.397709][T14840] ? skb_put+0x11b/0x210 [ 319.397731][T14840] netlink_sendmsg+0x805/0xb30 [ 319.397762][T14840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.397787][T14840] ? aa_sock_msg_perm+0xf1/0x1b0 [ 319.397811][T14840] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 319.397827][T14840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.397846][T14840] __sock_sendmsg+0x21c/0x270 [ 319.397874][T14840] ____sys_sendmsg+0x505/0x820 [ 319.397901][T14840] ? __pfx_____sys_sendmsg+0x10/0x10 [ 319.397932][T14840] ? import_iovec+0x74/0xa0 [ 319.397955][T14840] ___sys_sendmsg+0x21f/0x2a0 [ 319.397978][T14840] ? __pfx____sys_sendmsg+0x10/0x10 [ 319.398006][T14840] ? rcu_read_lock_any_held+0xb3/0x120 [ 319.398055][T14840] ? __fget_files+0x2a/0x420 [ 319.398075][T14840] ? __fget_files+0x3a0/0x420 [ 319.398114][T14840] __x64_sys_sendmsg+0x19b/0x260 [ 319.398137][T14840] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 319.398168][T14840] ? __pfx_ksys_write+0x10/0x10 [ 319.398189][T14840] ? do_syscall_64+0xbe/0xf80 [ 319.398211][T14840] do_syscall_64+0xfa/0xf80 [ 319.398241][T14840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.398257][T14840] ? clear_bhb_loop+0x60/0xb0 [ 319.398276][T14840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.398291][T14840] RIP: 0033:0x7fedccd8f749 [ 319.398306][T14840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.398320][T14840] RSP: 002b:00007fedcdc3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.398337][T14840] RAX: ffffffffffffffda RBX: 00007fedccfe5fa0 RCX: 00007fedccd8f749 [ 319.398347][T14840] RDX: 0000000024040800 RSI: 0000200000000000 RDI: 0000000000000003 [ 319.398356][T14840] RBP: 00007fedcdc3f090 R08: 0000000000000000 R09: 0000000000000000 [ 319.398364][T14840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.398374][T14840] R13: 00007fedccfe6038 R14: 00007fedccfe5fa0 R15: 00007ffda837dc48 [ 319.398403][T14840] [ 319.809499][T14729] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 319.921824][T14883] __nla_validate_parse: 15 callbacks suppressed [ 319.921842][T14883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2466'. [ 319.940937][T14884] IPVS: Error connecting to the multicast addr [ 320.001123][T14884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2465'. [ 320.012018][T14884] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2465'. [ 320.582151][T14914] FAULT_INJECTION: forcing a failure. [ 320.582151][T14914] name failslab, interval 1, probability 0, space 0, times 0 [ 320.598277][T14915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2472'. [ 320.615262][T14914] CPU: 0 UID: 0 PID: 14914 Comm: syz.0.2473 Not tainted syzkaller #0 PREEMPT(full) [ 320.615287][T14914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 320.615297][T14914] Call Trace: [ 320.615304][T14914] [ 320.615312][T14914] dump_stack_lvl+0x189/0x250 [ 320.615337][T14914] ? __pfx____ratelimit+0x10/0x10 [ 320.615355][T14914] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.615375][T14914] ? __pfx__printk+0x10/0x10 [ 320.615400][T14914] ? __lock_acquire+0x6b6/0x2cf0 [ 320.615428][T14914] should_fail_ex+0x414/0x560 [ 320.615457][T14914] should_failslab+0xa8/0x100 [ 320.615478][T14914] kmem_cache_alloc_noprof+0x88/0x710 [ 320.615501][T14914] ? __netlink_lookup+0xbd/0x8a0 [ 320.615523][T14914] ? skb_clone+0x212/0x3a0 [ 320.615548][T14914] skb_clone+0x212/0x3a0 [ 320.615572][T14914] __netlink_deliver_tap+0x404/0x850 [ 320.615607][T14914] ? netlink_deliver_tap+0x2e/0x1b0 [ 320.615649][T14914] netlink_deliver_tap+0x19c/0x1b0 [ 320.615672][T14914] netlink_unicast+0x7fa/0x9e0 [ 320.615699][T14914] ? __pfx_netlink_unicast+0x10/0x10 [ 320.615720][T14914] ? netlink_sendmsg+0x642/0xb30 [ 320.615738][T14914] ? skb_put+0x11b/0x210 [ 320.615761][T14914] netlink_sendmsg+0x805/0xb30 [ 320.615792][T14914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.615817][T14914] ? aa_sock_msg_perm+0xf1/0x1b0 [ 320.615840][T14914] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 320.615856][T14914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.615877][T14914] __sock_sendmsg+0x21c/0x270 [ 320.615905][T14914] ____sys_sendmsg+0x505/0x820 [ 320.615932][T14914] ? __pfx_____sys_sendmsg+0x10/0x10 [ 320.615962][T14914] ? import_iovec+0x74/0xa0 [ 320.615993][T14914] ___sys_sendmsg+0x21f/0x2a0 [ 320.616016][T14914] ? __pfx____sys_sendmsg+0x10/0x10 [ 320.616044][T14914] ? rcu_read_lock_any_held+0xb3/0x120 [ 320.616095][T14914] ? __fget_files+0x2a/0x420 [ 320.616115][T14914] ? __fget_files+0x3a0/0x420 [ 320.616147][T14914] __x64_sys_sendmsg+0x19b/0x260 [ 320.616168][T14914] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 320.616199][T14914] ? __pfx_ksys_write+0x10/0x10 [ 320.616221][T14914] ? do_syscall_64+0xbe/0xf80 [ 320.616243][T14914] do_syscall_64+0xfa/0xf80 [ 320.616263][T14914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.616280][T14914] ? clear_bhb_loop+0x60/0xb0 [ 320.616302][T14914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.616319][T14914] RIP: 0033:0x7fedccd8f749 [ 320.616335][T14914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.616349][T14914] RSP: 002b:00007fedcdc3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.616369][T14914] RAX: ffffffffffffffda RBX: 00007fedccfe5fa0 RCX: 00007fedccd8f749 [ 320.616382][T14914] RDX: 0000000024040800 RSI: 0000200000000000 RDI: 0000000000000003 [ 320.616394][T14914] RBP: 00007fedcdc3f090 R08: 0000000000000000 R09: 0000000000000000 [ 320.616404][T14914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.616415][T14914] R13: 00007fedccfe6038 R14: 00007fedccfe5fa0 R15: 00007ffda837dc48 [ 320.616447][T14914] [ 320.625965][T14914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2473'. [ 320.986868][T14914] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2473'. [ 369.748411][T14929] bond8: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 369.760903][T14931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2480'. [ 369.761911][T14939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2478'. [ 369.808996][ T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 369.820327][ T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 369.829299][ T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 369.838631][ T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 369.846422][ T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 369.856544][T14929] bond8: entered promiscuous mode [ 369.863540][T14929] bond8: entered allmulticast mode [ 369.870690][T14929] 8021q: adding VLAN 0 to HW filter on device bond8 [ 369.958163][T14945] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2481'. [ 369.972672][T14947] 8021q: VLANs not supported on ip6gre0 [ 369.989765][T14947] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20003 [ 370.101043][T14952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2484'. [ 370.229334][T14959] tipc: Enabling of bearer rejected, media not registered [ 370.248610][T14960] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 370.707177][T14978] tipc: Started in network mode [ 370.742547][T14978] tipc: Node identity , cluster identity 4711 [ 370.763408][T14978] tipc: Failed to obtain node identity [ 370.765492][T14983] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2494'. [ 370.783313][T14983] xt_policy: neither incoming nor outgoing policy selected [ 370.785156][T14978] tipc: Enabling of bearer rejected, failed to enable media [ 370.918782][T14979] syzkaller0: entered promiscuous mode [ 370.924386][T14979] syzkaller0: entered allmulticast mode [ 370.934147][T14940] wlan0 speed is unknown, defaulting to 1000 [ 371.194730][T15005] xt_CT: You must specify a L4 protocol and not use inversions on it [ 371.241192][T15007] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2503'. [ 371.385529][T15010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2504'. [ 371.897638][ T53] Bluetooth: hci6: command tx timeout [ 372.494226][T15010] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2504'. [ 372.561079][T15013] siw: device registration error -23 [ 372.652044][T15017] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2506'. [ 372.930700][T15037] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2512'. [ 372.943266][T15037] openvswitch: netlink: Flow key attr not present in new flow. [ 372.944535][T14940] chnl_net:caif_netlink_parms(): no params data found [ 373.030567][T15037] bond12: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 373.044344][T15037] bond12 (unregistering): Released all slaves [ 373.131518][T14940] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.140178][T14940] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.148380][T14940] bridge_slave_0: entered allmulticast mode [ 373.155501][T14940] bridge_slave_0: entered promiscuous mode [ 373.165108][T14940] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.202444][T14940] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.210712][T14940] bridge_slave_1: entered allmulticast mode [ 373.219750][T14940] bridge_slave_1: entered promiscuous mode [ 373.300750][T14940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.322811][T14940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.368273][T15064] netlink: 'syz.2.2520': attribute type 1 has an invalid length. [ 373.547994][T14940] team0: Port device team_slave_0 added [ 373.572577][T14940] team0: Port device team_slave_1 added [ 373.723198][T14940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.747381][T14940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.810460][T14940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.828767][T14940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.836296][T14940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.867645][T14940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.978431][ T53] Bluetooth: hci6: command tx timeout [ 374.055827][T14940] hsr_slave_0: entered promiscuous mode [ 374.064560][T14940] hsr_slave_1: entered promiscuous mode [ 374.072254][T14940] debugfs: 'hsr0' already exists in 'hsr' [ 374.079984][T14940] Cannot create hsr debugfs directory [ 374.086054][T15090] syzkaller1: entered promiscuous mode [ 374.108719][T15090] syzkaller1: entered allmulticast mode [ 374.659627][T15125] can: request_module (can-proto-0) failed. [ 375.033375][T14940] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 375.053835][T14940] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 375.075341][T14940] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 375.119084][T14940] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 375.125360][T15133] __nla_validate_parse: 7 callbacks suppressed [ 375.125377][T15133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2540'. [ 375.168046][T15136] ip6t_REJECT: ECHOREPLY is not supported [ 375.192157][T15137] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2541'. [ 375.360042][T15147] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2542'. [ 375.385000][T14940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.464196][T14940] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.512371][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.519633][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.584348][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.591681][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.001406][T15172] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 376.056451][T15172] netdevsim netdevsim3: Falling back to sysfs fallback for:  [ 376.072123][ T53] Bluetooth: hci6: command tx timeout [ 376.301325][T15189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2551'. [ 376.315969][T15189] FAULT_INJECTION: forcing a failure. [ 376.315969][T15189] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 376.339836][T14940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.340178][T15184] SET target dimension over the limit! [ 376.347934][T15189] CPU: 1 UID: 0 PID: 15189 Comm: syz.2.2551 Not tainted syzkaller #0 PREEMPT(full) [ 376.347958][T15189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 376.347972][T15189] Call Trace: [ 376.347980][T15189] [ 376.347988][T15189] dump_stack_lvl+0x189/0x250 [ 376.348014][T15189] ? __pfx____ratelimit+0x10/0x10 [ 376.348032][T15189] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.348052][T15189] ? __pfx__printk+0x10/0x10 [ 376.348086][T15189] should_fail_ex+0x414/0x560 [ 376.348194][T15189] _copy_to_user+0x31/0xb0 [ 376.348221][T15189] simple_read_from_buffer+0xe1/0x170 [ 376.348246][T15189] proc_fail_nth_read+0x1b3/0x220 [ 376.348267][T15189] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 376.348288][T15189] ? rw_verify_area+0x2a6/0x4d0 [ 376.348304][T15189] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 376.348324][T15189] vfs_read+0x200/0xa30 [ 376.348339][T15189] ? fdget_pos+0x247/0x320 [ 376.348362][T15189] ? __pfx___mutex_lock+0x10/0x10 [ 376.348380][T15189] ? __pfx_vfs_read+0x10/0x10 [ 376.348398][T15189] ? __fget_files+0x2a/0x420 [ 376.348422][T15189] ? __fget_files+0x3a0/0x420 [ 376.348441][T15189] ? __fget_files+0x2a/0x420 [ 376.348469][T15189] ksys_read+0x145/0x250 [ 376.348488][T15189] ? __pfx_ksys_read+0x10/0x10 [ 376.348508][T15189] ? do_syscall_64+0xbe/0xf80 [ 376.348530][T15189] do_syscall_64+0xfa/0xf80 [ 376.348548][T15189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.348564][T15189] ? clear_bhb_loop+0x60/0xb0 [ 376.348584][T15189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.348605][T15189] RIP: 0033:0x7f453058e15c [ 376.348621][T15189] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 376.348635][T15189] RSP: 002b:00007f45313d4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 376.348654][T15189] RAX: ffffffffffffffda RBX: 00007f45307e5fa0 RCX: 00007f453058e15c [ 376.348666][T15189] RDX: 000000000000000f RSI: 00007f45313d40a0 RDI: 0000000000000005 [ 376.348676][T15189] RBP: 00007f45313d4090 R08: 0000000000000000 R09: 0000000000000000 [ 376.348686][T15189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 376.348697][T15189] R13: 00007f45307e6038 R14: 00007f45307e5fa0 R15: 00007fffad8067b8 [ 376.348727][T15189] [ 376.585554][T15195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2552'. [ 376.698914][T15198] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2553'. [ 376.794173][T15201] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2554'. [ 376.950677][T15217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2559'. [ 377.057830][ T6616] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 377.115026][T15231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2562'. [ 377.132673][T14940] veth0_vlan: entered promiscuous mode [ 377.146541][T14940] veth1_vlan: entered promiscuous mode [ 377.195769][T14940] veth0_macvtap: entered promiscuous mode [ 377.218449][T14940] veth1_macvtap: entered promiscuous mode [ 377.274009][T14940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.289357][T15239] netlink: 'syz.0.2564': attribute type 11 has an invalid length. [ 377.302741][T14940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.329003][T15239] netlink: 'syz.0.2564': attribute type 11 has an invalid length. [ 377.344082][ T50] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.359831][ T50] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.373535][ T50] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.396025][ T50] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.482084][T15246] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2566'. [ 377.831957][ T3468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.856905][ T3468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.905335][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.920796][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.003807][T15260] ip6gre2: entered promiscuous mode [ 378.010781][T15260] ip6gre2: entered allmulticast mode [ 378.101366][T15269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.127825][T15268] veth1_to_bond: entered allmulticast mode [ 378.142886][ T53] Bluetooth: hci6: command tx timeout [ 378.257766][T15261] veth1_to_bond: left allmulticast mode [ 378.614118][T15313] netlink: 'syz.4.2585': attribute type 10 has an invalid length. [ 378.650322][T15305] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input7 [ 378.668174][T15308] netlink: 'syz.0.2583': attribute type 3 has an invalid length. [ 378.710440][T15313] team0: Port device geneve0 added [ 378.728205][ T3468] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 378.781269][ T3468] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 378.804211][ T3468] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 378.826324][ T3468] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 378.844625][T15325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.250428][T15353] x_tables: ip_tables: ah match: only valid for protocol 51 [ 379.259838][T15354] x_tables: ip_tables: ah match: only valid for protocol 51 [ 379.748352][T15382] netlink: 'syz.6.2602': attribute type 1 has an invalid length. [ 379.766118][T15390] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 379.889104][T15395] : entered promiscuous mode [ 380.158897][T15413] __nla_validate_parse: 9 callbacks suppressed [ 380.158916][T15413] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2610'. [ 380.178661][T15416] netlink: 'syz.6.2611': attribute type 2 has an invalid length. [ 380.261627][T15419] veth5: entered allmulticast mode [ 380.300273][T15420] veth7: entered allmulticast mode [ 380.343592][T15419] IPVS: persistence engine module ip_vs_pe_@ not found [ 380.366670][T15426] IPVS: persistence engine module ip_vs_pe_@ not found [ 380.612988][T15447] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2619'. [ 380.630313][T15447] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2619'. [ 380.649936][T15452] sctp: [Deprecated]: syz.6.2620 (pid 15452) Use of struct sctp_assoc_value in delayed_ack socket option. [ 380.649936][T15452] Use struct sctp_sack_info instead [ 380.678183][T15452] sctp: [Deprecated]: syz.6.2620 (pid 15452) Use of struct sctp_assoc_value in delayed_ack socket option. [ 380.678183][T15452] Use struct sctp_sack_info instead [ 380.782716][T15447] netlink: 'syz.0.2619': attribute type 21 has an invalid length. [ 380.804961][T15457] netlink: 'syz.6.2621': attribute type 1 has an invalid length. [ 380.813616][T15457] netlink: 228 bytes leftover after parsing attributes in process `syz.6.2621'. [ 380.815635][T15447] IPv6: NLM_F_CREATE should be specified when creating new route [ 380.825728][T15457] xt_NFQUEUE: number of total queues is 0 [ 380.854984][T15457] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2621'. [ 380.867801][T15459] openvswitch: netlink: IP tunnel dst address not specified [ 380.906837][T15459] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2622'. [ 380.929204][T15459] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2622'. [ 381.029010][T15462] netlink: 'syz.6.2623': attribute type 12 has an invalid length. [ 381.074496][T15462] bond1: option primary_reselect: invalid value (255) [ 381.084964][T15462] bond1 (unregistering): Released all slaves [ 381.470755][T15487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2630'. [ 381.536141][T15491] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2632'. [ 381.570348][T15490] xt_TPROXY: Can be used only with -p tcp or -p udp [ 381.656156][T15498] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.2631'. [ 383.300525][T15512] hsr_slave_0 (unregistering): left promiscuous mode [ 383.508159][T15534] netlink: 'syz.2.2644': attribute type 13 has an invalid length. [ 383.557805][ C0] Unknown status report in ack skb [ 384.340097][T15588] netlink: zone id is out of range [ 384.349699][T15588] netlink: get zone limit has 8 unknown bytes [ 384.501879][T15603] netlink: 'syz.0.2666': attribute type 3 has an invalid length. [ 384.540117][T15602] netlink: 'syz.0.2666': attribute type 3 has an invalid length. [ 384.639220][T15604] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 384.819868][T15612] bond12 (unregistering): Released all slaves [ 385.161386][T15643] openvswitch: netlink: Key 9 has unexpected len 2 expected 4 [ 385.172350][T15642] __nla_validate_parse: 11 callbacks suppressed [ 385.172367][T15642] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2678'. [ 385.475084][T15666] gre2: entered promiscuous mode [ 385.481419][T15666] gre2: entered allmulticast mode [ 385.483530][T15668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2686'. [ 385.532709][T15670] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2687'. [ 385.747790][T15684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2691'. [ 385.768066][T15684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2691'. [ 385.822339][T15687] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2692'. [ 385.832716][T15687] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2692'. [ 385.864783][T15690] netlink: 'syz.2.2693': attribute type 12 has an invalid length. [ 385.996270][T15698] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2695'. [ 386.008077][T15698] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2695'. [ 386.042981][T15702] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2697'. [ 386.207275][T15708] netlink: 'syz.2.2701': attribute type 1 has an invalid length. [ 387.241313][T15751] netlink: 'syz.3.2714': attribute type 1 has an invalid length. [ 387.733992][T15782] netlink: 'syz.0.2723': attribute type 21 has an invalid length. [ 387.777995][T15782] netlink: 'syz.0.2723': attribute type 6 has an invalid length. [ 388.112816][T15808] netlink: 'syz.4.2734': attribute type 1 has an invalid length. [ 388.178868][T15808] bond9 (unregistering): Released all slaves [ 388.290354][T15818] ip6tnl3: entered promiscuous mode [ 388.296392][T15818] ip6tnl3: entered allmulticast mode [ 388.301441][T15830] nbd: must specify an index to disconnect [ 388.615681][T15849] netlink: 'syz.6.2745': attribute type 5 has an invalid length. [ 389.266464][T15888] veth0: entered promiscuous mode [ 389.291358][T15888] veth0: left promiscuous mode [ 389.469703][T15896] tipc: Enabled bearer , priority 0 [ 389.488638][T15896] lo: entered promiscuous mode [ 389.496299][T15896] lo: entered allmulticast mode [ 389.548176][T15896] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 389.559566][T15896] tipc: Resetting bearer [ 389.581466][T15895] tipc: Disabling bearer [ 389.889993][T15932] netlink: 'syz.2.2772': attribute type 1 has an invalid length. [ 390.167642][T15947] nbd: couldn't find device at index 2 [ 390.232694][T15955] __nla_validate_parse: 20 callbacks suppressed [ 390.232711][T15955] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2780'. [ 390.256357][T15953] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2780'. [ 390.266595][T15960] Set syz1 is full, maxelem 0 reached [ 390.274525][T15959] Set syz1 is full, maxelem 0 reached [ 390.300756][T15953] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2780'. [ 390.393974][T15967] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2783'. [ 390.406529][T15967] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2783'. [ 390.428722][T15967] netlink: 'syz.0.2783': attribute type 5 has an invalid length. [ 390.446823][T15967] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2783'. [ 390.459549][ T53] Bluetooth: hci6: command tx timeout [ 390.478182][T15970] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2784'. [ 390.548385][T15967] xt_hashlimit: invalid interval [ 390.708916][T15981] xt_nat: multiple ranges no longer supported [ 390.928933][ T5848] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 390.941095][ T5848] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 390.950026][ T5848] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 390.958790][ T5848] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 390.966448][ T5848] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 391.069089][T16002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2793'. [ 391.161041][T16007] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2792'. [ 391.310089][T16020] netlink: 'syz.6.2798': attribute type 1 has an invalid length. [ 391.340746][T16024] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 391.361784][T16024] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 391.875950][T16033] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2800'. [ 392.138291][T16039] netlink: 'syz.0.2803': attribute type 1 has an invalid length. [ 392.176434][T16042] netlink: 'syz.3.2804': attribute type 1 has an invalid length. [ 392.188779][T16035] tipc: Started in network mode [ 392.193792][T16035] tipc: Node identity 3ae681179934, cluster identity 4711 [ 392.247367][T16035] tipc: Enabled bearer , priority 0 [ 392.326544][T16035] syzkaller0: entered promiscuous mode [ 392.332569][T16035] syzkaller0: entered allmulticast mode [ 392.340075][T16035] tipc: Resetting bearer [ 392.359447][ T6109] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.376449][ T6109] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.453085][T16043] bond10: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 392.467056][T16043] bond10: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 392.498546][T16043] bond10: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 392.553065][T16047] bond10: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 392.566555][T16047] bond10: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 392.644364][ T6109] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.672191][ T6109] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.741402][T16034] tipc: Resetting bearer [ 392.805861][ T107] IPVS: starting estimator thread 0... [ 392.812383][T16069] IPVS: nq: FWM 3 0x00000003 - no destination available [ 392.845086][T16069] openvswitch: netlink: EtherType 0 is less than min 600 [ 392.912188][T16071] IPVS: using max 33 ests per chain, 79200 per kthread [ 393.016744][ T5848] Bluetooth: hci7: command tx timeout [ 394.295317][T16034] tipc: Disabling bearer [ 394.308660][T15991] wlan0 speed is unknown, defaulting to 1000 [ 394.318758][ T6109] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.329226][ T6109] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.413474][ T5994] tipc: Node number set to 2748481815 [ 394.451760][ T6109] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.485886][ T6109] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.632386][T16103] bond1: option mode: unable to set because the bond device has slaves [ 394.657320][T16103] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 395.099454][ T5848] Bluetooth: hci7: command tx timeout [ 395.113346][T16136] netlink: 'syz.3.2828': attribute type 4 has an invalid length. [ 395.174627][T16143] --map-set only usable from mangle table [ 395.608496][ T6109] team0: Port device bridge3 removed [ 395.984988][ T6109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.997997][ T6109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.010435][ T6109] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 396.022406][ T6109] bond0 (unregistering): (slave team0): Releasing backup interface [ 396.034633][ T6109] bond0 (unregistering): Released all slaves [ 396.060003][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 396.147318][ T6109] bond1 (unregistering): Released all slaves [ 396.252134][ T6109] bond2 (unregistering): Released all slaves [ 396.264504][ T6109] bond3 (unregistering): Released all slaves [ 396.278373][ T6109] bond4 (unregistering): Released all slaves [ 396.312296][T15991] chnl_net:caif_netlink_parms(): no params data found [ 396.370871][ T5994] syz2: Port: 1 Link DOWN [ 396.425320][T16151] xt_CT: You must specify a L4 protocol and not use inversions on it [ 396.642184][T16163] syzkaller0: entered promiscuous mode [ 396.679331][T16163] syzkaller0: entered allmulticast mode [ 396.744379][T16164] syzkaller1: entered promiscuous mode [ 396.752712][T16151] openvswitch: netlink: Unknown key attributes 2 [ 396.757375][T16164] syzkaller1: entered allmulticast mode [ 396.958564][T16186] __nla_validate_parse: 9 callbacks suppressed [ 396.958584][T16186] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2838'. [ 397.084086][T15991] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.103652][T15991] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.121118][T15991] bridge_slave_0: entered allmulticast mode [ 397.140964][T15991] bridge_slave_0: entered promiscuous mode [ 397.172228][T15991] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.178495][ T53] Bluetooth: hci7: command tx timeout [ 397.211104][T16198] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 397.212030][T15991] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.227653][T15991] bridge_slave_1: entered allmulticast mode [ 397.235438][T15991] bridge_slave_1: entered promiscuous mode [ 397.266517][T16207] netlink: 'syz.6.2844': attribute type 23 has an invalid length. [ 397.361549][T16209] netlink: 'syz.3.2842': attribute type 12 has an invalid length. [ 397.403298][T15991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.483607][T15991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.485645][T16220] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2846'. [ 397.542735][T16220] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2846'. [ 397.629986][T16228] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2847'. [ 397.681198][T15991] team0: Port device team_slave_0 added [ 397.698294][T15991] team0: Port device team_slave_1 added [ 397.793273][T16237] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2850'. [ 397.866161][T15991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.892967][T15991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.923571][T15991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.929490][T16241] nbd: device at index 6 is going down [ 397.962104][T15991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.998735][T15991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.091103][T15991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.389779][T16271] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2859'. [ 398.464753][T15991] hsr_slave_0: entered promiscuous mode [ 398.507184][T15991] hsr_slave_1: entered promiscuous mode [ 398.527725][T15991] debugfs: 'hsr0' already exists in 'hsr' [ 398.565883][T15991] Cannot create hsr debugfs directory [ 398.850562][T16291] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2862'. [ 398.939410][T16291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2862'. [ 399.259717][ T53] Bluetooth: hci7: command tx timeout [ 399.349789][T16313] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 399.511996][ T6109] hsr_slave_0: left promiscuous mode [ 399.528878][ T6109] hsr_slave_1: left promiscuous mode [ 399.539012][ T6109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.540837][T16323] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2871'. [ 399.546926][ T6109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.565183][ T6109] batman_adv: batadv0: Interface deactivated: veth5 [ 399.571989][ T6109] batman_adv: batadv0: Removing interface: veth5 [ 399.580594][T16323] openvswitch: netlink: nsh attr 16383 is out of range max 3 [ 399.645888][ T6109] veth1_vlan: left allmulticast mode [ 399.657774][ T6109] veth1_macvtap: left promiscuous mode [ 399.665318][ T6109] veth0_macvtap: left promiscuous mode [ 399.673281][ T6109] veth1_vlan: left promiscuous mode [ 399.679230][ T6109] veth0_vlan: left promiscuous mode [ 400.320489][ T6109] team0 (unregistering): Port device team_slave_1 removed [ 400.359778][ T6109] team0 (unregistering): Port device team_slave_0 removed [ 400.440511][ T4370] smc: removing ib device syz2 [ 401.120401][T16364] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2880'. [ 401.185167][ T53] Bluetooth: hci5: command 0x0405 tx timeout [ 401.437185][T16376] pimreg: left allmulticast mode [ 401.524590][T15991] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 401.553666][T15991] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 401.604238][T15991] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 401.659619][T15991] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 401.690646][T16386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.697440][T16385] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.031434][T15991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.109522][T15991] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.142186][ T3922] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.149494][ T3922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.205816][ T3922] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.213136][ T3922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.560653][T15991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.680060][T15991] veth0_vlan: entered promiscuous mode [ 402.696542][T15991] veth1_vlan: entered promiscuous mode [ 402.738296][T15991] veth0_macvtap: entered promiscuous mode [ 402.753159][T15991] veth1_macvtap: entered promiscuous mode [ 402.780228][T15991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.802015][T15991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.833481][ T6109] IPVS: stop unused estimator thread 0... [ 402.845411][ T2910] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.860980][ T2910] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.871726][ T2910] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.908052][ T2910] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.020061][ T6616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.029010][ T6616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.059013][ T6012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.069133][ T6012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.463338][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 447.476924][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 447.489390][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 447.498772][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 447.510871][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 447.606512][T16429] bond12 (unregistering): Released all slaves [ 447.634979][T16432] macvlan0: entered promiscuous mode [ 447.718502][T16435] bond12 (unregistering): Released all slaves [ 448.341678][T16471] __nla_validate_parse: 2 callbacks suppressed [ 448.341695][T16471] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2907'. [ 448.440277][T16473] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2908'. [ 448.460349][T16473] geneve3: entered promiscuous mode [ 448.516025][T16475] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2909'. [ 448.684950][T16426] wlan0 speed is unknown, defaulting to 1000 [ 448.685001][T16482] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2910'. [ 448.768045][T16485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2911'. [ 448.873153][T16487] delete_channel: no stack [ 449.083665][T16505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2918'. [ 449.134627][T16426] chnl_net:caif_netlink_parms(): no params data found [ 449.265279][T16514] ipt_REJECT: TCP_RESET invalid for non-tcp [ 449.381845][T16523] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2925'. [ 449.392061][T16523] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2925'. [ 449.407264][T16523] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2925'. [ 449.436185][T16426] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.447088][T16426] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.447314][T16523] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2925'. [ 449.454348][T16426] bridge_slave_0: entered allmulticast mode [ 449.475632][T16426] bridge_slave_0: entered promiscuous mode [ 449.486296][T16528] netlink: 'syz.4.2924': attribute type 10 has an invalid length. [ 449.505232][T16426] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.513546][T16426] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.520994][T16426] bridge_slave_1: entered allmulticast mode [ 449.529553][T16426] bridge_slave_1: entered promiscuous mode [ 449.576790][ T5848] Bluetooth: hci3: command tx timeout [ 449.615822][T16426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.640572][T16426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.771465][T16426] team0: Port device team_slave_0 added [ 449.781414][T16426] team0: Port device team_slave_1 added [ 449.909837][T16426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.935662][T16426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.965414][T16556] netlink: 'syz.2.2936': attribute type 1 has an invalid length. [ 449.969594][T16426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.998838][T16426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.009664][T16426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.038169][T16426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.248016][T16426] hsr_slave_0: entered promiscuous mode [ 450.254798][T16426] hsr_slave_1: entered promiscuous mode [ 450.277868][T16426] debugfs: 'hsr0' already exists in 'hsr' [ 450.284074][T16426] Cannot create hsr debugfs directory [ 450.772631][T16592] sit1: entered promiscuous mode [ 450.793807][T16592] sit1: entered allmulticast mode [ 451.064620][T16426] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.077088][T16426] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.197299][T16426] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.208659][T16426] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.328112][T16426] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.344429][T16426] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.443713][T16426] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.471595][T16426] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.656914][ T5848] Bluetooth: hci3: command tx timeout [ 451.659751][T16642] netlink: 'syz.4.2965': attribute type 1 has an invalid length. [ 451.740776][T16646] macvlan2: entered promiscuous mode [ 451.746082][T16646] macvlan2: entered allmulticast mode [ 451.797733][T16646] bond9: entered promiscuous mode [ 451.824192][T16646] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 451.841126][T16646] bond9: left promiscuous mode [ 451.869093][T16637] tipc: Started in network mode [ 451.874074][T16637] tipc: Node identity 1e74fbfaa98, cluster identity 4711 [ 451.891966][T16637] tipc: Enabled bearer , priority 0 [ 451.924694][ T9] IPVS: starting estimator thread 0... [ 451.995188][T16654] syzkaller0: entered promiscuous mode [ 451.995997][T16664] netlink: 'syz.6.2971': attribute type 1 has an invalid length. [ 452.000897][T16654] syzkaller0: entered allmulticast mode [ 452.016431][T16654] tipc: Resetting bearer [ 452.017069][T16659] IPVS: using max 33 ests per chain, 79200 per kthread [ 452.101681][ T6616] tipc: Resetting bearer [ 452.147572][T16426] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 452.161853][T16426] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 452.177904][T16426] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 452.202528][T16426] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 452.240144][T16679] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 452.247460][T16679] IPv6: NLM_F_CREATE should be set when creating new route [ 452.254706][T16679] IPv6: NLM_F_CREATE should be set when creating new route [ 452.272844][T16681] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 452.313027][ T2910] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.329351][ T2910] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.350165][ T2910] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.382890][T16633] tipc: Resetting bearer [ 452.434146][T16690] netlink: 'syz.2.2975': attribute type 1 has an invalid length. [ 453.737971][ T5848] Bluetooth: hci3: command tx timeout [ 453.758684][T16633] tipc: Disabling bearer [ 453.767610][ T2910] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.786225][ T9] tipc: Node number set to 3086285818 [ 453.808476][T16426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.842603][T16426] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.907793][ T3922] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.915078][ T3922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.976407][ T3922] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.983762][ T3922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.986069][T16711] netlink: 'syz.0.2980': attribute type 21 has an invalid length. [ 454.039014][T16711] __nla_validate_parse: 70 callbacks suppressed [ 454.039032][T16711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2980'. [ 454.111876][T16714] macsec1: entered promiscuous mode [ 454.510064][T16742] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2989'. [ 454.526441][T16743] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2990'. [ 454.585576][T16743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2990'. [ 454.640860][T16426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.810472][T16426] veth0_vlan: entered promiscuous mode [ 454.836311][T16765] xt_TPROXY: Can be used only with -p tcp or -p udp [ 454.852702][T16426] veth1_vlan: entered promiscuous mode [ 454.882945][T16758] : renamed from veth0_vlan (while UP) [ 454.989630][T16772] netlink: 'syz.4.2999': attribute type 1 has an invalid length. [ 455.015624][T16426] veth0_macvtap: entered promiscuous mode [ 455.044989][T16426] veth1_macvtap: entered promiscuous mode [ 455.069937][T16426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.101876][T16426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.121825][ T3978] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.144578][ T3978] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.164136][ T3978] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.173643][T16778] netlink: 'syz.4.3002': attribute type 1 has an invalid length. [ 455.193675][ T3978] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.207079][T16778] netlink: 'syz.4.3002': attribute type 1 has an invalid length. [ 455.214983][T16778] netlink: 'syz.4.3002': attribute type 1 has an invalid length. [ 455.226461][T16778] netlink: 'syz.4.3002': attribute type 2 has an invalid length. [ 455.267930][T16778] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3002'. [ 455.449700][T16793] netlink: 'syz.4.3004': attribute type 15 has an invalid length. [ 455.464229][T16793] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3004'. [ 455.483249][T16796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3004'. [ 455.494941][ T6616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.537285][ T6616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.560828][T16795] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 455.671321][T16810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3008'. [ 455.686439][T16812] Bluetooth: MGMT ver 1.23 [ 455.752960][ T3978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.761665][ T3978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.818580][ T5848] Bluetooth: hci3: command tx timeout [ 455.951383][ T9] IPVS: starting estimator thread 0... [ 456.056934][T16825] IPVS: using max 36 ests per chain, 86400 per kthread [ 456.217259][T16835] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 456.274893][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 456.285017][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 456.295128][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 456.310542][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 456.318506][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 456.895571][T16854] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3021'. [ 456.995506][T16854] tap0: tun_chr_ioctl cmd 1074025672 [ 457.011368][T16854] tap0: ignored: set checksum disabled [ 457.218520][T16862] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3025'. [ 457.222862][T16836] wlan0 speed is unknown, defaulting to 1000 [ 457.551368][T16885] netlink: 'syz.6.3032': attribute type 1 has an invalid length. [ 457.620244][T16885] 8021q: adding VLAN 0 to HW filter on device bond1 [ 457.636326][T16836] chnl_net:caif_netlink_parms(): no params data found [ 457.703837][T16896] netlink: 'syz.3.3036': attribute type 12 has an invalid length. [ 457.828943][T16836] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.847760][T16836] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.855060][T16836] bridge_slave_0: entered allmulticast mode [ 457.869144][T16836] bridge_slave_0: entered promiscuous mode [ 457.891499][T16836] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.912899][T16836] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.927146][T16836] bridge_slave_1: entered allmulticast mode [ 457.945425][T16836] bridge_slave_1: entered promiscuous mode [ 458.241486][T16836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.298221][T16836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.377349][ T5848] Bluetooth: hci4: command tx timeout [ 458.402169][T16836] team0: Port device team_slave_0 added [ 458.413163][T16836] team0: Port device team_slave_1 added [ 458.566127][T16836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.573596][T16836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.601796][T16836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.631009][T16836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.663144][T16836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.736632][T16836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.882211][T16964] sock: sock_timestamping_bind_phc: sock not bind to device [ 458.967008][T16836] hsr_slave_0: entered promiscuous mode [ 458.974071][T16836] hsr_slave_1: entered promiscuous mode [ 458.994413][T16836] debugfs: 'hsr0' already exists in 'hsr' [ 459.010345][T16836] Cannot create hsr debugfs directory [ 459.262477][T16987] __nla_validate_parse: 4 callbacks suppressed [ 459.262496][T16987] netlink: 296 bytes leftover after parsing attributes in process `syz.6.3058'. [ 459.274071][T16991] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3059'. [ 459.394005][T16989] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3060'. [ 459.404122][T16989] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3060'. [ 459.527139][T16836] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.532111][T17006] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3063'. [ 459.548750][T16836] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.691463][T16836] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.718346][T16836] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.879427][T16836] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.898324][T16836] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.920472][T17036] netlink: 'syz.6.3069': attribute type 1 has an invalid length. [ 459.928761][T17027] netlink: 'syz.4.3068': attribute type 1 has an invalid length. [ 459.929506][T17036] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3069'. [ 460.042548][T16836] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.055310][T16836] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.340536][T17054] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3074'. [ 460.396284][T16836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 460.432077][T16836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 460.461118][ T5848] Bluetooth: hci4: command tx timeout [ 460.474274][T16836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 460.488784][T16836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 460.537301][ T31] INFO: task syz.5.2372:14454 blocked for more than 143 seconds. [ 460.553252][ T31] Not tainted syzkaller #0 [ 460.574012][T17061] syzkaller0: entered promiscuous mode [ 460.579936][T17061] syzkaller0: entered allmulticast mode SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 460.586463][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 460.624570][ T31] task:syz.5.2372 state:D stack:27192 pid:14454 tgid:14451 ppid:13081 task_flags:0x400040 flags:0x00080002 [ 460.716970][ T31] Call Trace: [ 460.720295][ T31] [ 460.723418][ T31] __schedule+0x14bc/0x5000 [ 460.734471][ T31] ? __pfx___schedule+0x10/0x10 [ 460.740366][ T31] ? schedule+0x91/0x360 [ 460.744859][ T31] schedule+0x165/0x360 [ 460.752945][ T31] schedule_preempt_disabled+0x13/0x30 [ 460.786698][ T31] __mutex_lock+0x7e6/0x1350 [ 460.791342][ T31] ? __mutex_lock+0x5bb/0x1350 [ 460.796137][ T31] ? nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 460.807160][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 460.812373][ T31] ? __nlmsg_put+0xef/0x1b0 [ 460.822485][ T31] ? genlmsg_put+0x137/0x2e0 [ 460.827585][ T31] nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 460.833181][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 460.842110][ T31] ? __local_bh_enable_ip+0x12d/0x1c0 [ 460.847965][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 460.853289][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 460.863794][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 460.870151][ T31] genl_rcv_msg+0x60e/0x790 [ 460.874672][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 460.880276][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 460.886382][ T31] netlink_rcv_skb+0x208/0x470 [ 460.891315][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 460.896447][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 460.902030][ T31] ? down_read+0x274/0x2e0 [ 460.906471][ T31] ? genl_rcv+0xd/0x40 [ 460.910718][ T31] genl_rcv+0x28/0x40 [ 460.914714][ T31] netlink_unicast+0x82f/0x9e0 [ 460.919570][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 460.924862][ T31] ? netlink_sendmsg+0x642/0xb30 [ 460.929953][ T31] ? skb_put+0x11b/0x210 [ 460.934208][ T31] netlink_sendmsg+0x805/0xb30 [ 460.939332][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.945416][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 460.951240][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 460.956552][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.962009][ T31] __sock_sendmsg+0x21c/0x270 [ 460.967150][ T31] ____sys_sendmsg+0x505/0x820 [ 460.971944][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 460.977359][ T31] ? import_iovec+0x74/0xa0 [ 460.982442][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 460.987490][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 460.992723][ T31] ? futex_wait+0x285/0x360 [ 460.997367][ T31] ? __fget_files+0x2a/0x420 [ 461.001961][ T31] ? __fget_files+0x3a0/0x420 [ 461.006780][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 461.011725][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 461.017963][ T31] ? do_syscall_64+0xbe/0xf80 [ 461.022664][ T31] do_syscall_64+0xfa/0xf80 [ 461.027216][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.033298][ T31] ? clear_bhb_loop+0x60/0xb0 [ 461.038105][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.044432][ T31] RIP: 0033:0x7f2e00b8f749 [ 461.049021][ T31] RSP: 002b:00007f2e01a97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 461.057581][ T31] RAX: ffffffffffffffda RBX: 00007f2e00de5fa0 RCX: 00007f2e00b8f749 [ 461.065563][ T31] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 461.073582][ T31] RBP: 00007f2e00c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 461.081597][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.089725][ T31] R13: 00007f2e00de6038 R14: 00007f2e00de5fa0 R15: 00007ffc347a1c38 [ 461.098076][ T31] [ 461.101849][ T31] [ 461.101849][ T31] Showing all locks held in the system: [ 461.110049][ T31] 1 lock held by khungtaskd/31: [ 461.114923][ T31] #0: ffffffff8df41a20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 461.125246][ T31] 2 locks held by getty/5590: [ 461.130068][ T31] #0: ffff888033e880a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 461.139946][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 461.166742][ T31] 4 locks held by syz-executor/5828: [ 461.172075][ T31] 2 locks held by kworker/0:8/5969: [ 461.206895][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 461.236671][ T31] #1: ffffc900046afb80 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 461.276664][ T31] 3 locks held by kworker/u8:20/11894: [ 461.282160][ T31] #0: ffff88814ca30148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 461.356667][ T31] #1: ffffc90003357b80 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 461.396677][ T31] #2: ffffffff8f311c88 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 461.406244][ T31] 2 locks held by syz.1.1721/12149: [ 461.436655][ T31] #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 461.444903][ T31] #1: ffffffff8e237ac8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1660 [ 461.506662][ T31] 2 locks held by syz.5.2372/14454: [ 461.512078][ T31] #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 461.556642][ T31] #1: ffffffff8e237ac8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 461.586663][ T31] 3 locks held by syz-executor/16836: [ 461.592261][ T31] 2 locks held by syz.6.3077/17060: [ 461.626662][ T31] #0: ffffffff8f311c88 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 461.635859][ T31] #1: ffffffff8df47578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 461.652098][ T31] 1 lock held by syz.2.3079/17065: [ 461.662131][ T31] 5 locks held by syz.3.3080/17066: [ 461.667460][ T31] #0: ffff888053bdcec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5b0 [ 461.677540][ T31] #1: ffff888053bdc0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x1100 [ 461.688473][ T31] #2: ffffffff8f483848 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 461.700062][ T31] #3: ffff888034c72338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5b0 [ 461.710616][ T31] #4: ffffffff8df47578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 461.722104][ T31] [ 461.724473][ T31] ============================================= [ 461.724473][ T31] [ 461.733089][ T31] NMI backtrace for cpu 1 [ 461.733109][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 461.733128][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 461.733138][ T31] Call Trace: [ 461.733146][ T31] [ 461.733154][ T31] dump_stack_lvl+0x189/0x250 [ 461.733181][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 461.733202][ T31] ? __pfx__printk+0x10/0x10 [ 461.733238][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 461.733264][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 461.733289][ T31] ? __pfx__printk+0x10/0x10 [ 461.733316][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 461.733343][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 461.733366][ T31] sys_info+0x135/0x170 [ 461.733384][ T31] watchdog+0xf95/0xfe0 [ 461.733411][ T31] ? watchdog+0x20a/0xfe0 [ 461.733440][ T31] kthread+0x711/0x8a0 [ 461.733464][ T31] ? __pfx_watchdog+0x10/0x10 [ 461.733484][ T31] ? __pfx_kthread+0x10/0x10 [ 461.733506][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 461.733530][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 461.733545][ T31] ? __pfx_kthread+0x10/0x10 [ 461.733566][ T31] ret_from_fork+0x599/0xb30 [ 461.733586][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 461.733613][ T31] ? __switch_to_asm+0x39/0x70 [ 461.733632][ T31] ? __switch_to_asm+0x33/0x70 [ 461.733651][ T31] ? __pfx_kthread+0x10/0x10 [ 461.733673][ T31] ret_from_fork_asm+0x1a/0x30 [ 461.733710][ T31] [ 461.733716][ T31] Sending NMI from CPU 1 to CPUs 0: [ 461.893522][ C0] NMI backtrace for cpu 0 [ 461.893539][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 461.893556][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 461.893566][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 461.893587][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 90 0c 00 f3 0f 1e fa fb f4 c8 ed 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 461.893600][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 461.893615][ C0] RAX: 28731f1537c6df00 RBX: ffffffff81978fda RCX: 28731f1537c6df00 [ 461.893627][ C0] RDX: 0000000000000001 RSI: ffffffff8d7926cf RDI: ffffffff8bc08360 [ 461.893638][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b86336db R09: 1ffff110170c66db [ 461.893649][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f822170 [ 461.893661][ C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000 [ 461.893671][ C0] FS: 0000000000000000(0000) GS:ffff888125e35000(0000) knlGS:0000000000000000 [ 461.893684][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 461.893694][ C0] CR2: 000055ef7c89e000 CR3: 000000003edf0000 CR4: 00000000003526f0 [ 461.893709][ C0] Call Trace: [ 461.893715][ C0] [ 461.893721][ C0] default_idle+0x13/0x20 [ 461.893738][ C0] default_idle_call+0x73/0xb0 [ 461.893756][ C0] do_idle+0x1ea/0x520 [ 461.893772][ C0] ? irqentry_exit+0x5ba/0x660 [ 461.893789][ C0] ? __pfx_do_idle+0x10/0x10 [ 461.893813][ C0] cpu_startup_entry+0x44/0x60 [ 461.893829][ C0] rest_init+0x2de/0x300 [ 461.893848][ C0] start_kernel+0x3a7/0x400 [ 461.893864][ C0] x86_64_start_reservations+0x24/0x30 [ 461.893883][ C0] x86_64_start_kernel+0x143/0x1c0 [ 461.893900][ C0] common_startup_64+0x13e/0x147 [ 461.893928][ C0] [ 462.094940][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 462.101859][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 462.111247][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 462.121838][ T31] Call Trace: [ 462.125372][ T31] [ 462.128290][ T31] dump_stack_lvl+0x99/0x250 [ 462.133076][ T31] ? __asan_memcpy+0x40/0x70 [ 462.137653][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 462.142944][ T31] ? __pfx__printk+0x10/0x10 [ 462.147638][ T31] vpanic+0x237/0x6d0 [ 462.152616][ T31] ? __pfx_vpanic+0x10/0x10 [ 462.157155][ T31] ? preempt_schedule_common+0x83/0xd0 [ 462.162606][ T31] panic+0xb9/0xc0 [ 462.166319][ T31] ? __pfx_panic+0x10/0x10 [ 462.170816][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 462.176261][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 462.182420][ T31] watchdog+0xfdf/0xfe0 [ 462.186588][ T31] ? watchdog+0x20a/0xfe0 [ 462.190957][ T31] kthread+0x711/0x8a0 [ 462.195018][ T31] ? __pfx_watchdog+0x10/0x10 [ 462.199798][ T31] ? __pfx_kthread+0x10/0x10 [ 462.205709][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 462.211014][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 462.216739][ T31] ? __pfx_kthread+0x10/0x10 [ 462.221425][ T31] ret_from_fork+0x599/0xb30 [ 462.226105][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 462.231214][ T31] ? __switch_to_asm+0x39/0x70 [ 462.236077][ T31] ? __switch_to_asm+0x33/0x70 [ 462.240837][ T31] ? __pfx_kthread+0x10/0x10 [ 462.247008][ T31] ret_from_fork_asm+0x1a/0x30 [ 462.251844][ T31] [ 462.255437][ T31] Kernel Offset: disabled [ 462.259956][ T31] Rebooting in 86400 seconds..