last executing test programs: 2m57.047812398s ago: executing program 0 (id=2709): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000880)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x4}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000680)="e2", 0x1}], 0x1}}], 0x1, 0x14) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x85, &(0x7f00000061c0)={0x0, 0x88, "0200000000000000703fcd09bdf0b493d4323725cdcff2eae49f89843a5318d5ba093aa761132b512e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364b87808f6ec3b597fae6ac116b5bc6c564f98676e592103c268225b716a73e48c8c8f8ec21e15e7a5d6743243dfde8a664"}, &(0x7f0000000500)=0x90) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x20000015) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) getsockname$packet(r3, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1}, 0x50) socket$packet(0x11, 0x2, 0x300) openat$tun(0xffffffffffffff9c, 0x0, 0x400, 0x0) gettid() ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) r6 = gettid() r7 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r5, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r6}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003400128009000100626f6e640000000024000280050001000400000008001e0000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2m56.090925095s ago: executing program 0 (id=2720): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1400000004000000040000009200000000000000", @ANYRES64=0x0, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRESHEX=0x0, @ANYRESOCT=0x0], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r3, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0x1}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="ef616b4d", 0x4}, {0x0}], 0x2}, 0x4040810) r4 = socket$inet6(0xa, 0x3, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote, r5}, 0x14) sendmmsg$inet6(r4, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x4, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000aa", @ANYRES32=r5, @ANYBLOB="43b3a327"], 0x28}}], 0x1, 0x10) sendmsg$nl_route(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800010000000000fddbdf251d01050008000a00", @ANYRES32, @ANYBLOB, @ANYRES16=r2], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x400c010) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r6, 0x8912, &(0x7f0000002c00)=@buf={0x500, &(0x7f0000002bc0)}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES64=r1, @ANYRES16=r8, @ANYBLOB="250300000000000000001600000014000180100001006574683a76657468305f746f5f68737200000000"], 0x5f}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}]}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES64=r8, @ANYRESOCT=0x0, @ANYBLOB="0af9c25649ca54a9b6c802f2c563ba10b6cef543746427f488d04c7abbc61879803d745322d80ba79ecbbe18fb52430465d0ed7d00484bc2787f9011f14753eb2007f9b7286deb6e4c57eb3a1b166ddeddba9c6d7b00061440f80b6811031b427007d694129fa3130d0be0c10db6cbe2acbecc26d2b47a7370baca15ba50103eee28edc33cae07d431e73b855ba7a040762448410e057970e4b26b56746ddf9ef8bd87e42da6797f2fe8195d1d952273af85c3", @ANYRESDEC=r1, @ANYRESDEC, @ANYRESDEC=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000b40)={r10, @in={{0x2, 0x4e21, @empty}}, 0x0, 0xb92}, 0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000340)={0x81, 0x2, 0x820a, 0x80000001, 0x2, 0x1ff, 0x7, 0x17fffffd, r10}, &(0x7f0000000480)=0x20) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.empty_time\x00', 0x0, 0x0) r11 = socket(0x40000000015, 0x5, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r0, r0}, 0xc) bind$inet(r11, &(0x7f0000000100)={0x2, 0x203, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) connect$inet6(r11, &(0x7f00000003c0)={0xa, 0x4e22, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c) sendto$inet(r11, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 2m55.804527664s ago: executing program 0 (id=2725): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3, 0xffffffff, 0x0, 0xfffffffd}, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000060a010400000000000000000a0000010900010073797a310000000038000480340001800900010068617368000000002400028008000640000000040800024000000014080007400000b72ed9e10440000000000900020073797a3200"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001200010a"], 0x14}}, 0x0) (async) r2 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES16, @ANYBLOB="cfeaa566d7443c193d6df8864ff8c58de7f8e9da6af7f279d47a7a00fda797784c418eaafd84960b052ca67eaa46767c3f292c3134a0c1e5c383417a8ce36d5c766c1c769b36a23a94f910acaca0c9dd6fbbbbc59fecee57634627f0", @ANYRESHEX=r2], 0x28}}, 0x4000040) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000206010800000000000000000000000014000780080011400000000005001500340db7490500010006000000050005000a00000005000400000000000900020073797a300000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000240)={0x12}) (async) write(r5, &(0x7f0000000340), 0x11000) (async) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r7, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x98, 0x1, 0x7, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfbc}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xb8d}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xb}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x98}, 0x1, 0x0, 0x0, 0x8800}, 0x4004880) 2m55.57726245s ago: executing program 0 (id=2727): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x1, 0x1, 0xf61, 0x9, {{0x2b, 0x4, 0x0, 0x12, 0xac, 0x68, 0x0, 0x5c, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, {[@timestamp_prespec={0x44, 0x1c, 0xce, 0x3, 0x2, [{@broadcast, 0x16}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x3}, {@multicast2, 0x8000}]}, @noop, @cipso={0x86, 0x4a, 0x2, [{0x6, 0xa, "628ce4f9f827bfbf"}, {0x0, 0x12, "7b90f9a63c86cfcc8deabe0b484a1eb5"}, {0x6, 0x10, "07fb6b3e434cf38efd64a8f741cb"}, {0x0, 0x11, "a16309eed87e678ca7e6dd85a7bc63"}, {0x0, 0x7, "d7f76693a0"}]}, @timestamp_addr={0x44, 0x1c, 0x6e, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x1d}, 0xfffffffd}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}, @noop, @lsrr={0x83, 0x13, 0xb9, [@empty, @broadcast, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop]}}}}}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000400)={0x1d, r4}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000380)={@ipv4={""/10, ""/2, @broadcast}, 0x0}, &(0x7f00000003c0)=0x14) sendmmsg$inet(r1, &(0x7f00000005c0)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000340)}}, {{&(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000140)="a623c640ef2dbdcd97990826ca266db04c27ab1a2d76d1e5a7d4cea7ede3ea8b4d6d61b1864a58857cb31aabd8236e30182a210c5e2ffe8a02388e482eeb7895f6d446ef099ba913fb4876c78c7dc8a41d069e4bb0255957239bc3dfb6be83016c6788aedb7f71727034b18b1392cda03045bdc82491e28de8683ca55f111215e9633d969d7237195f323d70b953d6981abb9dbf87b86ef2fcb5e4007210fec536105d292bd29378fcc1285f", 0xac}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="ac1414aae0000002000000080000000000000000000000001c00"/40, @ANYRES32=r6, @ANYBLOB="e0000001ac1414aa00000000110000000000000000000000010000000900000000000000"], 0x1b0}}], 0x2, 0x2400c0a2) 2m55.25019121s ago: executing program 0 (id=2732): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x7800, 0x0, 0x120000, 0x7, {{0x15, 0x4, 0x0, 0x14, 0x54, 0x64, 0x0, 0x2, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x3c, 0xd9, 0x3, 0xb, [{@multicast1, 0x5}, {@local, 0x6}, {@private=0xa010101, 0x1}, {@multicast2, 0xe26}, {@remote, 0x7}, {@broadcast, 0x2}, {@remote, 0x120000}]}, @generic={0x83, 0x4, "0bfb"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl0\x00', r1, 0x2f, 0x4, 0xd, 0x7f, 0x1, @private0, @dev={0xfe, 0x80, '\x00', 0x28}, 0x7, 0x700, 0x6, 0x1000}}) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000180), &(0x7f00000001c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bind$tipc(r3, &(0x7f0000000240)=@name={0x1e, 0x2, 0x3, {{0x1, 0x4}, 0x3}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x5) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r4) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000d00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000300)={0x99c, r5, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x988, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "577a65d6e01002c1db7de3e7d10fc0daa319b0e7b78e4dbe76b534d2aa387c3c"}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a54daf419b8bd5db7f0e8ea50122e15e153c70161cae5eae229db3c1a8d5a4b5"}]}, {0x578, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ALLOWEDIPS={0x55c, 0x9, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x42}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}]}, {0x1d0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "025de0cc586e74c22b9ff4a64a30967991205ad6b9f18bae7f3311bd62dd20bb"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f61872d5a0006713cd8124d7a85c4449d53f88902679685a1072d168f25bf644"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @local}}, @WGPEER_A_ALLOWEDIPS={0xdc, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}]}, {0x4}, {0x1e8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x1e4, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x3}}]}]}]}]}]}, 0x99c}, 0x1, 0x0, 0x0, 0x8080}, 0x44) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) getsockopt$ax25_int(r6, 0x101, 0x5, &(0x7f0000000d40), &(0x7f0000000d80)=0x4) pipe(&(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000e00)={r2, 0x1, 0x6, @broadcast}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000e80), r7) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10c00420}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x30, r10, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x484, 0x9, 0x4, 0x2}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x88010) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r11, &(0x7f0000001140)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001100)={&(0x7f0000000fc0)={0x11c, 0x15, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0xc1, 0x8, "c274e558b4c89f62d561f0bf98cf31edbff2b148c21450b802d0126bf07beb1a817dd27df4688fbb2c16386904a975c458a9b30bf0a8235cea97b1006d09a6800f5a52f04463995138d8e373d504fe1415dd117bca0c5f955e1d13ec19838443c525d015085049085602caf192f9abd0fe3ba82ed677e320f409e5b1dce5e0bc3c85c60a991171220df4932c05f99061f80c66b4df266e62a18559803854bf665a4bf951a8c24660bfb4971c3b9babe549c9201a2480cd5165c72cf232"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0x5, 0x8, 'O'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x11c}}, 0x40) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, &(0x7f0000001180)={0x0, 0xd4, "be745c1ad501727b434bcd5ef08466c2d98075c4b9bcee2e1fb483c4c8269e50addd62cbc3391bbee2550d4e0b0ab7d7bd74fcbc0a1f7eac410edfb0705e65ef0493f49a2cc77bf761df8ba37de58e98692159f9a49647af1be5dbfefac67d9d73a97cf780ffaea8fe0305348207cb307ec8f66cefc0f58084398dd2500d87d14c0ef4230703e3924e2264db5ca0d57cad398b683771d3e925ca790b4e38eeb86ef888ca691f92c6cdaa6b3087c812b878616714a89ca0037e08e431b2109eebb146f9747ee6fba04408513690053dede4d1a17e"}, &(0x7f0000001280)=0xdc) getsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f00000012c0)=@assoc_value={r12, 0xc}, &(0x7f0000001300)=0x8) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_timeval(r9, 0x1, 0x42, &(0x7f0000001340), &(0x7f0000001380)=0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002600)={r8, 0x0, 0x88, 0x2d, &(0x7f0000001400)="fdd38e0b7cfc93b9636919e0eaed324eda51a721590bcb0aa3a04ce8123506922b6b260e7cafa1eedc80f8caa9890536100cc3224fbfadfe5a9b8adfe3c182885c2ae7f3922fcae43418413d374b7411021c0181de601b52e4a47ad6d8f063eee090d237878b71d90932971ca842fa9302cb851e12937153105794d2aca16117446d0f5ae55c40b5", &(0x7f00000014c0)=""/45, 0x4a24, 0x0, 0x1000, 0xe7, &(0x7f0000001500)="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", &(0x7f0000002500)="1f6e57ce4a9050c750b1608d3cf3e9bbde937e635af5583a387ee1664f5c5ee5191840a386c57714f55f2779b2530d5aa51103fc35d9e06c64fc4f8016e3427b393a7e7e0a338cfc88597f64c5c4b74e03bd23f86de55981c01f4222cccb598900b9932f0f24b0d033331ab38da1f84ffab2cc4f9f5f0dbb230c5a5941827397d5f4e40beae62f38a4250e6f710865cab00fe04306caa51788d27b6d02aacf57d3fd8d0f9a930badbea1c1da64b975ae2147a69d6a26e91174105e1d7c894d011b195c86f41596f933e96f624ded3a14972ef4412f7b437d147741cf003f3055bd2514f1fb79aa", 0x1, 0x0, 0x2}, 0x50) getsockname$packet(r7, &(0x7f0000002680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000026c0)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r8, 0x84, 0x70, &(0x7f0000002700)={r12, @in={{0x2, 0x4e20, @multicast2}}, [0x0, 0x7, 0x74, 0x0, 0xfffffffffffffff8, 0x7, 0x9, 0x0, 0x4, 0x4, 0x3, 0x9, 0x1, 0x2, 0x7]}, &(0x7f0000002800)=0x100) sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f0000002900)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002880)={0x40, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x545cb438}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000002940)={r13}, &(0x7f0000002980)=0x8) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f00000029c0)={'veth1_to_bond\x00', @local}) 2m54.903475779s ago: executing program 0 (id=2736): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0xffffffffffffff2f, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4001d}, 0x48000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffff7ffd, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x36}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) 2m42.877103023s ago: executing program 1 (id=2831): unshare(0x26020480) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r2, 0x6, 0x1, 0x7f}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x200}, @iv={0x78, 0x117, 0x2, 0x60, "ecf1ae3b87224b0032db2d0cdca4e8a5c53446ae9cc9550352176a32c265c7ffef62dba746013427797dbab74bf68bbb6b8d567b19a12b6823fa67d1e36923f2c82078cd55c8654c21614f13b577fd987ea76109af4174ca5430bb7f2b16b33d"}, @assoc={0x18, 0x117, 0x4, 0x28000}, @iv={0x108, 0x117, 0x2, 0xf3, "7c367d00dfbd37ae40e7f19327956469e6ad4d11dfa4f7d280117ad89aedd1db765cb6dbc3f19e5b4b45389187e2ffa9fbd78d60ed5ffb3b80d50e1b2f39e06ce1a33cb47905b48b21d2c7930c53c6dfcd2f583a0de41a378e3e3af228fc3f103c8b5825cdb0fe2a9bd4d112bcd14eb61d86a2fcb0b2797b25247524dcca24fd5a5e1eaa640523cb37b058246eb9e69dc421b64f36f062d048b355e1a1fb74f6e8f6a65b9a3d8de71b033f0b146e61ff067da545cbe31c2e856a5851976ac149b7067898e29920384c254ffe2c445f148f3b9834722744d4cb6ae7bbc0b6ec0dc6d64d69cabbe0d1b5d926af633b9509a3fee9"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xd0, 0x117, 0x2, 0xb8, "c8e581fe5be34d67e1fa67408b6f29ecdb1e43080ccb6f15b4160249e160a93418a47f4240ebc9b02c48da3dc49defd9da925fafe729febea4f800cc0639358272532800c836fabca1d8fbf4b79ae39b5052090136a3c74dcda2f28ec86b35fdb33bc07efdce5f963ab132e3c0716c822e7aa0efca22515371092671ab98bfeacc95d07378c403819f97ff6221f9efda2ea6f81978ec2e49c0b194197e95f87a049488c37a67d1532d7f20448c015cc1c4382aecbdebb891"}], 0x2b0, 0x488c1}, 0x0) recvmmsg(r6, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/57, 0x39}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f00000003c0)=""/213, 0xd5}], 0x5}, 0x3}], 0x1, 0x10100, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x7fff}}}}}}}, 0x3e) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xa, &(0x7f0000000080)=@raw=[@btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x70}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @map_fd={0x18, 0xa, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000100)='syzkaller\x00', 0xd, 0xc7, &(0x7f0000000340)=""/199, 0x40f00, 0x7a, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x6, 0x7, 0x4}, 0x10, 0x2fae6, 0xffffffffffffffff, 0x9, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, r2], &(0x7f0000000440)=[{0x1, 0x3, 0x4, 0x1}, {0x5, 0x1, 0x3}, {0x4, 0x3, 0x10, 0x4}, {0x4, 0x2, 0x9}, {0x4, 0x1, 0x3, 0x3}, {0x0, 0x2, 0xd, 0x4}, {0x1ff, 0x4, 0xc, 0xc}, {0x4, 0x4, 0x2, 0x8}, {0x2, 0x2, 0x4, 0x8}], 0x10, 0x965}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x4, 0x28, &(0x7f00000005c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2e4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x3}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, @generic={0x2, 0x3, 0x4, 0x81, 0xffff8000}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x69}}, @generic={0xcd, 0xb, 0x9, 0xfff9, 0x40}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffff}], &(0x7f0000000280)='GPL\x00', 0x100, 0xd9, &(0x7f0000000700)=""/217, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x80004, 0xe, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000840)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], 0x0, 0x10, 0x1}, 0x94) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x1b, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x800}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}, @map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9b7d}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @ringbuf_query]}, &(0x7f0000000a40)='GPL\x00', 0x800, 0x9e, &(0x7f0000000a80)=""/158, 0x41100, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x2a, 0x1}, 0x8, 0x10, &(0x7f0000000b80)={0x4, 0x7, 0x8, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000bc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000c00)=[{0x5, 0x2, 0xe, 0x6}, {0x0, 0x1, 0x7, 0x8}, {0x1, 0x1, 0x4, 0xc}], 0x10, 0x5}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x44, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x803b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x24001840}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = getpid() sendmmsg$unix(r12, &(0x7f00000017c0)=[{{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001780)=[@rights={{0x14, 0x1, 0x1, [r12]}}, @cred={{0x1c, 0x1, 0x2, {r13}}}], 0x38, 0x40004}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wg2\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d40)=ANY=[@ANYBLOB="a80000001100040029bdf000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="008000000000010008002800f7090000050027007f00000044002b8008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="0800030009000000080003000000000008000100", @ANYRES32=r9, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r10, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r11, @ANYBLOB, @ANYRES32, @ANYBLOB="0a000200bbbbbbbbbbbb000008002000ffffff7f08001300", @ANYRES32=r13, @ANYBLOB="080023000400000008002800536c000008000a00", @ANYRES32=r14, @ANYBLOB], 0xa8}}, 0x4041) 2m41.941878426s ago: executing program 1 (id=2845): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/210, 0xd2}], 0x1}, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) (async) close(r2) (async) syz_emit_ethernet(0xf5, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@mpls_uc={0x8847, {[{0xffffb}], @ipv4=@igmp={{0x6, 0x4, 0x0, 0x31, 0xe3, 0x64, 0x0, 0xad, 0x2, 0x0, @multicast1, @broadcast, {[@ra={0x94, 0x4}]}}, {0x1f, 0x0, 0x0, @multicast1, "4a9b4e624a6fffa4536f062ae38f62a4d2c48d8ea0e02ef43212c02c351c933b82450c1ddf2785f9d9ea186086ceeb1a4b057370678f52550d8cb100cf85eb52e43122c40038162b91bfe679286d1129024c380e2073435b003b56b83b5d37373a9dbb57277bd531690c1ae572e6cbac2ee8e264b5b8a1d1e14b8dc237a47acf5cc511735265563bb5ac67138f00519986a380e810b23f7c1e635794e275bd81eb931cdd42ed33ab15b5acf6789b5203045dcecc8f18dd40a32a319b7629308e279545"}}}}}}, &(0x7f0000000040)={0x1, 0x3, [0x2c9, 0x49b, 0xdc0, 0x3fc]}) (async) sendmsg$inet(r2, &(0x7f0000000640)={&(0x7f0000000140)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000440)="fb604bc0063692e8b045ec244050376c1a83f3f7d830a4eccd3c65388981922d7ceed3431976270a02593d12977761f0599b57221914965fd48dcafbad64d905a31ad022639301f70a022363d387c47deb82", 0x52}, {&(0x7f0000000180)="946b99a4700a0dabf30231f16b812633e0863d0e63cbea", 0x17}, {&(0x7f00000004c0)="4586bbcd51ffb3ddac79368b886be64c3325aa338794eb3694838a8224ab36ab7f1b10e504504ddd7e37367ed353584cf3", 0x31}, {&(0x7f0000000500)="2a75dbe8219576a10ea95adfc000207ae0bf35e4b8d1857474d86b5946b19fbba28e933f9a605a95b5916912f91a5151f0b1ae5585c8babbc4fc4378acdd0071e511c8bae34ab8bf4c689ce7cded74123a6254968a17c6802c3cfdc9d7ac95a96f39e0dabce338d7302a740488e9c7418d73c38c21f1d437411e59fb783c9ae5772d44f8fa30a97d80766af6108ebacd5564018846b13e4c371730f9ea547ca0a00e09f98f3092ef37be70af745406643f2208e670fd35e6b2c67859880b7923700d0bc67e5ad0a626a0e676473d0f4aa9ac", 0xd2}], 0x4}, 0x40000) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYRES32=r0, @ANYRES16=r2], 0x34c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m41.806359575s ago: executing program 1 (id=2848): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000010300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x20) 2m41.74915786s ago: executing program 1 (id=2849): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), r0) r1 = socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5", 0xb4}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb9", 0xd7}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f", 0x21}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da914136a7a4b169f152ec6af9204c3465d58e410029e4f28574ebfef1ac2fc1d17d5133793c9e9fbe4889c2a1427cb84332f6d4dad0f47d084b27c6c5afe46d605c7c33fa61fee2bdf78c16167904fab9a81bbb8a0ee73a56e9a67549a2701def6cc0224d", 0xd6}], 0x3, 0x0, 0x0, 0x1}], 0x2, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x20, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000100000000000000ff030000185300000f000000000000000000000018150000", @ANYRES32, @ANYBLOB="000000000000000085100000fdffffff18130000", @ANYRES32=0x1, @ANYBLOB="000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000209500000000000000"], &(0x7f0000000580)='GPL\x00', 0x3, 0x1c, &(0x7f00000006c0)=""/28, 0x41000, 0x28, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xc, 0x401, 0xcffa}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000780)=[0xffffffffffffffff], &(0x7f00000007c0)=[{0x5, 0x2, 0x0, 0x9}, {0x5, 0x3, 0x10, 0x1}, {0x0, 0x5, 0x4, 0x5}, {0x5, 0x4, 0x7, 0x4}, {0x1, 0x5, 0x8, 0x7}, {0x2, 0x5, 0x10, 0x4}], 0x10, 0x2}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000ac0)={@fallback=r1, 0x1d, 0x0, 0x8, &(0x7f0000000900)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c40)='./cgroup.net/syz0\x00', 0x200002, 0x0) recvmsg$kcm(r3, &(0x7f0000001340)={&(0x7f0000000dc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001280)=[{&(0x7f0000000e40)=""/129, 0x81}, {&(0x7f0000000f00)=""/17, 0x11}, {&(0x7f0000000f40)=""/96, 0x60}, {&(0x7f0000000fc0)=""/66, 0x42}, {&(0x7f0000001040)=""/205, 0xcd}, {&(0x7f0000001140)=""/31, 0x1f}, {&(0x7f0000001180)=""/242, 0xf2}], 0x7, &(0x7f0000001300)=""/36, 0x24}, 0x161) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff, 0xe, 0x0, @val=@netkit}, 0x1c) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000c00)={@cgroup=r5, r2, 0x4, 0x2000, 0x0, @value=r6, @void, @void, @void, r4}, 0x20) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[], 0x6f4}, 0x1, 0x0, 0x0, 0x5}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001fc0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x881f}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x7}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x6}]}}}]}, 0x44}}, 0x0) 2m41.428747029s ago: executing program 1 (id=2853): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="33fe000078009106000000000000004a07"], 0xfe33) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xc5}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffff9}, 0x94) r2 = accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @remote, @netrom, 0x1, @rose}, &(0x7f0000000100)=0x1c, 0x0) connect$rose(r2, &(0x7f0000000140)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, @bcast}, 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={r0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fddbdf251200000008000300", @ANYRES32=r5, @ANYBLOB="0a00060008021100000100000c0043"], 0x34}}, 0x20048054) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x48015}, 0xd1) 2m41.295907036s ago: executing program 1 (id=2856): r0 = socket$kcm(0x11, 0x200000000000003, 0x300) sendmsg$sock(r0, &(0x7f0000000180)={&(0x7f0000000280)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, &(0x7f0000000340)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x18}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000680)={0x14, 0x26, 0x1, 0x70bd2d, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x4000000) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002e00090027bd700000001000040000000c0018000bac0f000aac0f"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 2m39.83503597s ago: executing program 32 (id=2736): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0xffffffffffffff2f, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4001d}, 0x48000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffff7ffd, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x36}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) 2m26.259627871s ago: executing program 33 (id=2856): r0 = socket$kcm(0x11, 0x200000000000003, 0x300) sendmsg$sock(r0, &(0x7f0000000180)={&(0x7f0000000280)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, &(0x7f0000000340)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x18}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000680)={0x14, 0x26, 0x1, 0x70bd2d, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x4000000) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002e00090027bd700000001000040000000c0018000bac0f000aac0f"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 2.806158715s ago: executing program 5 (id=4123): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) 2.705213891s ago: executing program 6 (id=4124): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000140)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) r2 = socket(0x840000000002, 0x3, 0x100) getsockopt$inet6_mreq(r2, 0x29, 0x15, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000440)={0x2, 0x4e22, @empty}, 0x10) listen(r3, 0x0) listen(r1, 0x5) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) sendmmsg$inet6(r0, &(0x7f0000000e80)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000003c0)="e3", 0x1}], 0x1}}], 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001301400000011000a00"/108], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000ad0000000000000500000a140000001100010000000000000000000300000a"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x40000) sendfile(r5, r4, 0x0, 0x8899) shutdown(r0, 0x1) 2.680079273s ago: executing program 2 (id=4126): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040400000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1f000800000000000000000000000000000000000000fb8495adc86b8b3a526fe97fe6e23009a03f0c1777ddde8c83b9460950bb991d8664aa0120df7c68b18c393cbf6688089355d6dc93bcee72a824bb5ed2b59b6281a94469011e52c242ace726e24a138a566e0fa7414d5688195b70dbebccaee7555fffde72510d7dd1f2"], 0xfffffffffffffccb) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000700000006"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000600)={r1, &(0x7f00000004c0)="1b738096d03e4d0db1a37f35b7f774365949bb437844d43e52ea2fe73cb241b914e5a30b07590707c83d55203885a4069ea3227f1a53f41fa4a45e3e4acb5a9b307788cc35acdbbba5496fbe8c74f44a7cea8ef236f57272cc13a888936e596d84315ce3b9ff8b6fc7f4824ca4374ff5cb", &(0x7f0000000540)=""/186}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x100000000001f, &(0x7f0000000180)=0x1, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r5, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de2500"/66, 0x42}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d501f8535bec8e020b41fb2f8", 0xea}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0d340", 0x30}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f", 0xc6}], 0x4}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000b80)="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", 0x166}, {&(0x7f0000000d00)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a4879bd736f1caacc2bbf1194598a652677efb930a5b6ee292c57402e0cc07a9a26ee794e46e604a9aec550d12af09f782e1f6a996f0756604847689d37ee3047e61531a8672447cb501b2560bc0e0c5fb2c9f341ed3972b30190e930af94642ab1557e286442cfa6a84ad931e99549640705cd6261ca7094910df055747e2e2ae170e7850093bf0aa3370e03222b5de4597ca76f3193d4a45e424b540f29271469cea199dfd4f0b959b13609d75e675ab9f948d235be58e437b69394af7c8049c703b7cd70424378cb7e881ae", 0x174}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e6b5e9edd619e22626535212de5a998c5b793abdd7336cd8eb19e2fbd9a6ac2ca9c0f138ee10572672999ca4f51c09f9810459bad7e7bc28fc8890224dc01efcc276e62afe52450049cb6a165ce771a64", 0x7f}], 0x3}}], 0x2, 0x2090) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r5, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x24dfdbff, {0x0, 0x0, 0x0, r10, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x2], [0x0, 0x4, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 2.616214847s ago: executing program 5 (id=4128): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) (async) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010003904dfae3fff11d4310000000000", @ANYRES32=r5, @ANYBLOB="018804000000000020001280080001007369740014000280080003007f00000106000f0001000000"], 0x40}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010003904dfae3fff11d4310000000000", @ANYRES32=r5, @ANYBLOB="018804000000000020001280080001007369740014000280080003007f00000106000f0001000000"], 0x40}}, 0x0) sendto$packet(r2, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x48880, &(0x7f0000000200)={0x11, 0x86dd, r5, 0x1, 0x4, 0x6, @local}, 0x14) (async) sendto$packet(r2, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x48880, &(0x7f0000000200)={0x11, 0x86dd, r5, 0x1, 0x4, 0x6, @local}, 0x14) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x6, @private=0xa410100, 0x4e21, 0x2, 'sed\x00', 0x2, 0x80000000, 0x68}, 0x2c) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000440)=ANY=[@ANYBLOB="0000000000f9f7e3f4ab474d7b8a07000f23040c01ccd771773fc53d43cd0da2726961401030444a28420041bcd7a0dc32053f76931e2fc1549e86f682d0bd02564e0f4362c1ec4d252ace1754eb9a0a15083cb4074dd75723d20609bcf5879f52ac1227fd3b9badd11fbe2700"/124, @ANYRES16=0x0, @ANYBLOB="000000000000000000000e000000"], 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b705000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) r12 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r12) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e000000000000000100000005"], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700)={r11}, 0xc) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) socket(0x1, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r15, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) 2.449711152s ago: executing program 6 (id=4129): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@fallback=r1, 0x26, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0xe, &(0x7f0000000280)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4ff1c3c4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x1, 0xd, 0x4, 0x1, 0xfffffffffffffff0, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], &(0x7f0000000c40)='GPL\x00', 0x1708, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 2.419623808s ago: executing program 3 (id=4131): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0xb4, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x84, 0x8, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x54, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}]}, {0x4}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000044000180060001000a00000008000500000000000c00070000000000000000000800090030002300090006006e6f6e6500000000080008000000000008000b"], 0x58}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) (async) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0xb4, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x84, 0x8, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x54, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}]}, {0x4}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000044000180060001000a00000008000500000000000c00070000000000000000000800090030002300090006006e6f6e6500000000080008000000000008000b"], 0x58}}, 0x0) (async) 2.30723046s ago: executing program 6 (id=4132): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x9, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x6071, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x5, 0x1}]}}}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000000)={0x28, 0xc, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x404a081}, 0x20040000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r3) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x48, r6, 0x5eae78d9c54e9d3f, 0x0, 0x27dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xa}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x200440c4) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendto$inet6(r7, &(0x7f0000000300), 0x22, 0x3b00, 0x0, 0xfffffffffffffdfd) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan4\x00'}) 2.171711137s ago: executing program 5 (id=4134): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x40040) (async) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000540)) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYBLOB="010026bd7000fddbdf2506000000140002002001000000000000000000000000000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a7373685f"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 1.626485239s ago: executing program 5 (id=4136): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x44, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xf}]}, 0x44}, 0x1, 0x0, 0x0, 0x44851}, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x40) sendmmsg(r4, 0x0, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r3], 0x3c}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 1.569383077s ago: executing program 6 (id=4137): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002"], 0x40}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000640)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x20000040) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000300)=@ethtool_pauseparam={0x13, 0xa, 0x0, 0x6}}) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, 0x0, 0x20000810) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r5) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0xd0, r6, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_KEY={0xb4, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x40, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xff}, @NL802154_KEY_ATTR_ID={0x54, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1ff}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24004010}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20084884) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000540)={@remote, 0x1}}) 1.509878495s ago: executing program 3 (id=4138): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) 1.506996997s ago: executing program 2 (id=4139): r0 = socket(0x1e, 0x4, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4}, 0xe) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000180)={0x4, 0x7c, 0x2, 0x0, 0x4, 0x7, 0x9}, 0xc) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) (async) recvmmsg(r0, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001980)=""/96, 0x60}], 0x1, 0x0, 0x18}, 0x9}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000002280)=""/58, 0x3a}], 0x1, &(0x7f0000002300)=""/12, 0xc}, 0x90}], 0x2, 0x40002122, 0x0) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000500)="e8", 0x1}], 0x1}, 0x4800) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x1) 1.462203437s ago: executing program 4 (id=4140): unshare(0x20400) r0 = socket$inet6(0xa, 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x3f, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080), 0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r2, 0x0, 0xc, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x8b}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 1.388374367s ago: executing program 3 (id=4141): unshare(0x8000400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) sendfile(r0, r1, 0x0, 0xbebf) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SENDCALLACCPT(r3, 0x89e9) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000000), 0xa6d8, r2}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.368494412s ago: executing program 6 (id=4142): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000001440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001380)={&(0x7f00000016c0)={0x58, r1, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1882d732915c7513}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004800}, 0x40048c1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x110, 0x110, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@random="7af7f2182e96", @private, @empty}}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xffffff00, 0xd, 0x7, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@remote, {[0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x3ff, 0x6, 0x40, 0x6, 0x0, 0x5, 'team_slave_1\x00', 'gre0\x00', {}, {0xff}, 0x0, 0x6}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0xffffffffffffffad) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000480)="b11430c100"/16, 0x10) r4 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0xa, "ed010cccef1ec4f8e0f1"}, &(0x7f0000000080)=0x12) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000280)={r5, @in6={{0xa, 0x4e21, 0xbca, @private2, 0xfffff4ed}}, 0x6, 0x0, 0x3, 0x4, 0x4, 0x1}, 0x9c) r6 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3f5e97", 0x3}], 0x1, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x24000040) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) sendmmsg$alg(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000680)="41239f77ca426cc8dbe8061c947a9f6744774c70a2cc22480fcf4edea7788af897ea6b8c0acd67d4ad65efb494699c5b4c4cc9bd43c9068873e161e6dafbd3dbab1bfb436142bb6d6c106641890c096576bceab827aec6563b4ba6e57f931757f7e7e038cbf1f788fd68c5c5e680c672e2f3a06ebb74007aa0", 0x79}, {&(0x7f0000000700)="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", 0xfc}, {&(0x7f0000000800)="03d5d60aab5040d9264f50611314d9bd78f6ee6f3b0afbcbd81475e7b58cafbad3e6d2a7a380f0bbbb2a2f86bcbecc31b7cbc6bccb8d6164778b70dcbba347f47b3bb03098c1b1003fddf3897c43c42c0d", 0x51}, {&(0x7f0000000880)="042dfa24e790b85e72dd3afb26b7d686a3f6fcf90a6afaf89f7c0763aaf4b1a7b50c23d49d3582dc855cf776d1ddf1b2c8a9bd71d876b4fed57ae26af6562ef6e06cb34457d7b03573e7b89a6467c94f25475fed9b3870a3c0f46fa5541d78b6b1050d419001520a82df049c9feb113fe56dcd5d4ac90815946cfa5350eeae00200916a7ec0fd732629cd7938f0d151bc132ed6eee7b9f", 0x97}, {&(0x7f0000000940)="6597519c0c054e05171f618894ec9e8621d6ff98f54238b19f49d42b35cd67d9adbee56c713256f719fd1cf056d9d5f475bf9774c9ca1b57063e2c1ad0e254c6f2f043dff0381e5f", 0x48}, {&(0x7f0000000a00)="6af085c20865b2b14be21db3b26e9a2f6883f9d924680ddafc0123128b6220bbb4de6d299c03c1cd5336fb1a385303cba303eca1396e0fdbcc1a1d99b199dcc76da631abaa22ac628c42d16dce54fb1e24cfe48c053b49b49ae285adbf3cb5c36c3aedaa8a54c916cdfad079514d36b4a2db68ebf3215a27097f72fdc7263c6ca12995c79ac84a3dac6281025c3338d76b7ae211d9ece9ad60b773d385c0fa5fe3e8989b09a39d24b921e91232100e470c8a410dffce3cfbadd7f317302e8058c7803c98dbcc61a0657754381ea0151a882254b16173cc9c7b34db130dc6c41cd9283c", 0xe3}, {&(0x7f0000000100)}, {&(0x7f0000000b00)="3820253082a18f52d7bfbeb23c4d7e3af5d817127b3f716e3f3041cf84155de2ea7e02cd1e261b87f9a758b95f841cfbeba951717ccc672722f7b7e4756ce2b106ad74536488700c15f18103597cb7bcc3720615042b18408bb97950f442f5ad74be9d8a6d5507f7f363f077dcd97728490e5ece", 0x74}, {&(0x7f0000000b80)="8e018b87d3f9b78565cb7a475fbf7c93b6f5b7306fb6622aa764fefe737634c66d004e4525ee4711fd902269f9c031a66799c812cffe733fef54178e2531d06d5a47ff3e0850bec79e13801c91f7987013e1bd137d7499f352af0155c57667e6f742fe29c59a32a3c5fcfd3a771ec9b8c96a40300780217e181c2859455f30166c93a434b5fe", 0x86}], 0x9, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x2}], 0x18, 0x20000000}, {0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000d00)="74592a3bd76eb06685395b9645cb5a9455b60b058069ba11783f79a766d5b169e739841aec80aeb073982d7a905f1d123e245af0ba50f89cf48ad165a35bd953e35da58d518179c6e5eae6f7c3f1f18186dfc90d543146e922e0806b403822e6e6921d073450bff87cb66b55298d245946fcc1cc696135", 0x77}, {&(0x7f0000000d80)="aff0e0d4b38789de05a9807b3072231f53333084b560a37f37517741d8ca5aa188b434c9142c1a29d302d6879e4d994473347b60ff82c0c2e6e2214ff53d3ed3057a520458a924c03f5947ba04ab008c4867478a66ed222953a2fc2a09c1602df14a20c23c2337fac461b38b6ae15f32dbf951becde09a1e848c7d369b914ea47e209eac746f218e9f09dccaf476bd8ac64cc5add55e61878b3a491f7b3ba892382ad3417932886de73985d8303b4e111b4508073b29bd1f57252f0709d10525faa0462ddb51ed523120b5d72a21d922c09cb46ccf1174088d272e", 0xdb}, {&(0x7f0000000e80)="85a49d2344422be65a9ef1444cc69f851a64af04809e1a0c65e8603b2e4fd8b89fd56fcada46891003976d3d99d08958023fbf255dc385ba34fd316a32f0874663a523adafe74179d3a9943b7c908163", 0x50}, {&(0x7f0000000f00)="7cf62a7788eab8b44057dd7f92b089bc500ef28948901f9018afa7ddf6c8c6a7ff31d76a23236b20ffd5da71fa6330fbffc97132cbec219dc9d7c2980a10a553e09231bfcc46a0f485925af204aa7101d96c91ad22f82843b65deb91e3908dadcede654a87ef3e1f96a24dded634d0083be6b9ff8560b74d01a22f17bd39d158d35d77067630c3e405033ea29b7b7e189c66862057511765b65546749c7539daf8b3fedb966b37349c3143fb19de824b49b9f2e4446a9e446596df465989e13be3ef9fd6819d65a371ae07d818c5930b16da32080145e9024cbcdd004b51cc4f002af758c8345d88288d916d7ee2d3a563", 0xf1}], 0x4, &(0x7f0000001000), 0x0, 0x41}, {0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="a069c8589cb6e96cc37aa443043e32b518115d1b07c0e89116d6fb481bdee6dd324ccf4551ecf97ae4b265d177b788d3e55ef3012915a07a064d951ab7642b847fd2d54a2372140baf8df2ac995988aaa75edaf619a3ca0d31a88c491ea67d3a6c136de4de0b64055228d0b69607ffd3370f6f482f976650a7f9df637c3750c54ca722aeb35a492cabf177eb2b1c7895999a3e70f52498916e2001ce5777", 0x9e}, {&(0x7f0000001100)="67ba75d6a4e2edf1d7c341f45979a5276efd240b41106726b9b8a4a5ce11f68f5045cbf6d98e84121aeeecc20c0e2468d25fef", 0x33}], 0x2, &(0x7f0000001180)=[@assoc={0x18, 0x117, 0x4, 0xfffffffb}], 0x18, 0xc010}, {0x0, 0x0, &(0x7f0000001240)=[{&(0x7f00000011c0)="962d0549461a667e3dffb8b246a0a2705ad050478a72a502b963bffc3c11ce6de228ca86c36749e103af0c489408f309bed1cf2476467b43ee3869cf75d1b8e6b92d67435066b38f85ca043cb4a5919d144b58a093f033934790024db13a3d641313c5f8a57fdf5fefa58d1311", 0x6d}], 0x1, &(0x7f0000001280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20}, {0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000012c0)="70c3b4a48d75f7bb0ce349f0965e9538d73d5b32da682f6d41c2a25c105e7b00c1f71893434b7d310cc4b6021d3e0baeaa5566e0de647ab7f38473ca73cf31e4fb07555fe3b98c01ce7ed46850eec338dfefaf5e3b44a1e45e45fded89ade0b4caf614b0fc18f77bbe9bcf53c0459669852ade0322d48aa367ed7bbea5427d3e9b3d6daddd86536478c861243e4b442195099bb57e4f03b081fbd191c8eceb294cb494b229b60a9899a919861e4db25d81ff4c24", 0xb4}, {&(0x7f0000001380)}, {&(0x7f0000001b40)="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", 0x1000}], 0x3, &(0x7f0000001400)=[@assoc={0x18, 0x117, 0x4, 0x9}, @assoc={0x18}], 0x30}], 0x5, 0x4c010) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0xff}}]}, &(0x7f0000000180)=0x10) r10 = socket$inet_sctp(0x2, 0x1, 0x84) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r11, 0x107, 0x1, &(0x7f0000000000)={r12, 0x1, 0x6, @multicast}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x85, &(0x7f00000001c0)={r13, @in={{0x2, 0x4e24, @empty}}}, 0x90) r14 = socket(0xa, 0x3, 0x3a) connect$qrtr(r14, &(0x7f0000000200)={0x2a, 0xffffffff00000007, 0x25d4283d975b53f0}, 0xc) recvmmsg(r6, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001480)=""/194, 0x34000}], 0x1}, 0x4}], 0x1, 0x2120, 0x0) 1.253995832s ago: executing program 5 (id=4143): close(0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r1, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x6}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xff}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000a80), 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f00000000c0)}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x20000}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f0000000740)="9499ff8a44b9abcac08ce810f48b819abf082155313ff6a480cb185b3931a9c797fcd64c0ad618f352f287ece0cea0f276317621a56e6f9e1363128f3dd47d32151b779a30b27da289e308a98ce40000000000001b3b394397e5a0fe8b8e986b899a1d000000000000001b500d4faaeaa15ac4d32954c9a1fc883b2fa5045f99c1b577bcbe4976e14a59d1e0b5b76b85944c7f6054007e20a83ec6512cdbe83e96704690dd197c8ecf5fcca8199550400ca9c379f46dbf9031d89a3342f4ed2f354db15300"/210, &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r4, &(0x7f0000000a80), 0x0}, 0x20) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f00000005c0)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fcdbdf25090000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300030000000800090003000000"], 0x44}, 0x1, 0x0, 0x0, 0x40080b1}, 0x4008000) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'pimreg0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) writev(r2, &(0x7f0000000240)=[{&(0x7f00000003c0)="2e9b5b0007e03dd65193dfb6c575963f86dd606712e900320400000000000000eaeb", 0xff6e}, {&(0x7f0000000100)="b700"/12, 0xc}, {&(0x7f0000000400)="17a8a6c41e58e8b6cdb8040db329c064116e4c4cbb04627dfddbd514be6688ff", 0x20}], 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa}, [@generic={0x91, 0x1, 0x1, 0xbb}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) r7 = socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x4e23, 0x0, @private0, 0xfffffffd}}}, &(0x7f0000000040)=0x84) bind$alg(r7, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) accept4(r7, 0x0, 0x0, 0x0) 1.253551561s ago: executing program 2 (id=4144): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x98, 0x0, 0x0, 0x260, 0x260, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x7fffff80, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6, 0x0, 0x5a}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x0, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xff, 0x2, [0x1a, 0x36, 0x1d, 0x1c, 0x23, 0x1e, 0x2c, 0x7, 0x1e, 0x7, 0x2d, 0x37, 0x30, 0x9, 0x3b, 0x16], 0x0, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x11, &(0x7f0000000080)=0x40, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x80002, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x98, 0x0, 0x0, 0x260, 0x260, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x7fffff80, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6, 0x0, 0x5a}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x0, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xff, 0x2, [0x1a, 0x36, 0x1d, 0x1c, 0x23, 0x1e, 0x2c, 0x7, 0x1e, 0x7, 0x2d, 0x37, 0x30, 0x9, 0x3b, 0x16], 0x0, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_int(r2, 0x107, 0x11, &(0x7f0000000080)=0x40, 0x4) (async) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) 1.250332472s ago: executing program 4 (id=4145): syz_emit_ethernet(0x46, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote, {[@timestamp={0x44, 0x10, 0xb, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}, @timestamp={0xd, 0x0, 0x0, 0x9, 0x2, 0x672d, 0x1, 0x9}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r2}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000000)={@local, @random="60dcc396e3c0", @void, {@can={0xc, {{0x2, 0x0, 0x1, 0x1}, 0x2, 0x2, 0x0, 0x0, "945812651b4b6e0a"}}}}, 0x0) 931.087888ms ago: executing program 4 (id=4146): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) r2 = socket(0x1d, 0x3, 0x7fff) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001981100fc000018c6ba35000000000000000700ff86"], 0xfdef) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r1, 0x0, 0x14, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000000000000200fffe0900020073e44ba8fc9d99246bd74c05010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b002100736f636b6574000008000240000000021400000011000100"/121], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) listen(r5, 0x3) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000028006700000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="700b216a26d2835d"], 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) 818.19862ms ago: executing program 2 (id=4147): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400100001a000100feffffff00010000ac1e0101000000000000000080fffffffc010000000000000000000000000001000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc020000000000000000000000008bcc3e6f0000000000009201000000000010a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f000000000000000500000000000000fefffffffc030000000000007e00000005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002"], 0x140}, 0x1, 0x0, 0x0, 0x4010}, 0x844) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x80000, 0x2) setsockopt$inet6_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000001540)='t', 0x1) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000000)=0xfffffffd, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r5}, 0x38) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000080)={0xbf, 0x99, 0x15, 0x5, 0xff, 0x5, 0xfb, 0x8, 0xec, 0x2, 0x81, 0x84, 0x8, 0x5}, 0xe) sendto$inet6(r7, &(0x7f0000000100)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4) recvmmsg(r7, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f00000002c0)}, 0x5}, {{&(0x7f0000000300)=@sco, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000600)=""/91, 0x5b}, {&(0x7f0000000140)=""/17, 0x11}, {&(0x7f0000000680)=""/14, 0xe}, {&(0x7f00000006c0)=""/101, 0x65}, {&(0x7f0000000740)=""/222, 0xde}, {&(0x7f0000000840)=""/117, 0x75}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000500)=""/237, 0xed}, {&(0x7f00000008c0)=""/235, 0xeb}, {&(0x7f0000000ac0)=""/133, 0x85}], 0xa}, 0x557}], 0x2, 0x20, 0x0) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1800000043000701fefffffffcdbdf25ba7c000004004580067e8c6b75154d4c134415007d7197ae45f575c29e65825c1e72cc66d2b2ddae01105dfcdea5aed7627f2de8b915572825cb9a"], 0x18}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x60) r8 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$llc(r8, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0xe, 0x2d, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x10) 628.447141ms ago: executing program 3 (id=4148): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x1c, 0x80800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x0, 0x3, 0xa, 0x7, 0x7f}, 0x20) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x2, 0x8}) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000100)) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000c00)={'tunl0\x00', &(0x7f0000000b80)={'syztnl1\x00', 0x0, 0x40, 0x8, 0xc3, 0x8, {{0x17, 0x4, 0x2, 0x17, 0x5c, 0x68, 0x0, 0x8, 0x2f, 0x0, @remote, @private=0xa010100, {[@cipso={0x86, 0x1e, 0xffffffffffffffff, [{0x0, 0x7, "c9e9be4faf"}, {0x0, 0xc, "5bd5e07c33346700b5d1"}, {0x6, 0x5, "162ff9"}]}, @noop, @timestamp_prespec={0x44, 0xc, 0xac, 0x3, 0x6, [{@multicast2, 0x3bc}]}, @lsrr={0x83, 0x13, 0x6f, [@rand_addr=0x64010101, @remote, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x7, 0x58, [@broadcast]}]}}}}}) sendmmsg$inet6(r1, &(0x7f0000001600)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1, &(0x7f0000000200)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x0, 0x0, 0x0, 0x9}}}, @pktinfo={{0x24, 0x29, 0x32, {@private0}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x87, 0x4, 0x2, 0x9, 0x0, [@remote, @dev={0xfe, 0x80, '\x00', 0x11}]}}}, @hopopts={{0x120, 0x29, 0x36, {0x32, 0x21, '\x00', [@generic={0x0, 0xff, "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"}, @pad1, @ra={0x5, 0x2, 0x40}]}}}, @hopopts={{0x98, 0x29, 0x36, {0x2e, 0xf, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x0, 0x1, [0x45]}}, @generic={0xc7, 0x66, "320ddda83be076e196bbecd6ad3542ac247f849ff2a5c5e91357f2235c3f245bd77b8453a17d93ccaa390e19cf2364d1a14408949b5ca3859f59dbee6b74875e025fbdaa7b4efc1cef00aac3548fc7c1b41bd1aba579b15d3f264fa2446e1cb702ab13ab56fa"}]}}}], 0x230}}, {{&(0x7f0000000440)={0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c, &(0x7f0000000980)=[{&(0x7f0000000480)="b516e37801983117dcd4ed03e17c488e7b1126f4236d55b1ab37206978a156bf03d22fe45e64c0bb941f1c8e46a62aeb66ebc45a17f276c951c1afeed7601c466b2fe7c499651cdefb88245293af7ea9b907837f2428159a93a3c181b61d374d91becd645b77bb1adc6dc6d2546a2f55825496c76d2ffb8609e0d6260c9c731d0464541739524a3bfd828b4907d3c92a782eb954fc818618b55e6ef220571c", 0x9f}, {&(0x7f0000000540)="e10ef3d82a57ed65d61cf5df1d47ad439f4115e8a4b5e182696dec9394824f932c79e89986c1b2d552f501aa15ff0562a994dbceeba0c06b8f3199040ccb15c12fa052ddf0bafe5dad4a32f37cb1cfc8078bf9a3fcb87c39812c14a32c87f473e50007c77a35c336604327fac7619272fb318cd5c50e40c843ac8464b60bf2639b390c000f4de28cbf3989e0f69a3ee75d162892c47a2fa6015125f2d490038ee35fd9571d203919152d2d16a3db70c62fa9750e6d017ea6167a00aa19726a00475c38fb3ffe7fd2de98c094af", 0xcd}, {&(0x7f0000000640)="e19caf4d5440a963537a88ccd7139dee80ac09399c453eb24b3a3265a3b853603105af5302816c9681721b30c26e1f9348693754357e38165f492f704073de2d62ec1a783edfc2eb03dba287d588297ed84fe84132467d2e8ff3f40caaa1008c843edb3b29edf3bfb2fb31e221f696c14e8042111198c540f02f233ecaf5df6db353fd91024b927ae100ebb087495b09d6215a1c07ce59c14115c77046b1274e4fd46b7b4fd83722f40abf75f7e350931dbf861c9d87c25c9aee52fd16134b18b23d7e7b1cc74f8d9f", 0xc9}, {&(0x7f0000000740)="d42021e3790e09215385eb9b2a39120392bfae8d3a703f871456ea8ce5cf1828b658f2543e3141a6264ad56ba9f7f74839958391f56aca8eacea369f3b563a1753b3c48ead3f016f09e85fc5f29a21b3b83eff6249989f7f03ed07eea0229a4eac0fe73b25ca6bcb32fd0a91e915219ada7c75a3136d914ceec822fa97166767bdd232ac", 0x84}, {&(0x7f0000000800)="d6921a4d88be5745d1dc57dcbf46467fe4c83b2754559c8f6829ae0555a4be90257626707e09b9cefb0c9a254f164b01c929c7f6333210864066c8c3c07ca72b28e8efb16996d6e009f7348cfb4aec09ffd1e850c22e2ea95bf2954553c8376df23d01ae", 0x64}, {&(0x7f0000000880)="b5d575fd46fa27f88e71bc5df2528d33f35ec92cd47bb9051b6e351b24fcd8d25f0c35a4e8286e73b105dacfbf6dc73edc3e8b8733948d4138b9bdd88c4bd00dcae08a49caee85ca0607b4671219182d5bad542bf81ecb016bd9db8e77f6d9c53730b2929b21a4d6d1c5ea388f6117188df643bbcce3c222f0bca03d061c1cce393d2a1dd517e49ad8d8cdb0a4200ce9bf3b0c447cbc004c68d14b6e9a009258ab17591c9b1349410cb9163c7ea10347241de579465c6c4f801b2907ed738e880233217d0f375a531293a7e3bdf1f125ea916a2c2d6db94e9f364762dd557d6280c6b345f526ad961f6a08abdbb444395db59121b365", 0xf6}], 0x6, &(0x7f0000000a00)}}, {{&(0x7f0000000a40)={0xa, 0x4e23, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a80)="7a6a0a9f09829ee281b172bd53a89988ceb7961dbac89506fdc383e65590adbf49c98fb8d3339000838eaf23f0b2d58268f9bd8792f4fb81568f83c1c3dadce8ad0ce7a38e77c3ad076a2b72c19f44ab5c497c88a02b1c176269490c50d375152faef7254ad5d4b99a291b20b5f249065301a904128ac9ecec35f7f0961c7114482640ff23a21b4d170332f9d08fd67227cada15bb", 0x95}], 0x1, &(0x7f0000000c40)=[@pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x3c}, r2}}}], 0x28}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000c80)="f77668a6a7e886d6488bba66dd9fd699f9b6158139610af7de4e2df56636bb347b73b18625c9aea17393a3b6a43379e79c8efd2290663f501f24119a4f31d61988c91b3d9828c89db2e5c76fc10f4d115ccf6601cb19209dcfda9fecf534d2808fc64dcc098a9dd08d431ce6fc9a6af0ce17fb235b34f83ac9f1cb83ee03f638e030a7f0b354cb4d492ce540fd65e132f57e79ace2113aa31b9ab670", 0x9c}, {&(0x7f0000000d40)="a0f003e4b0109f5e14237fb37a964555323372cea41d7c3c16ad4f64e82be81f75663a935f9ccf47d629d9900eb1b804abe26b80e895db0098402c6ecb2b4aa1", 0x40}], 0x2, &(0x7f0000000dc0)=[@dstopts={{0xa0, 0x29, 0x37, {0x1, 0x10, '\x00', [@ra={0x5, 0x2, 0x50}, @ra={0x5, 0x2, 0x3}, @generic={0x6, 0x72, "7a39cb25b86da8cb0f5df946ae18998705860ac62ba79a58597c6aefcf06134d5bd8202c297c78d95c1649b803c6f1bb6c2ae3c39ea7e572266a750bebf01b44e1c04adc50e69b4ef6067b6ffe17495b7023ea7143a4e9d02fe12f1c9f5ceadafa8afc3a4753c0fc1e3d2d68c30fd9c28f11"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo]}}}, @rthdrdstopts={{0xf0, 0x29, 0x37, {0x2c, 0x1b, '\x00', [@generic={0x1, 0x16, "c640067d4b8579076df9f173325ddb0c03d58fe4c058"}, @generic={0x2, 0x77, "5acc2dbdb59b463c693adf4722412147b3b0c8f190e0e03a5fbd0eb2e4f4bac216fcb0678a0f0321281a02e83d60822bff7174a0cd7dc9f2a040cf087c552581f16ed083ebdda288bb0a162c1ada14ba56a434552160527fcba21f4387db705553f52b3e34074e4de396c7a2deac66a80386e8c3ae9b55"}, @jumbo={0xc2, 0x4, 0x1ff}, @calipso={0x7, 0x8, {0x1, 0x0, 0x7, 0x8000}}, @jumbo={0xc2, 0x4, 0x10001}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x1}, @hao={0xc9, 0x10, @empty}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}}, @rthdrdstopts={{0x108, 0x29, 0x37, {0x29, 0x1d, '\x00', [@ra={0x5, 0x2, 0x7}, @generic={0xb, 0xe7, "ab4b90b9b6b878a75ac3c779d024f5f05cd5f95d28340cb6f00540f94b45fe5c3548e5e70b8170573e1efd0be2f10d50ba61a72c80569c709613579ecf0afcfb7818a52c9d2d96a5208870febf045047c0cdf8d6d53815170927d57bf4c2b10d007cd17b2db06d7d7ba40b4c4fe488d912200c9b8249cc13f39df0eb3498635ca76128f499ca131e8680cc6d5e871a006b1bb2952681be23727ae2a75b7b05be3a5545f5807575ff7e1db688dd0ea3c8229949ba711dfb9c477ef28bfe21cce396e58492f5727f7d2a862bf2b1a728a574fede2e8ef75b5134862de62ede4be71cbe7ab4828089"}]}}}], 0x298}}, {{&(0x7f0000001080)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7f}, 0x1c, &(0x7f00000011c0)=[{&(0x7f00000010c0)="74a980399a1ce939eec5707aea8a8203a40d24a6887ebba71f9f9afc4d7269353110a7e138d2a8ac726adc0fe3a541a86e505c166c617383ffbe55be42f3eb0857aea7ef54b3baf2837a89414da0e54948865bb9ccf38ffa82fbfaf94ba307bdeb36043efb25f1ccb6e6fedd4673cd1ed9b178f14bd5d6530d15bd11a1c7efd8611219cecf461a6096e15f66f63e68ab37b8", 0x92}, {&(0x7f0000001180)="2cce74f1bf61d6e2e62d28d14edc62ebf803b99d23c9a22eb5872ce525d5bad5330d", 0x22}], 0x2, &(0x7f0000001200)=[@dstopts={{0x130, 0x29, 0x37, {0x1d, 0x22, '\x00', [@generic={0x0, 0x30, "bc520d2a213d5736b3015ce813bf4d3203811732989675f8eabcd117b3656761a007fbe934f01c72dfda06014c2c3414"}, @generic={0x40, 0xb9, "4009730eb634bbf5ca5f7d32f4890a4010ff25d3119624e6e90aab6d00d3d5920328496d43805735f98b3235dbe89f19622ad1d6b93d9be9a8e6a0cd4b41c4b1b0b9829a1004328d0973895c095937904a99ab40069cf958373a6c28f8eb7503ff3fd36127b65774521fefeaa879011b146a10f5ec2b31c5022bfc3a7cbbb206e432e84989f3d35eef07cb615c289605e168b53f665a71ff66ec5b626f570dd7d5e56fff42b43f72b0c4b11da2b425ffa786f27af420d83592"}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @jumbo={0xc2, 0x4, 0x60}]}}}, @hopopts_2292={{0x38, 0x29, 0x36, {0x4, 0x3, '\x00', [@generic={0xe8, 0x1a, "9f6108313203b2288d103d8f3b25e04a09fc8300a86f45616760"}]}}}, @rthdrdstopts={{0x78, 0x29, 0x37, {0x4, 0xb, '\x00', [@calipso={0x7, 0x58, {0x3, 0x14, 0x9, 0xbb, [0x510aae28, 0xffffffffffffffff, 0x2, 0x1ff, 0x401, 0x7, 0xc, 0x3, 0xf, 0x8000000000000000]}}, @ra={0x5, 0x2, 0x2}]}}}, @hoplimit={{0x14}}, @dontfrag={{0x14, 0x29, 0x3e, 0xcdbc}}, @rthdr={{0x38, 0x29, 0x39, {0x3b, 0x4, 0x1, 0x0, 0x0, [@mcast2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x8, 0x2, 0x1, 0x6, 0x0, [@loopback]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x96}}, @hopopts={{0x170, 0x29, 0x36, {0x1d, 0x2a, '\x00', [@pad1, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x2, 0xe, 0x4, 0x0, [0x4, 0x9, 0x1, 0xfff, 0x4, 0x80000001, 0x8ba9]}}, @jumbo={0xc2, 0x4, 0x1}, @generic={0x8, 0xd1, "c09b49717b56e1afee74d63804a7ee9bd50d31da0037ea185f2c8376697328883edf7d6ed29fb1b5309b2a873c1a25b00efb4b95e00d9f48378031e32ebca51baf86f179541d0e69b8ff8d10f91e963df0309a422dc929c9c6dae96ed539aee902036ab5394e0cc735c4783d5a9d2fe01bbc5139327fffd9f9f98abb8a4bea90246e1ced89e06bd5b4addcdedf3758455e4e2674c9751f25c9808f93ab70130ad27404cf824084484af3f70d3c94cc5b203982468141de5be240d6dbbce695af4eef99fd053d0a521884f5cbde5911c306"}, @jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0x7}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @hao={0xc9, 0x10, @local}]}}}], 0x3f8}}], 0x5, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001740)={{{@in6=@loopback, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000001840)=0xe8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000001880), &(0x7f00000018c0)=0x14) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000001900)={0xffffffffffffffff, 0x1, 0x8, r2, 0x2}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000001940), r4) recvmsg(r0, &(0x7f0000002bc0)={&(0x7f0000001980)=@nl, 0x80, &(0x7f0000002b00)=[{&(0x7f0000001a00)=""/163, 0xa3}, {&(0x7f0000001ac0)=""/57, 0x39}, {&(0x7f0000001b00)=""/4096, 0x1000}], 0x3, &(0x7f0000002b40)=""/124, 0x7c}, 0x1041) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002c00)={'nr0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000002cc0)={'syztnl0\x00', &(0x7f0000002c40)={'ip6_vti0\x00', r5, 0x2f, 0x5, 0x4, 0x0, 0x4, @remote, @ipv4={'\x00', '\xff\xff', @remote}, 0x7800, 0x1, 0x3ff, 0x3aafe401}}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000002d00)=0xcc, 0x8) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000002d40)=0x9, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000002e40)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x28, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x17}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002ec0), r6) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000002f00), 0x8) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000002fc0)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002f80)={&(0x7f0000002f40)={0x1c, r7, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000}, 0x400c0) syz_genetlink_get_family_id$ethtool(&(0x7f0000003000), 0xffffffffffffffff) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f0000003040)={0x1, 0x9b, "8c6fbff11cb6194bf9a226fab6f35fa4dda1bd1d5bcac4453ea8577f8a2a067cf0e771b5fbbf0bec5458a62a83acbd60015c0f09da8f8675d277c517b28b27ba68c955b466a4afef9e7f89a0fb51fd79f58cd2e095e708221ce78064a3e11f461927cbbbbfc54565852ba9ee1e200faa491f68d5a26921a842eaefb7f56258c1792a2ae5fb83e2cf6c8f2aa5441e418cbdc4e0fcedfd2f54d903ce"}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003140), r8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r8, &(0x7f0000003280)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003240)={&(0x7f00000031c0)={0x4c, r9, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x9000000, 0x44}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}}, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000032c0)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000003400)={'gretap0\x00', &(0x7f0000003300)={'gretap0\x00', r5, 0x80, 0x20, 0xd0, 0x1, {{0x30, 0x4, 0x0, 0x20, 0xc0, 0x67, 0x0, 0x3, 0x4, 0x0, @loopback, @multicast1, {[@lsrr={0x83, 0x7, 0xc8, [@rand_addr=0x64010100]}, @end, @lsrr={0x83, 0x7, 0xa6, [@broadcast]}, @lsrr={0x83, 0x17, 0x65, [@multicast2, @remote, @remote, @remote, @remote]}, @timestamp_addr={0x44, 0x3c, 0x49, 0x1, 0x2, [{@local, 0x7}, {@loopback, 0x93bc}, {@loopback, 0xfffffff5}, {@empty}, {@private=0xa010100, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@remote, 0x2}]}, @noop, @ra={0x94, 0x4, 0x1}, @end, @timestamp={0x44, 0x10, 0x5b, 0x0, 0x3, [0x3d7, 0x5, 0x3]}, @timestamp_prespec={0x44, 0x34, 0x30, 0x3, 0x0, [{@broadcast}, {@private=0xa010102, 0x3}, {@multicast1, 0x1ff}, {@multicast2, 0x5}, {@multicast2, 0x9}, {@rand_addr=0x64010102, 0xe0db}]}]}}}}}) 601.357235ms ago: executing program 5 (id=4149): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0xfffff000) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x458, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x388, 0xffffffff, 0xffffffff, 0x388, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff0000ff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x81, 0x0, 0x7}}, @common=@ah={{0x30}, {[0x4d2, 0x4d3], 0x8, 0xc, 0x3}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x3, 0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x87, 0x0, 0x0, 0x41}, 0x0, 0x1f8, 0x260, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x1000005, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@recent0={{0xf8}, {0xffff, 0x40, 0x10, 0x1, 'syz0\x00', 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x8, 0x2, 0x8, 'pptp\x00', 'syz1\x00', {0x5a}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4b8) getsockopt$inet_int(r0, 0x0, 0x21, 0x0, &(0x7f00000001c0)=0x2) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) unshare(0x62040200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0xfffff000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$igmp6(0xa, 0x3, 0x2) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x458, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x388, 0xffffffff, 0xffffffff, 0x388, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff0000ff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x81, 0x0, 0x7}}, @common=@ah={{0x30}, {[0x4d2, 0x4d3], 0x8, 0xc, 0x3}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x3, 0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x87, 0x0, 0x0, 0x41}, 0x0, 0x1f8, 0x260, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x1000005, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@recent0={{0xf8}, {0xffff, 0x40, 0x10, 0x1, 'syz0\x00', 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x8, 0x2, 0x8, 'pptp\x00', 'syz1\x00', {0x5a}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4b8) (async) getsockopt$inet_int(r0, 0x0, 0x21, 0x0, &(0x7f00000001c0)=0x2) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) 365.493844ms ago: executing program 4 (id=4150): clock_gettime(0x87f60f7a31614e95, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@local, 0xf, r1}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x4d, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x20}}, 0xc000) 365.223291ms ago: executing program 2 (id=4151): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) close(0x3) socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) 333.805056ms ago: executing program 6 (id=4152): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000070000000700000001"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000070000000700000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r3 = socket$inet6(0xa, 0x802, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES16=r3], 0x20}}, 0x40816) (async) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES16=r3], 0x20}}, 0x40816) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x2, @loopback, 0x6}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) socket$inet_udplite(0x2, 0x2, 0x88) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000000040), 0x4) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x9, 0x8, 0xfa, 0xa}]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060300000034e4000000000a000004050001000600000005000400000000000900020073797a3100deffff040005000200000011000300686173683a6e65742c6e6574000000000c00078005001400a9000000"], 0x58}}, 0x2) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000040)=ANY=[], 0x6) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000200)) (async) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000200)) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0x14b, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x13d, 0x68, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {0x3, 0x4e24, 0x129, 0x0, @gue={{0x2, 0x0, 0x3, 0xe6}, "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"}}}}}}, 0x0) (async) syz_emit_ethernet(0x14b, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x13d, 0x68, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {0x3, 0x4e24, 0x129, 0x0, @gue={{0x2, 0x0, 0x3, 0xe6}, "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"}}}}}}, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) 229.272874ms ago: executing program 3 (id=4153): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x4, 0x1c}, @typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 174.092287ms ago: executing program 4 (id=4154): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r1, &(0x7f0000006600)=[{{&(0x7f0000001440)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40000}}, {{&(0x7f0000001980)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8000}}], 0x2, 0x20004800) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xf, 0x5, 0xa, 0xc3}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x88, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x48, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r2, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%pI4 \x00'}, 0x20) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x1d, 0x2d, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4b89}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0x8c}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @map_val={0x18, 0x1, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x1200}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x1b}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x46ac1419, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x18f}}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xc1, &(0x7f0000000280)=""/193, 0x41100, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x1, 0xf, 0x73, 0x17}, 0x10, r3, 0x0, 0x0, &(0x7f00000007c0)=[r2, r4, r5, r2, r2], 0x0, 0x10, 0xd71b}, 0x94) 162.793641ms ago: executing program 2 (id=4155): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) listen(r0, 0x1) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(r1, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r2, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0x1, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x8, 0x100000, 0x762, 0x3, 0x0, 0x8001, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x8, 0x8000100, 0x3, 0x8, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0xd6f, 0x4007, 0x8, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x800000, 0x4, 0x100002, 0x8, 0x2000752, 0x0, 0x3, 0x5, 0x10001, 0x4e7b3717, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x5b, 0x3, 0x33b, 0x5, 0x20006, 0x5, 0x10001, 0x6, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x0, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610424000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f00000001c0)=0xc, 0x4) sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r3], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a464357177330772"}}, 0x48}}, 0x810) 62.072625ms ago: executing program 4 (id=4156): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000dc0)=ANY=[@ANYRES16], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x200}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x801}, 0x94) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r2, 0x58, &(0x7f0000000440)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r2, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@delchain={0x68, 0x65, 0x300, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xa, 0xb}, {0x6, 0xa}, {0x0, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x200003}, @TCA_CHAIN={0x8, 0xb, 0x7fdb69d}, @filter_kind_options=@f_matchall={{0xd}, {0x24, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0xffe0}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x10}}, @TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FD={0x8, 0x6, r0}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FD={0x8, 0x6, r0}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket(0xf, 0x6, 0xfffffffe) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r6) sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000500)={0x14, r7, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x44000) (async) sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000500)={0x14, r7, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x44000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="7000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0002000080820000400012800b00010069703667726500003000028008000c000001000008000c000800000008001d000d0000000400120006000e0001000000060010004e21000008000300"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x8000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r10, 0x891c, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x0, @empty=0xfe000000}}) (async) ioctl$sock_inet_SIOCSIFADDR(r10, 0x891c, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x0, @empty=0xfe000000}}) sendmsg$nl_route(r9, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=')\x00'/11], 0x14}}, 0x20048098) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r12, 0x401c5820, &(0x7f0000000080)={0x17b8, 0xffffffff, 0x5c66705, 0xb87a, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg(r10, &(0x7f00000005c0)={&(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x0, r10, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x1, 0x3, 0x0, 0x2}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000880)="dc2b2289d8cafd8d4927323a14ddf1506af0bfcb0d25c83b9d9b626511444c1a2294d065d7b35aa75e869a370b54a8c89d6c917f35f0cc0cb3be5499306fa07bb4e95c32e80c7b748b550aeac780085851282c5963009788038f3d3dd8d8f7b91390fac65ecab55450fdde2df8be2ed10189fd3411320f40a28946e4bc4a7bfec67f6a9a7f17b9d3cfe6bea74db1b6fc6f6a0cd0002a89e90e", 0x99}, {&(0x7f00000007c0)="5c7db84b3d09c99d8e18bbb0a8c473a71b5b105245c83662d9b15b76e4c9f47060aa1abcf66a49b8e1518050112bc635e17247ce3d74445d0cb97b73b2ef6e20a34fda0c535c3ad489f96475c724a2bfabfc9e7e5b6710e2a6ab88f9e5133b2c5848fb2cabaed0b802dea6e40a0e5043c2e92cde2a009ccfd11e40075d81f000dfd704f085fd802974adb00ced811ad11f684e4bff060c13c3db1548d22dfe479bd9292767b379bff009be8377b24af44895dcc9250705fa97c3961c41", 0xbd}, {&(0x7f0000000940)="064c8b540529e99650fc8a64fa2837c352add3e9576055cd512a005ff9eb7637ee4af8e18d951914374736a4a522351cd3b8b5b7fbf1d98171633e9e08c73d90a519ab3f66e44d1411cc2853b2b1d8e476b0c3a50358976192ab26d2b3caa6ad0d4113ef2ba4007ad3a4afbcb904ec01afc2dfe4d588e82c0f97bd0173", 0x7d}, {&(0x7f00000009c0)="f48f436ed2ed7bedb9226893cf27b53b2e604556bcfb2b0e07136fee62339a409bd11762e851ff7af63a6692fd88f0d06ae4127159b1c0edc9cf61719256791a67c76a5185e982322bf1a1353b612e24af47c9974b1043443adb63c2f336fa362e441262ae18588309b38151dac1e508e6fa88aa914524a33b367d685200bd1f4108691316d8906399890b9b3f52e612346d0b3118112e591c0f8655e8357013f8558be5338332bcf62092acc8b284e9bab7aee7d66eab2c8d95fc2797dbc7e07b3d0af3af101c1b398d39cf9f82984d1e4df99a29db83", 0xd7}, {&(0x7f0000000ac0)="1fc6f6c28305d175e7f7a63f6421338d0efd58c1c1e1913958b294f2d18e43a231a2f54fd16b5c7f380569fa2694422da6d0e0cde24d2dde283b28084e0a6e4153948c589f980a56cb49c94742638d66a3b5041e51c86b7336bec66c1461053e1bf1aadb5066250d1d93b581471d2d5a0be1d3e36a1b6919a6aa2c3464f31cd72bfbf046fac4f50333aefaffdb546d6f3ae335c2fd6936deef78827c7a29828a7c089ef6bd0a0130c26dcd932b85906112dceeafef8e93b0755be8f001f1224dfdafa3e330ccc456ede8f888580da8d8e1", 0xd1}], 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x1188}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r13, 0x0, 0xf, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd96", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 3 (id=4157): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0xffffffff, 0xf, 0x0]}, @CTA_TUPLE_ORIG={0x48, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x7}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_LABELS_MASK={0x20, 0x17, [0xfffffff9, 0x3, 0x6, 0x200, 0x8001, 0x3ff, 0x40]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x4051) kernel console output (not intermixed with test programs): aulting to 1000 [ 426.348865][T17345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2898'. [ 426.430762][T17172] veth0_vlan: entered promiscuous mode [ 426.437858][T17349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2899'. [ 426.455076][T17172] veth1_vlan: entered promiscuous mode [ 426.504286][T17172] veth0_macvtap: entered promiscuous mode [ 426.557569][T17172] veth1_macvtap: entered promiscuous mode [ 426.597643][T17172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.654394][T17172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.672419][ T3522] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.686041][ T3522] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.701703][ T3522] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.742860][T17331] wg1 speed is unknown, defaulting to 1000 [ 426.770741][ T3522] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.286317][T11118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.352562][T11118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.382142][T17363] syzkaller0: entered promiscuous mode [ 427.393305][T17363] syzkaller0: entered allmulticast mode [ 427.418386][ T5832] Bluetooth: hci5: command tx timeout [ 427.495467][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.531091][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.589602][T17367] netlink: 'syz.4.2903': attribute type 3 has an invalid length. [ 427.597918][T17367] netlink: 'syz.4.2903': attribute type 3 has an invalid length. [ 427.772671][T17371] tipc: Started in network mode [ 427.777674][T17371] tipc: Node identity f203d11cb9cb, cluster identity 4711 [ 427.785251][T17371] tipc: Enabled bearer , priority 0 [ 427.793447][T17371] syzkaller0: entered promiscuous mode [ 427.799203][T17371] syzkaller0: entered allmulticast mode [ 427.810824][T17370] tipc: Resetting bearer [ 427.829061][T17370] tipc: Disabling bearer [ 428.012578][ T5826] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 428.023144][ T5826] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 428.032883][ T5826] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 428.042563][ T5826] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 428.051115][ T5826] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 428.116196][T17373] xfrm0 speed is unknown, defaulting to 1000 [ 428.490892][T17373] ip6_vti0 speed is unknown, defaulting to 1000 [ 428.521716][T17385] xfrm0 speed is unknown, defaulting to 1000 [ 428.873713][T17396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2911'. [ 429.070644][T17405] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2913'. [ 429.079077][T17373] wg1 speed is unknown, defaulting to 1000 [ 429.082340][T17385] ip6_vti0 speed is unknown, defaulting to 1000 [ 429.085803][T17408] netlink: 644 bytes leftover after parsing attributes in process `syz.4.2914'. [ 429.117351][T17410] netlink: 644 bytes leftover after parsing attributes in process `syz.4.2914'. [ 429.567735][T17417] xfrm0 speed is unknown, defaulting to 1000 [ 429.665705][T17373] chnl_net:caif_netlink_parms(): no params data found [ 429.832811][T17385] wg1 speed is unknown, defaulting to 1000 [ 429.992542][T17417] ip6_vti0 speed is unknown, defaulting to 1000 [ 430.028229][T17373] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.035462][T17373] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.084240][T17373] bridge_slave_0: entered allmulticast mode [ 430.092471][T17373] bridge_slave_0: entered promiscuous mode [ 430.115975][T17373] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.140023][ T5826] Bluetooth: hci6: command tx timeout [ 430.181750][T17373] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.199351][T17373] bridge_slave_1: entered allmulticast mode [ 430.217693][T17373] bridge_slave_1: entered promiscuous mode [ 430.237995][T17451] netlink: 'syz.4.2920': attribute type 39 has an invalid length. [ 430.431756][T17373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.461210][T17417] wg1 speed is unknown, defaulting to 1000 [ 430.518446][T17373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.692774][T17461] batadv_slave_1: entered promiscuous mode [ 430.766500][T17373] team0: Port device team_slave_0 added [ 430.804404][T17461] batadv_slave_1: left promiscuous mode [ 430.841193][T17373] team0: Port device team_slave_1 added [ 431.006824][T17373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.014735][T17373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.041284][T17373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.056759][T17373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.065982][T17373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.114607][T17373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.405175][T17480] syzkaller1: entered promiscuous mode [ 431.411472][T17480] syzkaller1: entered allmulticast mode [ 431.449081][T17373] hsr_slave_0: entered promiscuous mode [ 431.488523][T17373] hsr_slave_1: entered promiscuous mode [ 431.646005][T17487] netlink: 'syz.5.2928': attribute type 1 has an invalid length. [ 431.667903][T17487] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2928'. [ 432.218689][ T5826] Bluetooth: hci6: command tx timeout [ 432.333663][T17509] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 432.377052][T17506] xfrm0 speed is unknown, defaulting to 1000 [ 432.382358][T17373] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 432.397272][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 432.418833][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 432.431429][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 432.435716][T17373] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 432.451904][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 432.462338][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 432.498511][T17373] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 432.571416][T17373] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 432.691640][T17525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2936'. [ 432.724391][T17373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.752860][T17373] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.773103][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.780364][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.799952][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.807136][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.891442][T17506] ip6_vti0 speed is unknown, defaulting to 1000 [ 432.941797][T17510] xfrm0 speed is unknown, defaulting to 1000 [ 433.100728][T17373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.202370][T17373] veth0_vlan: entered promiscuous mode [ 433.280421][T17373] veth1_vlan: entered promiscuous mode [ 433.371905][T17534] netlink: 'syz.5.2938': attribute type 1 has an invalid length. [ 433.402259][T17373] veth0_macvtap: entered promiscuous mode [ 433.426896][T17506] wg1 speed is unknown, defaulting to 1000 [ 433.477858][T17510] ip6_vti0 speed is unknown, defaulting to 1000 [ 433.492259][T17373] veth1_macvtap: entered promiscuous mode [ 433.570752][T17373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.608577][T17373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.711310][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.734082][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.756880][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.791508][ T9039] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.835399][T17510] wg1 speed is unknown, defaulting to 1000 [ 433.848859][T17548] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2941'. [ 433.873661][T17539] siw: device registration error -23 [ 434.137439][ T3522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.161523][ T3522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.300196][ T5826] Bluetooth: hci6: command tx timeout [ 434.372133][ T9039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.415541][ T9039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.548392][ T5826] Bluetooth: hci0: command tx timeout [ 434.607299][ T5932] IPVS: starting estimator thread 0... [ 434.656828][T17572] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2947'. [ 434.709556][T17576] IPVS: using max 41 ests per chain, 98400 per kthread [ 434.710970][T17575] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.915942][T17510] chnl_net:caif_netlink_parms(): no params data found [ 435.246553][T17510] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.265787][T17510] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.282365][T17510] bridge_slave_0: entered allmulticast mode [ 435.293417][T17510] bridge_slave_0: entered promiscuous mode [ 435.323717][T17510] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.345342][T17510] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.363634][T17510] bridge_slave_1: entered allmulticast mode [ 435.372608][T17510] bridge_slave_1: entered promiscuous mode [ 435.416295][T17510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.432023][T17510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.459144][T17601] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 435.474051][T17601] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 435.521934][T17510] team0: Port device team_slave_0 added [ 435.544732][T17510] team0: Port device team_slave_1 added [ 435.605965][T17510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.624143][T17510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.681254][T17510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.699031][T17510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.706173][T17510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.785130][T17510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.981261][T17510] hsr_slave_0: entered promiscuous mode [ 435.999948][T17510] hsr_slave_1: entered promiscuous mode [ 436.011857][T17510] debugfs: 'hsr0' already exists in 'hsr' [ 436.017960][T17510] Cannot create hsr debugfs directory [ 436.063811][T17575] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.380231][ T5826] Bluetooth: hci6: command tx timeout [ 436.410460][T17638] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2963'. [ 436.420400][T17638] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2963'. [ 436.447624][T17638] dummy0: entered promiscuous mode [ 436.480084][T17638] dummy0: left promiscuous mode [ 436.547594][T17510] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 436.573613][T17510] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 436.619609][ T5826] Bluetooth: hci0: command tx timeout [ 436.629470][T17510] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 436.645577][T17510] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 436.764281][T17669] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2968'. [ 436.773788][T17669] nbd: must specify a size in bytes for the device [ 436.842120][T17671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2971'. [ 436.851707][T17671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2971'. [ 436.867384][T17510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.877883][T17671] netlink: 'syz.3.2971': attribute type 1 has an invalid length. [ 436.886542][T17671] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2971'. [ 436.898978][T17671] block nbd1: Unsupported socket: should be TCP or UNIX. [ 436.944934][T17575] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.974219][T17681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2970'. [ 437.027055][T17683] netlink: 'syz.3.2972': attribute type 10 has an invalid length. [ 437.040423][T17575] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.088715][T17685] netlink: 'syz.3.2972': attribute type 10 has an invalid length. [ 437.114438][T17683] bond0: (slave dummy0): Releasing backup interface [ 437.132878][T17683] team0: Port device dummy0 added [ 437.167272][T17510] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.210476][T17685] team0: Port device dummy0 removed [ 437.237330][T17685] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 437.285819][ T9057] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.293156][ T9057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.327997][ T9057] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.335226][ T9057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.544147][T11118] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.602055][T17510] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 437.659161][T11118] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.680523][T11118] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.783144][ T9042] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.841305][T17716] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2977'. [ 437.870489][T17716] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2977'. [ 437.891364][T17716] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2977'. [ 438.247500][T17510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.531287][T17687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2972'. [ 438.572860][T17760] pim6reg: entered allmulticast mode [ 438.638872][T17760] netlink: 'syz.4.2986': attribute type 4 has an invalid length. [ 438.672150][T17760] netlink: 'syz.4.2986': attribute type 1 has an invalid length. [ 438.694107][T17687] ip6gretap0: entered promiscuous mode [ 438.702070][T17760] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2986'. [ 438.734970][T17687] ip6gretap0: left promiscuous mode [ 438.766846][T17764] pim6reg: left allmulticast mode [ 439.062510][T17510] veth0_vlan: entered promiscuous mode [ 439.093748][T17510] veth1_vlan: entered promiscuous mode [ 439.098378][ C0] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96 [ 439.196423][T17510] veth0_macvtap: entered promiscuous mode [ 439.216000][T17510] veth1_macvtap: entered promiscuous mode [ 439.264994][T17510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.293332][T17510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.326623][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.337425][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.365610][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.375249][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.064009][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.073796][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.083757][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 440.113843][ T9042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.141953][ T9042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.225447][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.272460][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.325985][T17817] openvswitch: netlink: IP tunnel dst address not specified [ 440.326153][T17812] xfrm0 speed is unknown, defaulting to 1000 [ 440.429401][T16929] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 440.830363][T17812] ip6_vti0 speed is unknown, defaulting to 1000 [ 441.028932][ T5889] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 441.443092][T17812] wg1 speed is unknown, defaulting to 1000 [ 441.597482][ T9042] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 441.933497][ T5832] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 441.944566][ T5832] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 441.953524][ T5832] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 441.961727][ T5832] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 441.969916][ T5832] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 441.975883][T17861] Bluetooth: MGMT ver 1.23 [ 442.017948][T17867] xfrm0 speed is unknown, defaulting to 1000 [ 442.656423][T17893] netlink: 'syz.2.3010': attribute type 10 has an invalid length. [ 442.706593][ T5990] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 442.732186][T17899] netlink: 'syz.6.3011': attribute type 11 has an invalid length. [ 442.737168][ T5990] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 442.769508][T17899] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3011'. [ 442.789868][T17867] ip6_vti0 speed is unknown, defaulting to 1000 [ 442.847802][T17893] veth0_vlan: left promiscuous mode [ 442.868554][T17893] veth0_vlan: entered promiscuous mode [ 442.892482][T17893] team0: Device veth0_vlan failed to register rx_handler [ 442.998293][ T5932] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 443.015107][T17899] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 443.175583][T17907] tipc: Started in network mode [ 443.181886][T17907] tipc: Node identity 22397e2c037, cluster identity 4711 [ 443.196049][T17907] tipc: Enabled bearer , priority 0 [ 443.335092][T17899] syzkaller0: entered promiscuous mode [ 443.342315][T17899] syzkaller0: entered allmulticast mode [ 443.349296][T17899] tipc: Resetting bearer [ 443.356636][T17867] wg1 speed is unknown, defaulting to 1000 [ 443.376275][T17898] tipc: Resetting bearer [ 444.044163][T17932] sctp: [Deprecated]: syz.4.3018 (pid 17932) Use of int in max_burst socket option. [ 444.044163][T17932] Use struct sctp_assoc_value instead [ 444.061185][ T5832] Bluetooth: hci7: command tx timeout [ 445.376442][T17898] tipc: Disabling bearer [ 445.408582][T17929] netlink: 'syz.5.3017': attribute type 8 has an invalid length. [ 445.416604][T17929] netlink: 252 bytes leftover after parsing attributes in process `syz.5.3017'. [ 445.480188][ T5889] tipc: Node number set to 558464556 [ 445.644385][T17948] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.653128][T17948] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.900600][T17972] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3026'. [ 445.908187][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 445.915800][T17972] netlink: 'syz.6.3026': attribute type 1 has an invalid length. [ 445.918098][ C1] lec:lec_tx_timeout: lec0 [ 446.143817][ T5832] Bluetooth: hci7: command tx timeout [ 446.226089][T17986] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3026'. [ 446.323629][T17867] chnl_net:caif_netlink_parms(): no params data found [ 446.538304][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 446.617656][T17988] xfrm0 speed is unknown, defaulting to 1000 [ 446.633149][T18004] netlink: 'syz.2.3034': attribute type 1 has an invalid length. [ 446.718432][T18004] netlink: 'syz.2.3034': attribute type 1 has an invalid length. [ 446.752208][T18010] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3034'. [ 446.809575][T18004] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3034'. [ 446.893849][T17867] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.915690][T17867] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.936024][T17867] bridge_slave_0: entered allmulticast mode [ 446.968842][T17867] bridge_slave_0: entered promiscuous mode [ 446.993422][T17867] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.019885][T17867] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.057666][T17867] bridge_slave_1: entered allmulticast mode [ 447.090250][T17867] bridge_slave_1: entered promiscuous mode [ 447.166880][T17988] ip6_vti0 speed is unknown, defaulting to 1000 [ 447.646425][T17867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.686108][T17988] wg1 speed is unknown, defaulting to 1000 [ 447.720990][T17867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.957509][T17867] team0: Port device team_slave_0 added [ 447.994958][T17867] team0: Port device team_slave_1 added [ 448.180250][T17867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.200837][T17867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.228516][ T5832] Bluetooth: hci7: command tx timeout [ 448.251049][T17867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.276356][T17867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.288429][T17867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.335755][T17867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.549024][T18083] sctp: [Deprecated]: syz.4.3049 (pid 18083) Use of int in maxseg socket option. [ 448.549024][T18083] Use struct sctp_assoc_value instead [ 448.785079][T17867] hsr_slave_0: entered promiscuous mode [ 448.793865][T17867] hsr_slave_1: entered promiscuous mode [ 448.801364][T17867] debugfs: 'hsr0' already exists in 'hsr' [ 448.807126][T17867] Cannot create hsr debugfs directory [ 449.246378][T17867] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.260219][T17867] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.381331][T17867] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.397963][T17867] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.417156][T18113] ipt_REJECT: TCP_RESET invalid for non-tcp [ 449.459664][T18116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3059'. [ 449.471494][T17867] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.488643][T17867] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.518741][T18116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3059'. [ 449.575779][T17867] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.596530][T17867] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.619414][T18123] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3061'. [ 449.619414][T18122] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3061'. [ 450.057629][T17867] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 450.117026][T17867] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 450.249695][T17867] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 450.307433][T17867] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 450.318691][ T5832] Bluetooth: hci7: command tx timeout [ 450.659906][T17867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.723028][T17867] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.755234][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.762446][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.801765][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.808952][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.130601][T18174] ipt_rpfilter: unknown options [ 451.137379][T18174] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3071'. [ 451.153498][T18175] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3072'. [ 451.522975][T17867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.626058][T17867] veth0_vlan: entered promiscuous mode [ 451.671937][T17867] veth1_vlan: entered promiscuous mode [ 451.681779][T18190] netlink: 'syz.6.3075': attribute type 10 has an invalid length. [ 451.695241][T18190] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3075'. [ 451.770439][T18190] team0: Failed to send options change via netlink (err -105) [ 451.779143][T18190] team0: Port device geneve0 added [ 451.834126][T17867] veth0_macvtap: entered promiscuous mode [ 451.867992][T17867] veth1_macvtap: entered promiscuous mode [ 451.953504][T17867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.003173][T17867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.307574][ T9039] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.355540][ T9039] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.455507][ T9057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.477908][ T9039] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.481495][ T9057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.496045][ T9039] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.650667][ T9039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.659856][T18211] lo: Caught tx_queue_len zero misconfig [ 452.668749][ T9039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.055570][T18222] xfrm0 speed is unknown, defaulting to 1000 [ 453.598491][T18222] ip6_vti0 speed is unknown, defaulting to 1000 [ 453.783608][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 453.795938][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 453.806594][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 453.821706][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 453.830938][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 453.898443][T18247] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3092'. [ 454.007720][T18249] xfrm0 speed is unknown, defaulting to 1000 [ 454.012121][T18252] syzkaller0: entered promiscuous mode [ 454.063960][T18252] syzkaller0: entered allmulticast mode [ 454.138241][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 454.389139][T18272] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3098'. [ 454.413919][ T9057] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.444700][T18272] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3098'. [ 454.490280][T18272] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3098'. [ 454.530919][T18272] IPv6: NLM_F_CREATE should be specified when creating new route [ 454.540036][T18222] wg1 speed is unknown, defaulting to 1000 [ 454.561552][ T9057] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.696081][ T9057] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.809655][T18252] xfrm0 speed is unknown, defaulting to 1000 [ 454.825834][T18249] ip6_vti0 speed is unknown, defaulting to 1000 [ 454.860761][ T9057] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.413810][ T9057] veth1_to_hsr: left allmulticast mode [ 455.471679][ T9057] veth1_to_hsr: left promiscuous mode [ 455.498233][ T9057] bridge0: port 1(veth1_to_hsr) entered disabled state [ 455.551541][ T9057] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.720257][T18301] netlink: 'syz.5.3106': attribute type 11 has an invalid length. [ 455.899181][ T5826] Bluetooth: hci2: command tx timeout [ 456.513046][ T9057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.524106][ T9057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.534499][ T9057] bond0 (unregistering): Released all slaves [ 456.545256][ T9057] bond1 (unregistering): Released all slaves [ 456.560245][ T9057] bond2 (unregistering): Released all slaves [ 456.581625][ T9057] bond3 (unregistering): Released all slaves [ 456.597272][ T9057] bond4 (unregistering): Released all slaves [ 456.612012][ T9057] bond5 (unregistering): Released all slaves [ 456.627335][ T9057] bond6 (unregistering): Released all slaves [ 456.643639][ T9057] bond7 (unregistering): Released all slaves [ 456.661670][ T9057] bond8 (unregistering): Released all slaves [ 456.677403][ T9057] bond9 (unregistering): Released all slaves [ 456.697655][ T9057] bond10 (unregistering): Released all slaves [ 456.712503][ T9057] bond11 (unregistering): Released all slaves [ 456.725911][ T9057] bond12 (unregistering): Released all slaves [ 456.742187][T18249] wg1 speed is unknown, defaulting to 1000 [ 456.753944][T18252] ip6_vti0 speed is unknown, defaulting to 1000 [ 456.976444][ T9057] m1Ie5: left promiscuous mode [ 457.271586][ T9057] tipc: Left network mode [ 457.433824][ T9057] IPVS: stopping master sync thread 7293 ... [ 457.467745][T18334] bridge_slave_1: left allmulticast mode [ 457.490208][T18334] bridge_slave_1: left promiscuous mode [ 457.539313][T18334] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.646853][T18334] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 457.808978][T18335] wg2: entered allmulticast mode [ 457.872567][T18252] wg1 speed is unknown, defaulting to 1000 [ 457.998906][ T5826] Bluetooth: hci2: command tx timeout [ 458.014875][T18249] chnl_net:caif_netlink_parms(): no params data found [ 458.151043][ T8765] lec:lec_start_xmit: lec0:No lecd attached [ 458.160732][T18346] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3112'. [ 458.186541][T18346] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3112'. [ 458.858910][T18249] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.867672][T18249] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.889571][T18249] bridge_slave_0: entered allmulticast mode [ 458.896594][T18249] bridge_slave_0: entered promiscuous mode [ 459.066643][T18249] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.091753][T18249] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.114376][T18249] bridge_slave_1: entered allmulticast mode [ 459.136565][T18249] bridge_slave_1: entered promiscuous mode [ 459.188252][T18355] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3114'. [ 459.432246][T18249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.475062][T18249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.642084][T18375] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:20004 [ 459.710692][T18373] geneve2: entered promiscuous mode [ 459.721748][ T49] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 459.800809][T18249] team0: Port device team_slave_0 added [ 459.811628][T18249] team0: Port device team_slave_1 added [ 459.852528][ T49] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 460.058809][ T5826] Bluetooth: hci2: command tx timeout [ 460.072140][T18381] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 460.087395][T18381] bond1 (unregistering): Released all slaves [ 460.193380][ T49] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 460.216013][ T49] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 460.235363][T18368] xfrm0 speed is unknown, defaulting to 1000 [ 460.281467][T18394] netlink: 'syz.5.3119': attribute type 9 has an invalid length. [ 460.292288][T18394] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3119'. [ 460.510663][T18399] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3121'. [ 460.742582][ T9057] team0 (unregistering): Port device team_slave_1 removed [ 460.823677][ T9057] team0 (unregistering): Port device team_slave_0 removed [ 461.006333][T18249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.014093][T18249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.047090][T18249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.061189][T18388] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3119'. [ 461.115829][T18398] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 461.135521][T18398] bond1 (unregistering): Released all slaves [ 461.153338][T18399] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3121'. [ 461.163459][T18399] tipc: Enabling of bearer rejected, failed to enable media [ 461.183344][T18368] ip6_vti0 speed is unknown, defaulting to 1000 [ 461.339007][T18411] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 461.399938][T18249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.417112][T18249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.474221][T18249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.537867][T18368] wg1 speed is unknown, defaulting to 1000 [ 461.792917][T18249] hsr_slave_0: entered promiscuous mode [ 461.814611][T18249] hsr_slave_1: entered promiscuous mode [ 461.816020][ T5955] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 461.829589][T18249] debugfs: 'hsr0' already exists in 'hsr' [ 461.835740][T18249] Cannot create hsr debugfs directory [ 462.139596][ T5826] Bluetooth: hci2: command tx timeout [ 462.220088][T18450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3128'. [ 462.388717][ T5955] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 462.537319][ T9057] IPVS: stop unused estimator thread 0... [ 463.245027][T18481] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3136'. [ 463.271445][T18475] team0: entered promiscuous mode [ 463.276633][T18475] team_slave_0: entered promiscuous mode [ 463.285628][T18475] team_slave_1: entered promiscuous mode [ 463.297811][T18475] geneve0: entered promiscuous mode [ 463.305666][ T798] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 463.330056][T18475] team0: entered allmulticast mode [ 463.335316][T18475] team_slave_0: entered allmulticast mode [ 463.345899][T18475] team_slave_1: entered allmulticast mode [ 463.356029][T18475] geneve0: entered allmulticast mode [ 463.367062][T18479] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3138'. [ 463.381127][T18479] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3138'. [ 463.543686][T18496] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3139'. [ 463.737321][T18498] gretap1: entered allmulticast mode [ 463.898201][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 463.906262][ C1] lec:lec_tx_timeout: lec0 [ 464.096477][T18516] tipc: Started in network mode [ 464.121256][T18516] tipc: Node identity 0aa773eee6c3, cluster identity 4711 [ 464.144297][T18516] tipc: Enabled bearer , priority 0 [ 464.162608][T18522] syzkaller0: entered promiscuous mode [ 464.175459][T18522] syzkaller0: entered allmulticast mode [ 464.263247][T18516] tipc: Resetting bearer [ 464.271965][T18528] netlink: 'syz.6.3147': attribute type 1 has an invalid length. [ 464.281459][T18515] tipc: Resetting bearer [ 464.300218][ T798] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 464.315823][T18515] tipc: Disabling bearer [ 464.389991][ T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 464.422571][T18534] 8021q: adding VLAN 0 to HW filter on device bond1 [ 464.535277][T18536] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3149'. [ 464.538962][T18534] sctp: [Deprecated]: syz.6.3147 (pid 18534) Use of int in max_burst socket option. [ 464.538962][T18534] Use struct sctp_assoc_value instead [ 464.615852][T18528] 8021q: adding VLAN 0 to HW filter on device bond2 [ 464.652039][T18528] bond1: (slave bond2): Enslaving as a backup interface with a down link [ 464.705474][T18538] xfrm0 speed is unknown, defaulting to 1000 [ 464.752082][T18249] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 464.802816][T18249] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 464.833772][T18249] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 464.842656][ T9039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.862551][ T9039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.886558][T18249] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 464.952055][T18551] bridge0: port 3(batadv0) entered blocking state [ 464.959248][T18551] bridge0: port 3(batadv0) entered disabled state [ 464.965945][T18551] batadv0: entered allmulticast mode [ 464.981659][T18551] batadv0: entered promiscuous mode [ 465.183926][ T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 465.246751][ T9039] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 465.258396][ T9039] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 465.561087][T18538] ip6_vti0 speed is unknown, defaulting to 1000 [ 466.016862][T18249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.065721][T18603] __nla_validate_parse: 1 callbacks suppressed [ 466.065743][T18603] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3161'. [ 466.092843][T18249] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.235413][ T5990] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.242654][ T5990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.337142][T18538] wg1 speed is unknown, defaulting to 1000 [ 466.343665][ T9039] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.350897][ T9039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.393244][T18618] netlink: 'syz.6.3164': attribute type 1 has an invalid length. [ 466.428499][T18618] netlink: 92 bytes leftover after parsing attributes in process `syz.6.3164'. [ 466.492024][T18621] netlink: 'syz.6.3164': attribute type 1 has an invalid length. [ 466.511852][T18621] netlink: 92 bytes leftover after parsing attributes in process `syz.6.3164'. [ 466.698441][T18249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 466.784390][T18629] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 467.437061][T18651] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3172'. [ 467.484794][T18249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.845524][T18661] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3174'. [ 468.242329][T18676] netlink: 'syz.2.3176': attribute type 21 has an invalid length. [ 468.299179][T18676] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3176'. [ 468.360030][T18676] netlink: 'syz.2.3176': attribute type 4 has an invalid length. [ 468.427436][T18676] netlink: 'syz.2.3176': attribute type 5 has an invalid length. [ 468.448267][T18676] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3176'. [ 468.516634][T18249] veth0_vlan: entered promiscuous mode [ 468.651168][T18249] veth1_vlan: entered promiscuous mode [ 468.821755][T18249] veth0_macvtap: entered promiscuous mode [ 468.852401][T18696] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 468.899804][T18249] veth1_macvtap: entered promiscuous mode [ 468.963772][T18704] team_slave_0: entered promiscuous mode [ 468.969908][T18704] team_slave_1: entered promiscuous mode [ 469.067710][T18707] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3183'. [ 469.072321][T18249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.143585][T18249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.275295][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.307296][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.347215][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.416942][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.453479][T18724] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 469.498234][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 469.566939][T18724] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3188'. [ 469.599324][ T9057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.614219][ T9057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.653370][T18730] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 469.830991][ T36] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 469.843427][ T5990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.854553][ T5990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.877396][T18736] netlink: 'syz.3.3191': attribute type 1 has an invalid length. [ 469.911358][T18701] team_slave_0: left promiscuous mode [ 469.917065][T18701] team_slave_1: left promiscuous mode [ 469.955714][T18736] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3191'. [ 469.999383][T18744] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 470.699552][T18768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.753195][T18768] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.873587][T18770] xt_CT: No such helper "pptp" [ 471.574235][T18814] __nla_validate_parse: 8 callbacks suppressed [ 471.574252][T18814] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3209'. [ 471.722995][T18827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3211'. [ 471.845084][T18827] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 471.891655][T18827] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 471.927782][T18827] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 472.922718][T18880] veth0_to_bridge: entered allmulticast mode [ 472.937497][ T5990] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.957913][T18878] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3222'. [ 472.981350][T18881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3214'. [ 473.006639][T18895] netlink: 83 bytes leftover after parsing attributes in process `syz.4.3222'. [ 474.146902][T18941] netlink: 'syz.3.3232': attribute type 1 has an invalid length. [ 474.547164][T18956] SET target dimension over the limit! [ 474.828143][ T5932] IPVS: starting estimator thread 0... [ 474.834335][T18968] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3241'. [ 474.866919][T18969] xfrm0 speed is unknown, defaulting to 1000 [ 474.876266][T18968] netlink: 'syz.5.3241': attribute type 4 has an invalid length. [ 474.937500][T18974] IPVS: using max 32 ests per chain, 76800 per kthread [ 474.946216][T18981] netlink: 'syz.5.3241': attribute type 4 has an invalid length. [ 474.971092][T18983] openvswitch: netlink: Flow key attr not present in new flow. [ 475.015690][T18984] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8 [ 475.132474][T18983] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 475.453246][T18969] ip6_vti0 speed is unknown, defaulting to 1000 [ 475.633749][T19010] netlink: 65173 bytes leftover after parsing attributes in process `syz.2.3248'. [ 475.677805][T19010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3248'. [ 475.697842][T18971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.722072][T19010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3248'. [ 475.986530][T18969] wg1 speed is unknown, defaulting to 1000 [ 476.278274][T19036] netlink: 164 bytes leftover after parsing attributes in process `syz.6.3255'. [ 477.814182][T18984] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 478.262596][T19108] xt_TCPMSS: Only works on TCP SYN packets [ 478.307115][T19108] IPv6: sit1: Disabled Multicast RS [ 478.656461][T19131] bond3: entered promiscuous mode [ 478.803657][T19138] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9 [ 479.433310][T19180] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 479.457658][T19180] syzkaller1: linktype set to 778 [ 479.476390][T19137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.609024][T19180] 8021q: adding VLAN 0 to HW filter on device bond3 [ 479.631238][T19184] bond_slave_0: entered promiscuous mode [ 479.637324][T19184] bond_slave_1: entered promiscuous mode [ 479.646623][T19184] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 479.676682][T19184] bond3: (slave macvlan2): Enslaving as a backup interface with an up link [ 481.622685][T19156] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 482.347917][T19225] xfrm0 speed is unknown, defaulting to 1000 [ 482.385026][T19232] openvswitch: netlink: IP tunnel dst address not specified [ 482.757117][T19248] __nla_validate_parse: 2 callbacks suppressed [ 482.757139][T19248] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3298'. [ 482.770638][T19246] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3296'. [ 482.824493][T19248] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3298'. [ 482.863208][T19248] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3298'. [ 482.881064][T19246] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3296'. [ 482.888642][T19248] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3298'. [ 483.280106][T19225] ip6_vti0 speed is unknown, defaulting to 1000 [ 484.069610][T19225] wg1 speed is unknown, defaulting to 1000 [ 484.343881][T19290] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3306'. [ 484.701516][T19297] bond_slave_0: left promiscuous mode [ 484.707385][T19297] bond_slave_1: left promiscuous mode [ 484.870169][T19297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.885737][T19297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.044471][ T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.054691][T19323] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 485.073582][ T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.148870][ T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.157325][ T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.372532][T19333] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3315'. [ 485.401986][T19333] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3315'. [ 485.429550][T19333] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3315'. [ 485.499909][T19339] sctp: [Deprecated]: syz.2.3317 (pid 19339) Use of int in maxseg socket option. [ 485.499909][T19339] Use struct sctp_assoc_value instead [ 486.441288][T19385] xfrm0 speed is unknown, defaulting to 1000 [ 486.764659][T19385] ip6_vti0 speed is unknown, defaulting to 1000 [ 487.031869][T19385] wg1 speed is unknown, defaulting to 1000 [ 487.151645][T19379] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 487.157973][T19379] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 487.196301][T19379] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 487.227182][T19379] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 487.341863][T19379] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 487.348516][T19379] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 487.374314][T19410] tipc: Enabling of bearer rejected, failed to enable media [ 487.399847][T19379] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 487.411840][T19379] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 487.582723][T19379] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 487.598196][T19379] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 487.685089][T19410] xfrm0 speed is unknown, defaulting to 1000 [ 487.685555][T19379] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 487.716432][T19379] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 488.389649][T19426] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 488.697829][T19429] xfrm0 speed is unknown, defaulting to 1000 [ 488.771517][T19410] ip6_vti0 speed is unknown, defaulting to 1000 [ 488.929498][T19444] netlink: 'syz.4.3342': attribute type 1 has an invalid length. [ 489.116876][T19444] bond1: entered promiscuous mode [ 489.158214][T19444] bond1: entered allmulticast mode [ 489.168936][T19444] 8021q: adding VLAN 0 to HW filter on device bond1 [ 489.206822][T19441] erspan1: entered allmulticast mode [ 489.240877][T19441] bond1: (slave erspan1): making interface the new active one [ 489.259573][T19441] erspan1: entered promiscuous mode [ 489.285118][T19441] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 489.556393][T19410] wg1 speed is unknown, defaulting to 1000 [ 489.556479][T19429] ip6_vti0 speed is unknown, defaulting to 1000 [ 489.762346][T19465] netlink: 'syz.5.3352': attribute type 1 has an invalid length. [ 489.774718][T19465] __nla_validate_parse: 3 callbacks suppressed [ 489.774735][T19465] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.3352'. [ 490.092321][T19429] wg1 speed is unknown, defaulting to 1000 [ 490.569220][T19492] lo: Caught tx_queue_len zero misconfig [ 491.590781][T19524] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3363'. [ 491.600700][T19524] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3363'. [ 493.259063][T19510] netlink: 'syz.5.3361': attribute type 1 has an invalid length. [ 493.417144][T19530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3365'. [ 493.461887][T19532] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3366'. [ 493.487608][T19530] vlan2: entered allmulticast mode [ 493.494010][T19530] team0: entered allmulticast mode [ 493.509036][T19530] team_slave_0: entered allmulticast mode [ 493.520432][T19530] team_slave_1: entered allmulticast mode [ 493.681195][T19546] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 494.077412][T19559] bond0: (slave sit0): Error: Device type is different from other slaves [ 494.316079][T19581] xt_hashlimit: size too large, truncated to 1048576 [ 494.390425][T19584] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3378'. [ 494.429666][T19584] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3378'. [ 494.692856][T19595] tipc: Started in network mode [ 494.701231][T19595] tipc: Node identity fea37a2d2ef6, cluster identity 4711 [ 494.710227][T19595] tipc: Enabled bearer , priority 0 [ 494.742883][T19595] syzkaller0: entered promiscuous mode [ 494.751336][T19595] syzkaller0: entered allmulticast mode [ 494.920310][T19609] Cannot find del_set index 2 as target [ 494.938719][T19612] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3383'. [ 494.971425][T19591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.237576][T19591] tipc: Resetting bearer [ 495.324977][T19591] tipc: Disabling bearer [ 495.404131][T19624] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3386'. [ 495.487712][T19634] netlink: 'syz.5.3388': attribute type 1 has an invalid length. [ 495.514011][T19634] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3388'. [ 495.525374][T19631] xt_TCPMSS: Only works on TCP SYN packets [ 495.537153][T19636] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3389'. [ 495.651192][T19643] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 495.892198][T19656] netlink: 'syz.6.3393': attribute type 10 has an invalid length. [ 495.917047][T19656] netlink: 212328 bytes leftover after parsing attributes in process `syz.6.3393'. [ 495.955592][T19656] netlink: Unknown conntrack attr (type=2304, max=9) [ 495.966480][T19662] netlink: 'syz.6.3393': attribute type 10 has an invalid length. [ 496.085662][T19668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3397'. [ 496.550043][T19691] batadv0: entered promiscuous mode [ 496.555461][T19691] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 496.730138][T19701] netlink: 'syz.5.3406': attribute type 11 has an invalid length. [ 496.819621][T19702] bond0: (slave rose0): Releasing backup interface [ 497.047177][T19701] xfrm0 speed is unknown, defaulting to 1000 [ 497.219985][T19727] wg1: entered promiscuous mode [ 497.224891][T19727] wg1: entered allmulticast mode [ 497.522773][T19738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3412'. [ 497.594536][T19750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3414'. [ 497.611537][T19750] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.728395][T19750] bridge_slave_1 (unregistering): left allmulticast mode [ 497.738299][T19750] bridge_slave_1 (unregistering): left promiscuous mode [ 497.746791][T19750] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.826967][T19701] ip6_vti0 speed is unknown, defaulting to 1000 [ 498.005852][T19765] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3418'. [ 498.103900][T19765] vlan2: entered allmulticast mode [ 498.124674][T19765] veth0_to_bond: entered allmulticast mode [ 498.153157][T19769] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3417'. [ 498.158963][T19765] vlan2: entered promiscuous mode [ 498.175487][T19765] veth0_to_bond: entered promiscuous mode [ 498.213200][T19765] team0: Port device vlan2 added [ 498.226480][T19769] veth1_macvtap: left promiscuous mode [ 498.448326][T19701] wg1 speed is unknown, defaulting to 1000 [ 498.986482][T19799] netlink: 'syz.3.3424': attribute type 9 has an invalid length. [ 498.997065][T19799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.005696][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.040322][T19799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.121324][T19803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.135646][T19799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.153071][ T9039] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.195452][T19803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.213819][T11118] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.248369][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.250735][T11118] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.301704][T11118] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.377088][T19832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 499.595952][T19808] xfrm0 speed is unknown, defaulting to 1000 [ 499.829259][T19838] netlink: 'syz.2.3433': attribute type 3 has an invalid length. [ 500.215896][T19864] __nla_validate_parse: 4 callbacks suppressed [ 500.215914][T19864] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3440'. [ 500.443052][T19877] netlink: 83 bytes leftover after parsing attributes in process `syz.4.3442'. [ 500.472508][T19877] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3442'. [ 500.508903][T19877] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3442'. [ 500.562232][T19808] ip6_vti0 speed is unknown, defaulting to 1000 [ 500.944395][T19891] ip6gretap1: entered promiscuous mode [ 501.326253][T19908] xfrm0 speed is unknown, defaulting to 1000 [ 501.359628][T19808] wg1 speed is unknown, defaulting to 1000 [ 501.511050][ T1300] net_ratelimit: 365 callbacks suppressed [ 501.511072][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.526470][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.555094][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 501.603716][T19914] netlink: 'syz.4.3453': attribute type 3 has an invalid length. [ 501.614547][T19914] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3453'. [ 501.699508][T19914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3453'. [ 501.710223][T19914] tipc: Enabling of bearer rejected, failed to enable media [ 502.211482][T19908] ip6_vti0 speed is unknown, defaulting to 1000 [ 502.498834][T19933] sctp: [Deprecated]: syz.5.3457 (pid 19933) Use of struct sctp_assoc_value in delayed_ack socket option. [ 502.498834][T19933] Use struct sctp_sack_info instead [ 502.556034][T19935] sctp: [Deprecated]: syz.5.3457 (pid 19935) Use of struct sctp_assoc_value in delayed_ack socket option. [ 502.556034][T19935] Use struct sctp_sack_info instead [ 502.599706][T19933] sctp: [Deprecated]: syz.5.3457 (pid 19933) Use of struct sctp_assoc_value in delayed_ack socket option. [ 502.599706][T19933] Use struct sctp_sack_info instead [ 502.649949][T19935] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3457'. [ 502.681248][T19935] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3457'. [ 502.691788][T19935] netlink: 'syz.5.3457': attribute type 6 has an invalid length. [ 502.703686][T19935] netlink: 'syz.5.3457': attribute type 14 has an invalid length. [ 502.770043][T19908] wg1 speed is unknown, defaulting to 1000 [ 502.791778][T19944] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.531994][T19977] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3468'. [ 503.776446][T19977] syzkaller1: entered promiscuous mode [ 503.797858][T19977] syzkaller1: entered allmulticast mode [ 503.834161][T19977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3468'. [ 504.277171][T20004] tipc: Failed to remove unknown binding: 66,1,1/0:1601329375/1601329377 [ 504.315914][T20004] tipc: Failed to remove unknown binding: 66,1,1/0:1601329375/1601329377 [ 504.356411][T20004] tipc: Failed to remove unknown binding: 66,1,1/0:1601329375/1601329377 [ 504.420368][T20000] netlink: 'syz.2.3473': attribute type 2 has an invalid length. [ 504.475726][T20000] !: entered promiscuous mode [ 505.067259][T20041] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 505.704263][T20041] bond4 (unregistering): Released all slaves [ 505.742855][T20043] tipc: Enabling of bearer rejected, failed to enable media [ 505.890736][T20056] netlink: 'syz.3.3489': attribute type 1 has an invalid length. [ 506.016434][T20063] __nla_validate_parse: 4 callbacks suppressed [ 506.016454][T20063] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3490'. [ 506.057611][T20056] 8021q: adding VLAN 0 to HW filter on device bond1 [ 506.139562][T20058] bond1: (slave geneve3): making interface the new active one [ 506.227683][T20058] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 506.287909][T20063] vlan2: entered promiscuous mode [ 506.334633][T20063] bridge0: entered promiscuous mode [ 506.396050][T20087] netlink: 'syz.5.3495': attribute type 2 has an invalid length. [ 506.461023][T20087] : entered promiscuous mode [ 506.508637][T20090] netlink: 'syz.6.3496': attribute type 9 has an invalid length. [ 506.599649][T20093] smc: net device wlan0 applied user defined pnetid SYZ0 [ 506.607238][T20093] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 506.772573][T20102] team0: Device gtp0 is of different type [ 506.831755][T20105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3502'. [ 506.851183][T20105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3502'. [ 506.860210][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5300 ms [ 506.860242][ C1] lec:lec_tx_timeout: lec0 [ 506.883595][ T5955] IPVS: starting estimator thread 0... [ 506.980484][T20106] IPVS: using max 39 ests per chain, 93600 per kthread [ 507.010831][T20116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3505'. [ 507.021685][T20116] openvswitch: netlink: Flow actions attr not present in new flow. [ 507.105194][T20118] xfrm0 speed is unknown, defaulting to 1000 [ 507.312019][T20122] bond1: entered promiscuous mode [ 507.317089][T20122] bond1: entered allmulticast mode [ 507.356824][T20122] 8021q: adding VLAN 0 to HW filter on device bond1 [ 507.382224][T20118] ip6_vti0 speed is unknown, defaulting to 1000 [ 507.486831][T20130] openvswitch: netlink: Flow key attr not present in new flow. [ 507.646596][T20141] sctp: [Deprecated]: syz.6.3512 (pid 20141) Use of int in max_burst socket option deprecated. [ 507.646596][T20141] Use struct sctp_assoc_value instead [ 507.742591][T20142] netlink: zone id is out of range [ 507.761112][T20142] netlink: zone id is out of range [ 507.766269][T20142] netlink: zone id is out of range [ 507.873472][T20142] netlink: zone id is out of range [ 507.906655][T20118] wg1 speed is unknown, defaulting to 1000 [ 507.916391][T20142] netlink: zone id is out of range [ 507.937648][T20146] xfrm0 speed is unknown, defaulting to 1000 [ 508.008361][T20142] netlink: zone id is out of range [ 508.013535][T20142] netlink: zone id is out of range [ 508.040468][T20137] netlink: set zone limit has 4 unknown bytes [ 508.473063][T20146] ip6_vti0 speed is unknown, defaulting to 1000 [ 508.651475][T20172] smc: ib device syz2 ibport 2 applied user defined pnetid SYZ1 [ 508.745563][T20174] netlink: 'syz.3.3517': attribute type 11 has an invalid length. [ 508.771545][T20174] netlink: 'syz.3.3517': attribute type 11 has an invalid length. [ 508.789665][T20174] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3517'. [ 508.929125][T20146] wg1 speed is unknown, defaulting to 1000 [ 509.134652][T20187] netlink: 'syz.3.3522': attribute type 5 has an invalid length. [ 509.221448][T20188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.250838][T20188] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3521'. [ 510.193228][T20224] sctp: [Deprecated]: syz.6.3532 (pid 20224) Use of int in maxseg socket option. [ 510.193228][T20224] Use struct sctp_assoc_value instead [ 510.384621][T20232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3536'. [ 510.417141][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.417257][T20232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3536'. [ 510.447746][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.460115][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.478820][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.583432][T20235] syzkaller0: entered promiscuous mode [ 510.589054][T20235] syzkaller0: entered allmulticast mode [ 512.622077][T20256] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 512.654880][T20261] bridge1: entered allmulticast mode [ 513.015209][T20286] net_ratelimit: 7 callbacks suppressed [ 513.015231][T20286] Set syz0 is full, maxelem 0 reached [ 513.256648][T20304] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3553'. [ 513.281537][T20303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.310148][T20304] Cannot find map_set index 4 as target [ 513.331723][T20307] ip6tnl0: Caught tx_queue_len zero misconfig [ 513.355232][T20303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.367772][T20307] xt_hashlimit: max too large, truncated to 1048576 [ 513.369463][T20308] bond_slave_0: entered promiscuous mode [ 513.376192][T20307] xt_CT: You must specify a L4 protocol and not use inversions on it [ 513.380228][T20308] bond_slave_1: entered promiscuous mode [ 513.422309][T20308] vlan3: entered promiscuous mode [ 513.427631][T20308] bond0: entered promiscuous mode [ 513.513563][T20310] xfrm0 speed is unknown, defaulting to 1000 [ 513.543420][T20314] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3556'. [ 513.835903][T20310] ip6_vti0 speed is unknown, defaulting to 1000 [ 514.095743][T20332] openvswitch: netlink: Tunnel attr 154 out of range max 16 [ 514.263134][T20310] wg1 speed is unknown, defaulting to 1000 [ 514.747909][T20354] syzkaller0: entered promiscuous mode [ 514.767214][T20354] syzkaller0: entered allmulticast mode [ 514.872392][T20360] tc_dump_action: action bad kind [ 514.985573][T20366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3569'. [ 515.200147][T20370] geneve2: entered promiscuous mode [ 515.433295][T20385] xfrm0 speed is unknown, defaulting to 1000 [ 515.766963][T20404] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3581'. [ 515.786666][T20405] bridge0: port 3(syz_tun) entered blocking state [ 515.794157][T20405] bridge0: port 3(syz_tun) entered disabled state [ 515.810471][T20405] syz_tun: entered allmulticast mode [ 515.830511][T20405] syz_tun: entered promiscuous mode [ 515.847733][T20405] bridge0: port 3(syz_tun) entered blocking state [ 515.854348][T20405] bridge0: port 3(syz_tun) entered forwarding state [ 515.873837][T20410] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3581'. [ 515.905880][T20412] Cannot find set identified by id 0 to match [ 515.909345][T20410] netlink: 'syz.5.3581': attribute type 1 has an invalid length. [ 516.220537][T20424] netlink: 'syz.6.3588': attribute type 2 has an invalid length. [ 516.314512][T20424] m5n: entered promiscuous mode [ 516.360322][T20385] ip6_vti0 speed is unknown, defaulting to 1000 [ 516.416827][T20429] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3574'. [ 516.624645][ T10] IPVS: starting estimator thread 0... [ 516.722054][T20454] x_tables: duplicate underflow at hook 2 [ 516.738176][T20452] IPVS: using max 30 ests per chain, 72000 per kthread [ 516.846457][T20458] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3595'. [ 516.877325][T20458] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3595'. [ 517.112468][T20385] wg1 speed is unknown, defaulting to 1000 [ 517.212649][T20482] syzkaller1: entered promiscuous mode [ 517.226527][T20482] syzkaller1: entered allmulticast mode [ 517.230276][T20487] netlink: 'syz.2.3604': attribute type 11 has an invalid length. [ 517.242468][T20487] netlink: 'syz.2.3604': attribute type 11 has an invalid length. [ 517.251582][T20487] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3604'. [ 517.251911][T20486] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 517.269679][T20487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3604'. [ 517.513714][T20492] syzkaller0: entered promiscuous mode [ 517.521128][T20492] syzkaller0: entered allmulticast mode [ 517.537401][T20492] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 518.302708][T20517] __nla_validate_parse: 1 callbacks suppressed [ 518.302727][T20517] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3612'. [ 518.435224][T20518] can: request_module (can-proto-3) failed. [ 518.582595][T20537] netlink: 'syz.3.3619': attribute type 21 has an invalid length. [ 518.591783][T20537] netlink: 'syz.3.3619': attribute type 6 has an invalid length. [ 518.634991][T20537] netlink: 'syz.3.3619': attribute type 9 has an invalid length. [ 518.661368][T20537] netlink: 'syz.3.3619': attribute type 11 has an invalid length. [ 518.673281][T20537] netlink: 'syz.3.3619': attribute type 12 has an invalid length. [ 518.701267][T20541] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20000 [ 518.718062][T20537] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.3619'. [ 518.752105][T20537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3619'. [ 518.904874][T20549] team_slave_0: entered promiscuous mode [ 518.910663][T20549] team_slave_1: entered promiscuous mode [ 518.924097][T20549] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 518.961941][T20549] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 519.019792][T20549] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3624'. [ 519.138342][T20556] tipc: Enabled bearer , priority 0 [ 519.156208][T20559] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 519.162914][T20559] syzkaller1: linktype set to 769 [ 519.185027][T20561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3628'. [ 519.189817][T20559] netlink: 'syz.6.3626': attribute type 1 has an invalid length. [ 519.196422][T20558] syzkaller0: entered promiscuous mode [ 519.209445][T20558] syzkaller0: entered allmulticast mode [ 519.217685][T20561] batadv0: Device is already in use. [ 519.275558][T20558] tipc: Resetting bearer [ 519.330065][T20558] tipc: Disabling bearer [ 519.355790][T20569] netlink: 'syz.2.3631': attribute type 1 has an invalid length. [ 519.394444][T20569] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 519.554558][T20582] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3634'. [ 519.601875][T20582] batadv_slave_1: entered promiscuous mode [ 519.609067][T20582] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3634'. [ 519.621722][ T30] audit: type=1800 audit(1770517737.064:12): pid=20586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3636" name="x000000000000000800000000000000000000010" dev="tmpfs" ino=754 res=0 errno=0 [ 519.662718][T20590] syzkaller0: entered promiscuous mode [ 519.681232][T20590] syzkaller0: entered allmulticast mode [ 519.698574][ T30] audit: type=1804 audit(1770517737.064:13): pid=20586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3636" name="x000000000000000800000000000000000000010" dev="tmpfs" ino=754 res=1 errno=0 [ 519.900882][T20605] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3640'. [ 520.302446][T20634] netlink: 'syz.4.3647': attribute type 1 has an invalid length. [ 520.319261][T20634] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3647'. [ 520.361119][T20627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3645'. [ 520.488746][T20627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.505176][T20627] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.518765][T20627] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 520.564366][T20635] xfrm0 speed is unknown, defaulting to 1000 [ 520.580273][T20648] syzkaller0: entered promiscuous mode [ 520.585768][T20648] syzkaller0: entered allmulticast mode [ 520.631046][T20650] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 520.636761][T20650] pim6reg0: persist disabled [ 520.976223][T20635] ip6_vti0 speed is unknown, defaulting to 1000 [ 521.344926][T20681] xfrm0 speed is unknown, defaulting to 1000 [ 521.441632][T20689] sctp: [Deprecated]: syz.3.3662 (pid 20689) Use of struct sctp_assoc_value in delayed_ack socket option. [ 521.441632][T20689] Use struct sctp_sack_info instead [ 521.457420][T20635] wg1 speed is unknown, defaulting to 1000 [ 521.764885][T20694] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 521.782004][T20702] IPVS: sync thread started: state = MASTER, mcast_ifn = macvtap0, syncid = 0, id = 0 [ 521.794359][T20681] ip6_vti0 speed is unknown, defaulting to 1000 [ 522.036454][T20708] tipc: Enabled bearer , priority 0 [ 522.060018][T20708] syzkaller0: entered promiscuous mode [ 522.081624][T20708] syzkaller0: entered allmulticast mode [ 522.109597][T20708] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 522.128169][ T8765] lec:lec_start_xmit: lec0:No lecd attached [ 522.175349][T20708] tipc: Resetting bearer [ 522.243760][T20719] Cannot find add_set index 0 as target [ 522.280013][T20681] wg1 speed is unknown, defaulting to 1000 [ 522.286168][T20707] tipc: Resetting bearer [ 522.357746][T20707] tipc: Disabling bearer [ 522.731585][T20736] netlink: 'syz.5.3678': attribute type 5 has an invalid length. [ 522.762823][T20737] netlink: 'syz.5.3678': attribute type 5 has an invalid length. [ 522.801644][T20735] netlink: 'syz.5.3678': attribute type 1 has an invalid length. [ 522.830343][T20735] netlink: 'syz.5.3678': attribute type 2 has an invalid length. [ 522.852119][T20735] netlink: 'syz.5.3678': attribute type 1 has an invalid length. [ 523.300543][T20746] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 523.666532][T20763] syzkaller0: entered promiscuous mode [ 523.675629][T20763] syzkaller0: entered allmulticast mode [ 523.900792][T20776] syzkaller0: entered promiscuous mode [ 523.920883][T20779] FAULT_INJECTION: forcing a failure. [ 523.920883][T20779] name failslab, interval 1, probability 0, space 0, times 0 [ 523.939118][T20776] syzkaller0: entered allmulticast mode [ 523.965516][T20779] CPU: 1 UID: 0 PID: 20779 Comm: syz.4.3692 Not tainted syzkaller #0 PREEMPT(full) [ 523.965543][T20779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 523.965555][T20779] Call Trace: [ 523.965563][T20779] [ 523.965572][T20779] dump_stack_lvl+0xe8/0x150 [ 523.965601][T20779] should_fail_ex+0x412/0x560 [ 523.965629][T20779] should_failslab+0xa8/0x100 [ 523.965651][T20779] kmem_cache_alloc_noprof+0x87/0x6e0 [ 523.965674][T20779] ? __netlink_lookup+0xc6/0x8b0 [ 523.965695][T20779] ? skb_clone+0x212/0x3a0 [ 523.965722][T20779] skb_clone+0x212/0x3a0 [ 523.965747][T20779] __netlink_deliver_tap+0x404/0x850 [ 523.965778][T20779] ? netlink_deliver_tap+0x2e/0x1b0 [ 523.965798][T20779] netlink_deliver_tap+0x19c/0x1b0 [ 523.965819][T20779] netlink_unicast+0x7e3/0x9b0 [ 523.965857][T20779] ? __pfx_netlink_unicast+0x10/0x10 [ 523.965877][T20779] ? netlink_sendmsg+0x650/0xb40 [ 523.965893][T20779] ? skb_put+0x11b/0x210 [ 523.965916][T20779] netlink_sendmsg+0x813/0xb40 [ 523.965945][T20779] ? __pfx_netlink_sendmsg+0x10/0x10 [ 523.965967][T20779] ? aa_sock_msg_perm+0xf1/0x1b0 [ 523.965988][T20779] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 523.966009][T20779] ? __pfx_netlink_sendmsg+0x10/0x10 [ 523.966026][T20779] ____sys_sendmsg+0xa68/0xad0 [ 523.966048][T20779] ? __might_fault+0xaf/0x130 [ 523.966077][T20779] ? __pfx_____sys_sendmsg+0x10/0x10 [ 523.966107][T20779] ? import_iovec+0x73/0xa0 [ 523.966135][T20779] ___sys_sendmsg+0x2a5/0x360 [ 523.966155][T20779] ? __lock_acquire+0x6b5/0x2cf0 [ 523.966183][T20779] ? __pfx____sys_sendmsg+0x10/0x10 [ 523.966209][T20779] ? kstrtouint+0x6e/0xe0 [ 523.966254][T20779] ? __fget_files+0x2a/0x420 [ 523.966272][T20779] ? __fget_files+0x3a0/0x420 [ 523.966300][T20779] __sys_sendmmsg+0x27c/0x4e0 [ 523.966327][T20779] ? __pfx___sys_sendmmsg+0x10/0x10 [ 523.966347][T20779] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 523.966413][T20779] ? ksys_write+0x242/0x270 [ 523.966440][T20779] ? __pfx_ksys_write+0x10/0x10 [ 523.966469][T20779] __x64_sys_sendmmsg+0xa0/0xc0 [ 523.966493][T20779] do_syscall_64+0xe2/0xf80 [ 523.966514][T20779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.966530][T20779] ? trace_irq_disable+0x37/0x100 [ 523.966547][T20779] ? clear_bhb_loop+0x60/0xb0 [ 523.966568][T20779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.966584][T20779] RIP: 0033:0x7f7f3ff9aeb9 [ 523.966599][T20779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.966614][T20779] RSP: 002b:00007f7f40dcb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 523.966634][T20779] RAX: ffffffffffffffda RBX: 00007f7f40215fa0 RCX: 00007f7f3ff9aeb9 [ 523.966646][T20779] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 523.966658][T20779] RBP: 00007f7f40dcb090 R08: 0000000000000000 R09: 0000000000000000 [ 523.966668][T20779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.966678][T20779] R13: 00007f7f40216038 R14: 00007f7f40215fa0 R15: 00007fffeb9dbbc8 [ 523.966708][T20779] [ 523.966921][T20779] __nla_validate_parse: 10 callbacks suppressed [ 523.966932][T20779] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3692'. [ 524.089063][T20790] netlink: 324 bytes leftover after parsing attributes in process `syz.2.3691'. [ 524.133665][T20779] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3692'. [ 524.318405][T20779] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3692'. [ 524.331221][T20779] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3692'. [ 524.422447][T20796] bond2: entered promiscuous mode [ 524.434228][T20797] vcan1: entered promiscuous mode [ 524.439811][T20797] vcan1: entered allmulticast mode [ 524.447058][T20797] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 524.459685][T20797] bond2: (slave vcan1): Error -95 calling set_mac_address [ 524.559667][T20796] vcan1: entered promiscuous mode [ 524.565108][T20796] vcan1: entered allmulticast mode [ 524.573241][T20796] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 524.589815][T20796] bond2: (slave vcan1): Error -95 calling set_mac_address [ 524.664848][T20807] netlink: 'syz.3.3699': attribute type 3 has an invalid length. [ 524.679927][T20807] netlink: 'syz.3.3699': attribute type 3 has an invalid length. [ 524.697771][T20796] vcan1: entered promiscuous mode [ 524.704440][T20796] vcan1: entered allmulticast mode [ 524.735266][T20796] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 524.746817][T20796] bond2: (slave vcan1): Error -95 calling set_mac_address [ 524.844362][T20796] vcan1: entered promiscuous mode [ 524.849714][T20796] vcan1: entered allmulticast mode [ 524.855454][T20796] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 524.868903][T20796] bond2: (slave vcan1): Error -95 calling set_mac_address [ 524.953376][T20823] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3704'. [ 524.980434][T20796] vcan1: entered promiscuous mode [ 524.986137][T20796] vcan1: entered allmulticast mode [ 524.999234][T20796] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 525.023947][T20826] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3705'. [ 525.033695][T20796] bond2: (slave vcan1): Error -95 calling set_mac_address [ 525.162624][T20825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 525.170198][T20834] vcan0: Caught tx_queue_len zero misconfig [ 525.180583][T20842] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3707'. [ 525.196473][T20823] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3704'. [ 525.316982][T20823] syzkaller0: entered promiscuous mode [ 525.326739][T20823] syzkaller0: entered allmulticast mode [ 525.351349][T20844] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 525.842854][T20860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3712'. [ 525.924619][ T30] audit: type=1800 audit(1770517743.364:14): pid=20856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3710" name="memory.events" dev="tmpfs" ino=762 res=0 errno=0 [ 527.603698][T20870] vlan3: entered allmulticast mode [ 527.644021][T20854] xfrm0 speed is unknown, defaulting to 1000 [ 527.898008][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms [ 527.906200][ C1] lec:lec_tx_timeout: lec0 [ 528.124558][T20896] xt_connbytes: Forcing CT accounting to be enabled [ 528.203396][T20902] sctp: [Deprecated]: syz.2.3727 (pid 20902) Use of int in max_burst socket option. [ 528.203396][T20902] Use struct sctp_assoc_value instead [ 528.246420][T20854] ip6_vti0 speed is unknown, defaulting to 1000 [ 528.944855][T20854] wg1 speed is unknown, defaulting to 1000 [ 529.035831][T20922] ip6gre0: Caught tx_queue_len zero misconfig [ 529.042220][T20922] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 529.055027][T20937] __nla_validate_parse: 6 callbacks suppressed [ 529.055047][T20937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3733'. [ 529.100316][T20941] netlink: 'syz.6.3738': attribute type 11 has an invalid length. [ 529.266549][T20947] netlink: 'syz.6.3739': attribute type 10 has an invalid length. [ 529.287423][T20947] vxcan1: entered promiscuous mode [ 529.300499][T20947] vxcan1: entered allmulticast mode [ 529.306090][T20947] team0: Device vxcan1 is of different type [ 529.614188][T20961] netlink: 'syz.5.3742': attribute type 1 has an invalid length. [ 529.811558][T20961] bond2: entered promiscuous mode [ 529.817117][T20961] 8021q: adding VLAN 0 to HW filter on device bond2 [ 529.894182][T20963] bond2: (slave veth3): making interface the new active one [ 529.908740][T20963] veth3: entered promiscuous mode [ 529.920559][T20963] bond2: (slave veth3): Enslaving as an active interface with an up link [ 529.968366][T20966] netlink: 'syz.2.3743': attribute type 1 has an invalid length. [ 529.976229][T20966] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3743'. [ 530.225379][T20983] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3746'. [ 530.243810][T20983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3746'. [ 530.253963][T20983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3746'. [ 530.307767][T20983] syzkaller0: entered promiscuous mode [ 530.313394][T20983] syzkaller0: entered allmulticast mode [ 530.507763][T20989] : entered promiscuous mode [ 530.592924][T20994] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 530.913165][T21001] xfrm0 speed is unknown, defaulting to 1000 [ 530.926400][T21004] syzkaller0: entered promiscuous mode [ 530.957355][T21004] syzkaller0: entered allmulticast mode [ 531.142606][T21009] tipc: Started in network mode [ 531.161034][T21009] tipc: Node identity a25f9e0e0668, cluster identity 4711 [ 531.180312][T21009] tipc: Enabled bearer , priority 0 [ 531.231425][T21003] tipc: Resetting bearer [ 531.264244][T21003] tipc: Disabling bearer [ 531.371346][T21016] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.398507][T21016] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.428035][T21001] ip6_vti0 speed is unknown, defaulting to 1000 [ 531.512801][T21016] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.538197][T21016] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.680902][T21016] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.698183][T21016] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.805862][T21016] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.816303][T21016] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.851571][T21030] dummy0: entered promiscuous mode [ 531.862047][T21030] dummy0: left promiscuous mode [ 531.890285][T21001] wg1 speed is unknown, defaulting to 1000 [ 531.954589][T21033] netlink: 'syz.2.3759': attribute type 1 has an invalid length. [ 531.992056][T11118] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.006748][T11118] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.039455][T21035] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 532.050241][T21035] bond4: (slave batadv1): making interface the new active one [ 532.060007][T21035] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 532.076806][T21033] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3759'. [ 532.188351][ T49] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.201940][T21040] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3761'. [ 532.214266][ T49] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.310900][T21033] 8021q: adding VLAN 0 to HW filter on device bond4 [ 532.336867][ T49] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.349838][ T49] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.362506][ T49] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.377416][ T49] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.532856][T21043] bond3 (unregistering): Released all slaves [ 532.686753][T21039] bond4: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 532.723106][T21039] bond4 (unregistering): Released all slaves [ 532.971990][T21064] netlink: 'syz.2.3766': attribute type 1 has an invalid length. [ 532.986721][T21053] xfrm0 speed is unknown, defaulting to 1000 [ 533.015941][T21064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3766'. [ 533.072319][T21065] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3766'. [ 533.404693][T21076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.413947][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.459236][T21076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.471515][T21081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.504083][T21076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.561345][T21081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.569850][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.591517][T21087] pim6reg: entered allmulticast mode [ 533.637369][T21081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.669423][T21067] xfrm0 speed is unknown, defaulting to 1000 [ 533.679311][T21053] ip6_vti0 speed is unknown, defaulting to 1000 [ 533.688186][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.704755][T21094] xt_bpf: check failed: parse error [ 533.731222][T21094] ieee802154 phy0 wpan0: encryption failed: -22 [ 534.233481][T21092] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.240760][T21092] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.283526][T21092] team_slave_0: left promiscuous mode [ 534.295755][T21092] team_slave_1: left promiscuous mode [ 534.546209][T21092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.577866][T21092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.968687][T21084] pim6reg: left allmulticast mode [ 534.980338][T21078] xfrm0 speed is unknown, defaulting to 1000 [ 534.983979][T21053] wg1 speed is unknown, defaulting to 1000 [ 534.993187][T21067] ip6_vti0 speed is unknown, defaulting to 1000 [ 534.993281][ T13] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.089267][ T13] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.110346][ T13] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.135269][ T13] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.153540][T21100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3775'. [ 535.517324][T21067] wg1 speed is unknown, defaulting to 1000 [ 535.589237][T21078] ip6_vti0 speed is unknown, defaulting to 1000 [ 536.047767][T21078] wg1 speed is unknown, defaulting to 1000 [ 536.179055][T21130] bond0: Caught tx_queue_len zero misconfig [ 536.932022][T21161] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3791'. [ 537.039704][T21161] bridge0: port 3(syz_tun) entered disabled state [ 537.053490][T21161] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.061238][T21161] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.090120][T21163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3791'. [ 537.108503][T21163] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3791'. [ 537.235301][T21161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.264293][T21161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.324720][T21161] bond1: left promiscuous mode [ 537.330852][T21161] erspan1: left promiscuous mode [ 537.335983][T21161] bond1: left allmulticast mode [ 537.351396][T21161] erspan1: left allmulticast mode [ 537.357879][T21161] vlan2: left promiscuous mode [ 537.363453][T21161] bridge0: left promiscuous mode [ 537.394278][T21163] geneve2: entered promiscuous mode [ 537.399947][T21163] geneve2: entered allmulticast mode [ 537.429309][ T13] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.444234][ T13] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.476450][ T9039] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.505611][ T13] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.538572][T21165] netlink: 'syz.4.3792': attribute type 2 has an invalid length. [ 537.731313][T21173] xfrm0: entered promiscuous mode [ 537.736405][T21173] xfrm0: entered allmulticast mode [ 537.931676][T21189] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3800'. [ 537.936542][T21185] xfrm0 speed is unknown, defaulting to 1000 [ 537.991210][T21189] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3800'. [ 538.030472][T21189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3800'. [ 538.116089][T21194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3801'. [ 538.266062][T21185] ip6_vti0 speed is unknown, defaulting to 1000 [ 538.345798][T21208] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.3805'. [ 538.691530][ T30] audit: type=1804 audit(1770517756.134:15): pid=21221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3809" name="/newroot/116/cgroup.controllers" dev="tmpfs" ino=607 res=1 errno=0 [ 538.702766][T21223] netlink: 'syz.2.3808': attribute type 21 has an invalid length. [ 538.752303][ T30] audit: type=1800 audit(1770517756.134:16): pid=21221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3809" name="cgroup.controllers" dev="tmpfs" ino=607 res=0 errno=0 [ 538.758831][T21223] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3808'. [ 538.853880][T21227] netlink: 'syz.3.3812': attribute type 1 has an invalid length. [ 538.875535][T21185] wg1 speed is unknown, defaulting to 1000 [ 539.114281][T21240] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.133001][T21240] team0: left promiscuous mode [ 539.139221][T21240] team_slave_0: left promiscuous mode [ 539.144919][T21240] team_slave_1: left promiscuous mode [ 539.151555][T21240] geneve0: left promiscuous mode [ 539.156817][T21240] vlan2: left promiscuous mode [ 539.170241][T21240] veth0_to_bond: left promiscuous mode [ 539.176186][T21240] team0: left allmulticast mode [ 539.183106][T21240] team_slave_0: left allmulticast mode [ 539.203848][T21240] team_slave_1: left allmulticast mode [ 539.209940][T21240] geneve0: left allmulticast mode [ 539.230150][T21240] batadv0: left promiscuous mode [ 539.301581][T21240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.396633][T21240] bond3: left promiscuous mode [ 539.409554][T21240] vlan2: left allmulticast mode [ 539.414439][T21240] veth0_to_bond: left allmulticast mode [ 539.428065][T21240] bridge1: left allmulticast mode [ 539.470531][T21234] vlan3: entered allmulticast mode [ 539.475673][T21234] team0: entered allmulticast mode [ 539.487375][T21234] team_slave_0: entered allmulticast mode [ 539.493948][T21234] team_slave_1: entered allmulticast mode [ 539.528985][T11118] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.550752][T11118] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.569097][T11118] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.582448][T11118] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.639643][T11118] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.650766][T11118] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.786261][T11118] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.840200][T11118] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.974328][T21262] xfrm0 speed is unknown, defaulting to 1000 [ 540.060214][T21273] sctp: [Deprecated]: syz.6.3824 (pid 21273) Use of struct sctp_assoc_value in delayed_ack socket option. [ 540.060214][T21273] Use struct sctp_sack_info instead [ 540.078469][T21274] sctp: [Deprecated]: syz.6.3824 (pid 21274) Use of struct sctp_assoc_value in delayed_ack socket option. [ 540.078469][T21274] Use struct sctp_sack_info instead [ 540.293286][T21282] netlink: 'syz.6.3826': attribute type 4 has an invalid length. [ 540.512754][T21294] __nla_validate_parse: 5 callbacks suppressed [ 540.512773][T21294] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3830'. [ 540.529836][T21294] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3830'. [ 540.539203][T21294] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3830'. [ 540.548659][T21294] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3830'. [ 540.603851][T21271] xfrm0 speed is unknown, defaulting to 1000 [ 540.611893][T21262] ip6_vti0 speed is unknown, defaulting to 1000 [ 540.880068][T21306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.899097][T21307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.960221][T21309] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.3835'. [ 541.008566][T21309] netlink: 'syz.5.3835': attribute type 1 has an invalid length. [ 541.131027][T21262] wg1 speed is unknown, defaulting to 1000 [ 541.131108][T21271] ip6_vti0 speed is unknown, defaulting to 1000 [ 541.346912][T21318] xfrm1: entered allmulticast mode [ 541.412250][T21318] lo: Caught tx_queue_len zero misconfig [ 541.469224][T21320] tipc: Enabling of bearer rejected, failed to enable media [ 541.507676][T21271] wg1 speed is unknown, defaulting to 1000 [ 542.731007][T21340] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3843'. [ 542.992518][T21345] netem: incorrect gi model size [ 542.997943][T21345] netem: change failed [ 543.009257][T21348] netlink: 'syz.4.3846': attribute type 3 has an invalid length. [ 543.030077][T21346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3844'. [ 543.048549][T21348] netlink: 'syz.4.3846': attribute type 1 has an invalid length. [ 543.056424][T21348] netlink: 212 bytes leftover after parsing attributes in process `syz.4.3846'. [ 543.090411][T21348] NCSI netlink: No device for ifindex 813332851 [ 543.221232][T21358] xt_TCPMSS: Only works on TCP SYN packets [ 543.229356][T21359] xt_hashlimit: overflow, rate too high: 0 [ 543.421611][T21367] xfrm0 speed is unknown, defaulting to 1000 [ 543.441437][T21376] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3852'. [ 543.692751][T21367] ip6_vti0 speed is unknown, defaulting to 1000 [ 544.194979][T21367] wg1 speed is unknown, defaulting to 1000 [ 544.355187][T21411] xfrm0 speed is unknown, defaulting to 1000 [ 544.417481][T21416] netlink: 'syz.4.3867': attribute type 1 has an invalid length. [ 544.532255][T21416] veth3: entered promiscuous mode [ 544.550170][T21416] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3867'. [ 544.594903][T21416] 8021q: adding VLAN 0 to HW filter on device bond3 [ 544.704606][T21411] ip6_vti0 speed is unknown, defaulting to 1000 [ 544.716563][T21431] x_tables: duplicate underflow at hook 1 [ 544.725741][T21431] No such timeout policy "syz1" [ 545.035549][T21441] syzkaller0: entered promiscuous mode [ 545.056546][T21441] syzkaller0: entered allmulticast mode [ 547.243530][T21411] wg1 speed is unknown, defaulting to 1000 [ 547.368322][T21475] __nla_validate_parse: 1 callbacks suppressed [ 547.368343][T21475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3879'. [ 547.484387][T21481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 547.574130][T21475] xfrm0 speed is unknown, defaulting to 1000 [ 547.576833][T21481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 547.754769][T21492] ip6gre2: entered promiscuous mode [ 547.761004][T21492] ip6gre2: entered allmulticast mode [ 547.855272][T21495] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3884'. [ 547.890166][ T36] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 547.899807][ T36] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 547.918835][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 548.010599][T21475] ip6_vti0 speed is unknown, defaulting to 1000 [ 548.188712][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 548.265999][T21475] wg1 speed is unknown, defaulting to 1000 [ 548.427631][T21502] macsec1: entered promiscuous mode [ 548.434660][T21502] macsec1: entered allmulticast mode [ 548.779222][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 549.192569][T21531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3894'. [ 549.237420][T21536] netlink: 'syz.5.3895': attribute type 5 has an invalid length. [ 549.374940][T21531] hsr_slave_1 (unregistering): left promiscuous mode [ 549.607302][T21552] netlink: 232 bytes leftover after parsing attributes in process `syz.6.3901'. [ 549.650098][T21552] netlink: 232 bytes leftover after parsing attributes in process `syz.6.3901'. [ 549.682144][T21552] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3901'. [ 549.695531][T21555] netlink: 'syz.6.3901': attribute type 83 has an invalid length. [ 549.760619][T21560] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3902'. [ 550.323029][T21581] xfrm0 speed is unknown, defaulting to 1000 [ 550.826193][T21611] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3918'. [ 550.852823][T21611] syz.4.3918: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 550.869893][T21581] ip6_vti0 speed is unknown, defaulting to 1000 [ 550.898085][T21611] CPU: 1 UID: 0 PID: 21611 Comm: syz.4.3918 Not tainted syzkaller #0 PREEMPT(full) [ 550.898114][T21611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 550.898126][T21611] Call Trace: [ 550.898135][T21611] [ 550.898143][T21611] dump_stack_lvl+0xe8/0x150 [ 550.898173][T21611] warn_alloc+0x249/0x340 [ 550.898196][T21611] ? stack_trace_save+0xa9/0x100 [ 550.898223][T21611] ? __pfx_warn_alloc+0x10/0x10 [ 550.898259][T21611] ? kasan_save_track+0x4f/0x80 [ 550.898277][T21611] ? kasan_save_track+0x3e/0x80 [ 550.898293][T21611] ? __kasan_kmalloc+0x93/0xb0 [ 550.898312][T21611] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 550.898330][T21611] ? xskq_create+0x56/0x170 [ 550.898352][T21611] ? xsk_setsockopt+0x54c/0x990 [ 550.898372][T21611] ? do_sock_setsockopt+0x17c/0x1b0 [ 550.898396][T21611] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 550.898420][T21611] ? do_syscall_64+0xe2/0xf80 [ 550.898449][T21611] __vmalloc_node_range_noprof+0x132/0x1730 [ 550.898501][T21611] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 550.898526][T21611] ? __kasan_kmalloc+0x93/0xb0 [ 550.898550][T21611] vmalloc_user_noprof+0xad/0xe0 [ 550.898568][T21611] ? xskq_create+0xbf/0x170 [ 550.898592][T21611] xskq_create+0xbf/0x170 [ 550.898617][T21611] xsk_init_queue+0xad/0x110 [ 550.898649][T21611] xsk_setsockopt+0x54c/0x990 [ 550.898675][T21611] ? __pfx_xsk_setsockopt+0x10/0x10 [ 550.898697][T21611] ? __pfx_aa_sk_perm+0x10/0x10 [ 550.898724][T21611] ? aa_sock_opt_perm+0xff/0x1a0 [ 550.898750][T21611] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 550.898771][T21611] ? __pfx_xsk_setsockopt+0x10/0x10 [ 550.898794][T21611] do_sock_setsockopt+0x17c/0x1b0 [ 550.898822][T21611] __x64_sys_setsockopt+0x13d/0x1b0 [ 550.898852][T21611] do_syscall_64+0xe2/0xf80 [ 550.898877][T21611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.898894][T21611] ? trace_irq_disable+0x37/0x100 [ 550.898912][T21611] ? clear_bhb_loop+0x60/0xb0 [ 550.898935][T21611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.898955][T21611] RIP: 0033:0x7f7f3ff9aeb9 [ 550.898973][T21611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.898989][T21611] RSP: 002b:00007f7f40dcb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 550.899009][T21611] RAX: ffffffffffffffda RBX: 00007f7f40215fa0 RCX: 00007f7f3ff9aeb9 [ 550.899024][T21611] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 550.899036][T21611] RBP: 00007f7f40008c1f R08: 0000000000000004 R09: 0000000000000000 [ 550.899048][T21611] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 550.899061][T21611] R13: 00007f7f40216038 R14: 00007f7f40215fa0 R15: 00007fffeb9dbbc8 [ 550.899094][T21611] [ 550.899136][T21611] Mem-Info: [ 551.213885][T21611] active_anon:7662 inactive_anon:0 isolated_anon:0 [ 551.213885][T21611] active_file:3095 inactive_file:40473 isolated_file:0 [ 551.213885][T21611] unevictable:768 dirty:198 writeback:0 [ 551.213885][T21611] slab_reclaimable:13254 slab_unreclaimable:131636 [ 551.213885][T21611] mapped:40836 shmem:2455 pagetables:1689 [ 551.213885][T21611] sec_pagetables:0 bounce:0 [ 551.213885][T21611] kernel_misc_reclaimable:0 [ 551.213885][T21611] free:1256912 free_pcp:12566 free_cma:0 [ 551.328057][T21611] Node 0 active_anon:34748kB inactive_anon:0kB active_file:12380kB inactive_file:161692kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:166744kB dirty:792kB writeback:0kB shmem:11684kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15424kB pagetables:6632kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 551.406323][T21611] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 551.446870][T21611] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 551.477025][T21611] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 551.482937][T21611] Node 0 DMA32 free:1118844kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40048kB inactive_anon:0kB active_file:12380kB inactive_file:161692kB unevictable:1536kB writepending:792kB zspages:0kB present:3129332kB managed:2554036kB mlocked:0kB bounce:0kB free_pcp:25624kB local_pcp:12572kB free_cma:0kB [ 551.518483][T21611] lowmem_reserve[]: 0 0 1 1 1 [ 551.523254][T21611] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 551.577034][T21611] lowmem_reserve[]: 0 0 0 0 0 [ 551.586046][T21603] lec:lec_atm_close: lec0: Shut down! [ 551.596412][T21581] wg1 speed is unknown, defaulting to 1000 [ 551.599653][T21611] Node 1 Normal free:3890612kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17376kB local_pcp:11808kB free_cma:0kB [ 551.706992][T21625] net_ratelimit: 5 callbacks suppressed [ 551.707009][T21625] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 551.715059][T21611] lowmem_reserve[]: 0 0 0 0 0 [ 551.793824][T21628] can: request_module (can-proto-3) failed. [ 551.794017][T21611] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 551.830049][T21611] Node 0 DMA32: 2385*4kB (UME) 4312*8kB (UM) 1631*16kB (UM) 494*32kB (UME) 214*64kB (UM) 466*128kB (UME) 473*256kB (UME) 372*512kB (UME) 255*1024kB (UM) 55*2048kB (UE) 67*4096kB (UM) = 1119028kB [ 551.857664][T21611] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 551.883993][T21611] Node 1 Normal: 177*4kB (UE) 52*8kB (UME) 49*16kB (UME) 124*32kB (UME) 43*64kB (UME) 10*128kB (UME) 3*256kB (UM) 4*512kB (UME) 3*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3890612kB [ 551.898264][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 551.926815][T21611] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 551.946194][T21611] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 551.965865][T21611] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 552.012289][T21611] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 552.040683][T21611] 45065 total pagecache pages [ 552.045611][T21611] 0 pages in swap cache [ 552.051048][T21611] Free swap = 124996kB [ 552.055247][T21611] Total swap = 124996kB [ 552.060924][T21611] 2097051 pages RAM [ 552.064760][T21611] 0 pages HighMem/MovableOnly [ 552.069693][T21611] 426644 pages reserved [ 552.081398][T21611] 0 pages cma reserved [ 552.131579][T21646] xfrm0 speed is unknown, defaulting to 1000 [ 552.155495][T21641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.164502][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.393765][T21655] syzkaller0: entered promiscuous mode [ 552.416348][T21655] syzkaller0: entered allmulticast mode [ 552.443817][T21654] tipc: Enabled bearer , priority 0 [ 552.482362][T21654] tipc: Resetting bearer [ 552.530265][T21654] tipc: Disabling bearer [ 552.546336][T21658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3928'. [ 552.650414][T21667] dvmrp0: entered allmulticast mode [ 552.667056][T21646] ip6_vti0 speed is unknown, defaulting to 1000 [ 552.775457][T21673] netlink: 'syz.6.3932': attribute type 9 has an invalid length. [ 552.831629][T21673] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.3932'. [ 553.016528][T21680] xfrm0 speed is unknown, defaulting to 1000 [ 553.017083][T21646] wg1 speed is unknown, defaulting to 1000 [ 553.422979][T21680] ip6_vti0 speed is unknown, defaulting to 1000 [ 553.429765][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.557838][T21680] wg1 speed is unknown, defaulting to 1000 [ 553.569730][T21684] siw: device registration error -23 [ 554.051772][T21697] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3938'. [ 554.315162][T21709] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 554.385625][T21710] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 554.541642][T21716] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3944'. [ 554.756155][T21728] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3947'. [ 554.791613][T21728] openvswitch: netlink: Tunnel attr 6148 out of range max 16 [ 555.121081][T21746] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3952'. [ 555.386230][T21755] tunl0: Caught tx_queue_len zero misconfig [ 555.418843][T21753] xfrm0 speed is unknown, defaulting to 1000 [ 555.457191][T21755] vxcan1: entered promiscuous mode [ 555.472683][T21755] vxcan1: entered allmulticast mode [ 555.742960][T21764] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3957'. [ 555.827150][T21753] ip6_vti0 speed is unknown, defaulting to 1000 [ 556.091936][T21779] batman_adv: batadv0: Adding interface: ipvlan0 [ 556.108774][T21779] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.156770][T21786] netlink: 536 bytes leftover after parsing attributes in process `syz.4.3962'. [ 556.175714][T21779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.206855][T21779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.250527][T21779] batman_adv: batadv0: Not using interface ipvlan0 (retrying later): interface not active [ 556.547892][T21796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3964'. [ 556.821145][T21753] wg1 speed is unknown, defaulting to 1000 [ 556.858480][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5280 ms [ 556.866511][ C1] lec:lec_tx_timeout: lec0 [ 556.878718][T21801] Unsupported ieee802154 address type: 0 [ 556.912540][T21801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3966'. [ 557.303705][T21811] batadv_slave_0: entered promiscuous mode [ 557.360365][T21808] batadv_slave_0: left promiscuous mode [ 557.793973][T21845] xt_hashlimit: size too large, truncated to 1048576 [ 558.671294][T21872] __nla_validate_parse: 1 callbacks suppressed [ 558.671316][T21872] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3983'. [ 558.745312][T21872] ip6gretap1: entered promiscuous mode [ 558.751430][T21872] ip6gretap1: entered allmulticast mode [ 558.818879][T21878] openvswitch: netlink: ufid size 4235 bytes exceeds the range (1, 16) [ 558.846642][T21878] openvswitch: netlink: Message has 8 unknown bytes. [ 558.873578][T21875] ieee802154 phy0 wpan0: encryption failed: -126 [ 558.915716][T21875] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3983'. [ 559.137737][T21891] bridge_slave_1: left allmulticast mode [ 559.152498][T21891] bridge_slave_1: left promiscuous mode [ 559.162898][T21891] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.171174][T21888] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 559.562499][T21906] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3991'. [ 559.588793][T21902] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3991'. [ 559.619118][T21906] hsr_slave_1 (unregistering): left promiscuous mode [ 559.935998][T21923] FAULT_INJECTION: forcing a failure. [ 559.935998][T21923] name failslab, interval 1, probability 0, space 0, times 0 [ 559.986902][T21923] CPU: 0 UID: 0 PID: 21923 Comm: syz.2.3994 Not tainted syzkaller #0 PREEMPT(full) [ 559.986931][T21923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 559.986942][T21923] Call Trace: [ 559.986949][T21923] [ 559.986958][T21923] dump_stack_lvl+0xe8/0x150 [ 559.986988][T21923] should_fail_ex+0x412/0x560 [ 559.987015][T21923] should_failslab+0xa8/0x100 [ 559.987036][T21923] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 559.987110][T21923] ? __alloc_skb+0x186/0x7d0 [ 559.987133][T21923] ? __alloc_skb+0x1d0/0x7d0 [ 559.987149][T21923] ? __local_bh_enable_ip+0xd0/0x130 [ 559.987170][T21923] __alloc_skb+0x1d0/0x7d0 [ 559.987194][T21923] netlink_sendmsg+0x5d4/0xb40 [ 559.987225][T21923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 559.987248][T21923] ? aa_sock_msg_perm+0xf1/0x1b0 [ 559.987271][T21923] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 559.987292][T21923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 559.987307][T21923] ____sys_sendmsg+0xa68/0xad0 [ 559.987333][T21923] ? __might_fault+0xaf/0x130 [ 559.987362][T21923] ? __pfx_____sys_sendmsg+0x10/0x10 [ 559.987393][T21923] ? import_iovec+0x73/0xa0 [ 559.987421][T21923] ___sys_sendmsg+0x2a5/0x360 [ 559.987441][T21923] ? __lock_acquire+0x6b5/0x2cf0 [ 559.987469][T21923] ? __pfx____sys_sendmsg+0x10/0x10 [ 559.987523][T21923] ? __fget_files+0x2a/0x420 [ 559.987541][T21923] ? __fget_files+0x3a0/0x420 [ 559.987570][T21923] __x64_sys_sendmsg+0x1bd/0x2a0 [ 559.987593][T21923] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 559.987622][T21923] ? __pfx_ksys_write+0x10/0x10 [ 559.987656][T21923] do_syscall_64+0xe2/0xf80 [ 559.987679][T21923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.987695][T21923] ? trace_irq_disable+0x37/0x100 [ 559.987711][T21923] ? clear_bhb_loop+0x60/0xb0 [ 559.987732][T21923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.987750][T21923] RIP: 0033:0x7f588859aeb9 [ 559.987767][T21923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.987782][T21923] RSP: 002b:00007f588946d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 559.987802][T21923] RAX: ffffffffffffffda RBX: 00007f5888816180 RCX: 00007f588859aeb9 [ 559.987815][T21923] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000008 [ 559.987826][T21923] RBP: 00007f588946d090 R08: 0000000000000000 R09: 0000000000000000 [ 559.987837][T21923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.987847][T21923] R13: 00007f5888816218 R14: 00007f5888816180 R15: 00007ffc23b0b778 [ 559.987877][T21923] [ 559.988682][T21924] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3995'. [ 560.002559][T21916] 8021q: adding VLAN 0 to HW filter on device bond4 [ 560.010871][T21922] netlink: 'syz.4.3996': attribute type 1 has an invalid length. [ 560.378218][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 561.013137][T21947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4001'. [ 561.123594][T21954] tipc: Enabling of bearer rejected, failed to enable media [ 561.199279][T21957] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4005'. [ 561.870506][T21979] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4005'. [ 561.905001][T21982] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4012'. [ 561.947289][T21982] syzkaller0: entered promiscuous mode [ 561.958283][T21982] syzkaller0: entered allmulticast mode [ 561.965925][ T49] syzkaller0: tun_net_xmit 70 [ 561.974425][T21982] syzkaller0: tun_net_xmit 14 [ 562.187610][T21986] tipc: Enabled bearer , priority 0 [ 562.199969][T21989] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4015'. [ 562.290641][T21986] syzkaller0: entered promiscuous mode [ 562.319902][T21986] syzkaller0: entered allmulticast mode [ 562.326517][T21986] tipc: Resetting bearer [ 562.339102][T21994] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20004 [ 562.424023][T21984] tipc: Resetting bearer [ 562.945070][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.956499][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.965162][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 564.007328][T22028] __nla_validate_parse: 1 callbacks suppressed [ 564.007351][T22028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4019'. [ 565.310828][T21984] tipc: Disabling bearer [ 565.338735][ T5889] tipc: Node number set to 1271451932 [ 565.697449][T22042] xfrm0 speed is unknown, defaulting to 1000 [ 565.816622][T22051] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4024'. [ 565.987617][T22059] dvmrp6: entered allmulticast mode [ 566.064423][T22067] netlink: 65055 bytes leftover after parsing attributes in process `syz.6.4026'. [ 566.079882][T22067] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4026'. [ 566.286451][T22057] xfrm0 speed is unknown, defaulting to 1000 [ 566.294117][T22042] ip6_vti0 speed is unknown, defaulting to 1000 [ 566.935813][T22057] ip6_vti0 speed is unknown, defaulting to 1000 [ 566.935851][T22042] wg1 speed is unknown, defaulting to 1000 [ 567.416170][T22112] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4036'. [ 567.571370][T22118] netlink: 'syz.6.4038': attribute type 1 has an invalid length. [ 567.602686][T22115] bond0: (slave rose0): Enslaving as an active interface with an up link [ 567.628515][T22119] netlink: 'syz.6.4038': attribute type 1 has an invalid length. [ 567.803982][T22128] tipc: Enabling of bearer rejected, failed to enable media [ 567.971112][T22123] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address [ 567.981520][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 567.981553][ C1] lec:lec_tx_timeout: lec0 [ 568.002859][T22123] bond4: (slave vxcan5): Error -95 calling set_mac_address [ 568.106554][T22057] wg1 speed is unknown, defaulting to 1000 [ 568.123588][T22128] syzkaller0: entered promiscuous mode [ 568.129430][T22128] syzkaller0: entered allmulticast mode [ 568.701403][T22159] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4045'. [ 568.764541][T22159] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4045'. [ 569.510724][T22193] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4053'. [ 569.612900][T22195] tun0: tun_chr_ioctl cmd 1074025672 [ 569.631524][T22195] tun0: ignored: set checksum disabled [ 570.209050][T22223] syzkaller0: entered promiscuous mode [ 570.227112][T22223] syzkaller0: entered allmulticast mode [ 570.389829][T22234] xt_hashlimit: size too large, truncated to 1048576 [ 570.436479][T22234] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 570.924693][T22243] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4067'. [ 571.031106][T22254] netlink: 'syz.5.4070': attribute type 1 has an invalid length. [ 571.126492][T22260] workqueue: name exceeds WQ_NAME_LEN. Truncating to: π,xb)% ]3DL̥ [ 571.367150][T22267] tipc: Enabled bearer , priority 0 [ 571.400493][T22267] syzkaller0: entered promiscuous mode [ 571.436741][T22267] syzkaller0: entered allmulticast mode [ 571.471844][T22273] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 571.555694][T22267] tipc: Resetting bearer [ 571.587504][T22266] tipc: Resetting bearer [ 571.633738][T22266] tipc: Disabling bearer [ 572.088462][T22305] tipc: Enabled bearer , priority 0 [ 572.110218][T22305] syzkaller0: entered promiscuous mode [ 572.130265][T22305] syzkaller0: entered allmulticast mode [ 572.375921][T22312] xfrm0 speed is unknown, defaulting to 1000 [ 572.440037][T22329] openvswitch: netlink: Message has -2 unknown bytes. [ 572.447674][T22329] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 572.636270][T22321] tipc: Resetting bearer [ 572.651596][ T3522] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.664503][ T3522] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.688673][T22303] tipc: Resetting bearer [ 572.741324][T22303] tipc: Disabling bearer [ 572.763983][ T3522] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.777322][ T3522] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.798173][T22337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4089'. [ 572.886422][T22337] bond2: option broadcast_neighbor: invalid value (30) [ 572.904244][T22341] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4090'. [ 572.917561][T22337] bond2 (unregistering): Released all slaves [ 573.010789][T22312] ip6_vti0 speed is unknown, defaulting to 1000 [ 573.093649][T22341] netlink: 'syz.2.4090': attribute type 1 has an invalid length. [ 573.138595][T22341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4090'. [ 573.209079][T22341] nbd: must specify a size in bytes for the device [ 573.430809][T22367] netlink: 'syz.2.4098': attribute type 1 has an invalid length. [ 573.457631][T22367] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4098'. [ 573.655074][T22312] wg1 speed is unknown, defaulting to 1000 [ 573.884887][ T5826] block nbd1: Receive control failed (result -32) [ 574.160757][T22397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4103'. [ 575.164015][T22436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4114'. [ 575.181782][T22441] IPVS: length: 4096 != 8 [ 575.417140][T22454] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4119'. [ 575.465280][T22449] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 575.877254][T16929] IPVS: starting estimator thread 0... [ 575.890288][T22477] netlink: 'syz.5.4128': attribute type 1 has an invalid length. [ 576.010603][T22480] IPVS: using max 32 ests per chain, 76800 per kthread [ 576.650026][T22512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4135'. [ 577.108700][T22529] x_tables: duplicate entry at hook 2 [ 577.174123][T22535] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4145'. [ 577.193174][T22535] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4145'. [ 577.249276][T22535] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4145'. [ 577.316798][T22535] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4145'. [ 577.370122][T22542] batadv_slave_1: entered promiscuous mode [ 577.881237][T22563] xfrm0 speed is unknown, defaulting to 1000 [ 577.896546][T22528] batadv_slave_1: left promiscuous mode [ 578.305180][ T31] INFO: task syz.1.2856:17136 blocked for more than 143 seconds. [ 578.328710][ T31] Not tainted syzkaller #0 [ 578.333702][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 578.385372][ T31] task:syz.1.2856 state:D stack:27104 pid:17136 tgid:17135 ppid:5816 task_flags:0x400140 flags:0x00080002 [ 578.416239][ T31] Call Trace: [ 578.431903][ T31] [ 578.434899][ T31] __schedule+0x14ea/0x5050 [ 578.444570][ T31] ? __pfx___schedule+0x10/0x10 [ 578.461183][ T31] ? schedule+0x90/0x360 [ 578.472300][T22587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4156'. [ 578.482672][T22590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4158'. [ 578.493359][ T31] schedule+0x164/0x360 [ 578.497575][ T31] schedule_preempt_disabled+0x13/0x30 [ 578.518876][T22590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4158'. [ 578.548592][ T31] __mutex_lock+0x7fe/0x1300 [ 578.554423][ T31] ? __mutex_lock+0x5ac/0x1300 [ 578.578682][ T31] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 578.588595][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 578.618509][ T31] ? __nlmsg_put+0xef/0x1b0 [ 578.623082][ T31] ? genlmsg_put+0x137/0x2e0 [ 578.627799][ T31] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 578.786524][T22596] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 578.820048][T22566] netlink: 'syz.5.4149': attribute type 2 has an invalid length. [ 578.888543][ T31] ? dev_hard_start_xmit+0x78b/0x7f0 [ 578.908513][ T31] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 578.914920][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 578.928059][ T31] ? __asan_memcpy+0x40/0x70 [ 578.932717][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 578.948909][ T31] ? __dev_queue_xmit+0x274/0x3850 [ 578.954176][ T31] genl_rcv_msg+0x61c/0x7a0 [ 578.968879][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 578.973960][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 578.998561][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 579.004010][ T31] netlink_rcv_skb+0x232/0x4b0 [ 579.009698][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 579.014785][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 579.038535][ T31] ? genl_rcv+0x19/0x40 [ 579.042779][ T31] ? down_read+0x272/0x2e0 [ 579.047212][ T31] ? genl_rcv+0xd/0x40 [ 579.056604][ T31] genl_rcv+0x28/0x40 [ 579.068640][ T31] netlink_unicast+0x80f/0x9b0 [ 579.073476][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 579.088543][ T31] ? netlink_sendmsg+0x650/0xb40 [ 579.093556][ T31] ? skb_put+0x11b/0x210 [ 579.097827][ T31] netlink_sendmsg+0x813/0xb40 [ 579.109793][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 579.130128][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 579.135171][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 579.149052][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 579.154422][ T31] ____sys_sendmsg+0xa68/0xad0 [ 579.168581][ T31] ? __might_fault+0xaf/0x130 [ 579.173330][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 579.188121][ T31] ? import_iovec+0x73/0xa0 [ 579.192697][ T31] ___sys_sendmsg+0x2a5/0x360 [ 579.197400][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 579.219048][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 579.224319][ T31] ? futex_wait+0x29a/0x380 [ 579.238556][ T31] ? __fget_files+0x2a/0x420 [ 579.243207][ T31] ? __fget_files+0x3a0/0x420 [ 579.247919][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 579.264018][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 579.272145][ T31] do_syscall_64+0xe2/0xf80 [ 579.276696][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.298608][ T31] ? trace_irq_disable+0x37/0x100 [ 579.303696][ T31] ? clear_bhb_loop+0x60/0xb0 [ 579.318877][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.325714][T22574] xfrm0 speed is unknown, defaulting to 1000 [ 579.325762][T22563] ip6_vti0 speed is unknown, defaulting to 1000 [ 579.332318][ T31] RIP: 0033:0x7f07a699aeb9 [ 579.332342][ T31] RSP: 002b:00007f07a791d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 579.332365][ T31] RAX: ffffffffffffffda RBX: 00007f07a6c15fa0 RCX: 00007f07a699aeb9 [ 579.332379][ T31] RDX: 0000000004000000 RSI: 0000200000000940 RDI: 0000000000000005 [ 579.332393][ T31] RBP: 00007f07a6a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 579.332405][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 579.332417][ T31] R13: 00007f07a6c16038 R14: 00007f07a6c15fa0 R15: 00007ffe6b339a08 [ 579.332450][ T31] [ 579.332535][ T31] [ 579.332535][ T31] Showing all locks held in the system: [ 579.503708][ T31] 1 lock held by khungtaskd/31: [ 579.528518][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 579.550752][ T31] 2 locks held by getty/5579: [ 579.555484][ T31] #0: ffff88803515c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 579.604465][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 579.638553][ T31] 2 locks held by kworker/u8:12/9042: [ 579.643985][ T31] 2 locks held by syz.0.2736/16689: [ 579.658599][ T31] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 579.666860][ T31] #1: ffffffff8e879428 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 579.718052][ T31] 2 locks held by kworker/0:0/16929: [ 579.723395][ T31] #0: ffff88813fe55948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 579.768491][ T31] #1: ffffc9001a6f7bc0 (xfrm_state_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 579.792329][ T31] 2 locks held by syz.1.2856/17136: [ 579.798901][ T31] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 579.828004][ T31] #1: ffffffff8e879428 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 579.850513][ T31] 5 locks held by syz.5.4149/22563: [ 579.855917][ T31] 4 locks held by syz.5.4149/22566: [ 579.862627][ T31] #0: ffffffff8f99d690 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 579.874315][T22566] xfrm0 speed is unknown, defaulting to 1000 [ 579.881490][ T31] #1: ffffffff8f7058d0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x200/0x2f0 [ 579.892324][ T31] #2: ffffffff8f705a90 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x238/0x2f0 [ 579.913156][ T31] #3: ffff888047f20f98 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x650 [ 579.927469][T22574] ip6_vti0 speed is unknown, defaulting to 1000 [ 579.931326][ T31] 10 locks held by syz.6.4152/22574: [ 579.939375][T22563] wg1 speed is unknown, defaulting to 1000 [ 579.942562][ T31] 2 locks held by syz.4.4156/22584: [ 579.955016][ T31] #0: ffff88804e806f48 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 579.980756][ T31] #1: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 580.002879][ T31] 1 lock held by syz.4.4156/22587: [ 580.011705][ T31] [ 580.014174][ T31] ============================================= [ 580.014174][ T31] [ 580.024010][ T31] NMI backtrace for cpu 1 [ 580.024026][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 580.024050][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 580.024060][ T31] Call Trace: [ 580.024067][ T31] [ 580.024075][ T31] dump_stack_lvl+0xe8/0x150 [ 580.024103][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 580.024123][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 580.024149][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 580.024171][ T31] sys_info+0x135/0x170 [ 580.024186][ T31] watchdog+0xf90/0xfe0 [ 580.024209][ T31] ? watchdog+0x209/0xfe0 [ 580.024234][ T31] kthread+0x726/0x8b0 [ 580.024257][ T31] ? __pfx_watchdog+0x10/0x10 [ 580.024274][ T31] ? __pfx_kthread+0x10/0x10 [ 580.024295][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 580.024315][ T31] ? __pfx_kthread+0x10/0x10 [ 580.024334][ T31] ret_from_fork+0x51b/0xa40 [ 580.024354][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 580.024375][ T31] ? __switch_to+0xc82/0x1410 [ 580.024401][ T31] ? __pfx_kthread+0x10/0x10 [ 580.024420][ T31] ret_from_fork_asm+0x1a/0x30 [ 580.024455][ T31] [ 580.024462][ T31] Sending NMI from CPU 1 to CPUs 0: [ 580.145502][ C0] NMI backtrace for cpu 0 [ 580.145519][ C0] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 580.145535][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 580.145547][ C0] Workqueue: krds_cp_wq#5/0 rds_connect_worker [ 580.145571][ C0] RIP: 0010:check_preemption_disabled+0x1/0xe0 [ 580.145593][ C0] Code: a0 39 07 8c 48 c7 c6 e0 39 07 8c eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <41> 57 41 56 53 65 8b 05 c7 36 5b 07 65 8b 0d bc 36 5b 07 f7 c1 ff [ 580.145607][ C0] RSP: 0018:ffffc90000ac7438 EFLAGS: 00000046 [ 580.145619][ C0] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000000000000046 [ 580.145629][ C0] RDX: 0000000000000000 RSI: ffffffff8df3cfc3 RDI: ffffffff8c073a00 [ 580.145639][ C0] RBP: 00000000ffffffff R08: ffffc90000ac766f R09: 0000000000000000 [ 580.145650][ C0] R10: ffffc90000ac7640 R11: fffff52000158ece R12: 0000000000000246 [ 580.145660][ C0] R13: ffff8881416b1e80 R14: ffffffff8f9abf08 R15: 0000000000000004 [ 580.145670][ C0] FS: 0000000000000000(0000) GS:ffff8881256ea000(0000) knlGS:0000000000000000 [ 580.145682][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 580.145692][ C0] CR2: 00007f134fe21e9c CR3: 000000007a5b2000 CR4: 00000000003526f0 [ 580.145706][ C0] Call Trace: [ 580.145713][ C0] [ 580.145720][ C0] lock_is_held_type+0xdf/0x150 [ 580.145739][ C0] lockdep_rtnl_is_held+0x1b/0x40 [ 580.145758][ C0] fib_table_lookup+0xda/0x16e0 [ 580.145778][ C0] ? __inet_dev_addr_type+0x154/0x500 [ 580.145812][ C0] __inet_dev_addr_type+0x2d1/0x500 [ 580.145829][ C0] ? __inet_dev_addr_type+0x154/0x500 [ 580.145846][ C0] ? __pfx___inet_dev_addr_type+0x10/0x10 [ 580.145868][ C0] ? __inet_bind+0x131/0xa90 [ 580.145886][ C0] ? __inet_bind+0x1e4/0xa90 [ 580.145902][ C0] ? kasan_check_range+0x93/0x2c0 [ 580.145918][ C0] ? l3mdev_fib_table_by_index+0x7f/0x2d0 [ 580.145938][ C0] __inet_bind+0x135/0xa90 [ 580.145958][ C0] kernel_bind+0x13e/0x1c0 [ 580.145972][ C0] ? __pfx_kernel_bind+0x10/0x10 [ 580.145999][ C0] rds_tcp_conn_path_connect+0x53e/0x930 [ 580.146019][ C0] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 580.146032][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 580.146050][ C0] ? process_scheduled_works+0xa0f/0x17a0 [ 580.146069][ C0] ? process_scheduled_works+0xa0f/0x17a0 [ 580.146090][ C0] rds_connect_worker+0x1d8/0x290 [ 580.146105][ C0] ? process_scheduled_works+0xa0f/0x17a0 [ 580.146124][ C0] process_scheduled_works+0xaec/0x17a0 [ 580.146153][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 580.146170][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 580.146186][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 580.146200][ C0] ? schedule+0x90/0x360 [ 580.146220][ C0] worker_thread+0xda6/0x1360 [ 580.146244][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 580.146260][ C0] kthread+0x726/0x8b0 [ 580.146276][ C0] ? __pfx_worker_thread+0x10/0x10 [ 580.146293][ C0] ? __pfx_kthread+0x10/0x10 [ 580.146309][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 580.146325][ C0] ? __pfx_kthread+0x10/0x10 [ 580.146340][ C0] ret_from_fork+0x51b/0xa40 [ 580.146354][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 580.146387][ C0] ? __switch_to+0xc82/0x1410 [ 580.146407][ C0] ? __pfx_kthread+0x10/0x10 [ 580.146421][ C0] ret_from_fork_asm+0x1a/0x30 [ 580.146445][ C0] [ 580.528252][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 580.535153][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 580.544276][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 580.554350][ T31] Call Trace: [ 580.557650][ T31] [ 580.560587][ T31] vpanic+0x1e0/0x670 [ 580.564630][ T31] panic+0xc5/0xd0 [ 580.568355][ T31] ? __pfx_panic+0x10/0x10 [ 580.572784][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 580.578175][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 580.584342][ T31] watchdog+0xfda/0xfe0 [ 580.588502][ T31] ? watchdog+0x209/0xfe0 [ 580.592839][ T31] kthread+0x726/0x8b0 [ 580.596905][ T31] ? __pfx_watchdog+0x10/0x10 [ 580.601570][ T31] ? __pfx_kthread+0x10/0x10 [ 580.606158][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 580.611349][ T31] ? __pfx_kthread+0x10/0x10 [ 580.615937][ T31] ret_from_fork+0x51b/0xa40 [ 580.620516][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 580.625622][ T31] ? __switch_to+0xc82/0x1410 [ 580.630302][ T31] ? __pfx_kthread+0x10/0x10 [ 580.634899][ T31] ret_from_fork_asm+0x1a/0x30 [ 580.639672][ T31] [ 580.643064][ T31] Kernel Offset: disabled [ 580.647372][ T31] Rebooting in 86400 seconds..