last executing test programs: 1m45.913074747s ago: executing program 2 (id=5027): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000003e00070127bd700000000000017c00000400fc800c000180e6ffeeff", @ANYRES32=r1, @ANYBLOB="080002"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 1m44.741944561s ago: executing program 2 (id=5044): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x0, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000340)="87", 0x1}, {&(0x7f0000000240)="94", 0x1}], 0x2}, 0xd0a0) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000280)="3986c2d48cf8c83702fb70f5a5a23d944bacc4a2db953e112d8eb30c9201b8152738018f166c52b74cf381b67e42b52177e60cbb6161cd623a34e4af8c089e872072820fffc518e02191ca97f0430f39d4136e3131afea10b8ea1c08160b29a97555e91176ae7370f726717842cf76a06a4092a0b6987feb0aeb79dd84035c6eb2e2", 0x82}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000300)='0', 0x1}, {&(0x7f0000000540)="e7d555246967f61fad104cd7d63bd4d8029aaf72ac9fc5634ef0b1366ade7931803d05b4280714cf53024c859dd0a16cd8df1fb6d4376e876c4b72a5d11c328071c1c5fe0f9dcb35c2e8ccdcb0af71bd2f645f6fbe86ce8226823aa6734d9506786914b0ead476001dbc31edb7b964aabe57a63e2d98d3a3d16b48cb78a7710edb052a75", 0x84}, {&(0x7f00000006c0)="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", 0xfd}], 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="5eaa00000000000071101000000000009500000000000000c962d465c50ed9fff811ba43d94c9c1c3a396c"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09103b28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) unshare(0x2040400) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0xafc7, @loopback, 0x56865e96}], 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt(r5, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) recvmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x4001, 0x3, 0x3e0, 0x0, 0x0, 0x148, 0x1f8, 0x148, 0x348, 0x240, 0x240, 0x348, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x190, 0x1f8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x2, 0x6, 0x1ff80, 'snmp_trap\x00', 'syz0\x00', {0x4}}}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'tunl0\x00', 'pimreg1\x00', {}, {}, 0x84, 0x0, 0x60}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x6, [0x4e23, 0x4e22, 0x4e23, 0x4e23, 0x4e22, 0x4e31, 0x4e20, 0x4e24, 0x4e23, 0x4e21, 0x4e20, 0x4e22, 0x4e20, 0x4622, 0x4e23], [0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, @common=@inet=@udp={{0x30}, {[0x4e20, 0x4e21], [0x4e24, 0x4e22], 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x1, 0x3, 0x1, 0x5, 0x1], 0x3}, {0x1, [0x1, 0x2, 0x7, 0x1, 0x0, 0x4]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) 1m44.22278288s ago: executing program 3 (id=5052): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018200000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x5, 0xdf, &(0x7f0000000000)=""/223, 0x0, 0x43}, 0x94) 1m44.150494974s ago: executing program 1 (id=5053): r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@ax25={{0x3, @netrom}, [@bcast, @null, @netrom, @default, @remote, @netrom, @bcast, @null]}, &(0x7f0000000080)=0x80, 0x800) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f00000000c0)={0x6, 'ip_vti0\x00', {0x40}}) r1 = accept$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000002500010033bd7004fedbdf250900000c20000e"], 0x34}, 0x1, 0x0, 0x0, 0x4800d}, 0x20000000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x6, 0xff, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r4}, 0x38) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3) socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) ioctl$SIOCAX25GETUID(r5, 0x89e0, &(0x7f0000000100)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r6}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000f80)={{}, 0x0, 0x4, @unused=[0xa, 0x7f, 0x401, 0x4], @devid=r7}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000700)={{r0}, r3, 0x2, @inherit={0x88, &(0x7f0000000300)={0x0, 0x8, 0x4, 0x6, {0x22, 0x8000, 0x8000000000000001, 0x249d, 0x6ce}, [0x3, 0x6, 0x3, 0x1ff, 0x3, 0x4b2, 0xfffffffffffffffd, 0x47b]}}, @devid=r7}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r9, &(0x7f00000004c0)=[{&(0x7f0000000200)="db", 0x1}], 0x1, 0x8040000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x12, r8, 0x100000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 1m44.149683946s ago: executing program 3 (id=5054): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[], 0x1f0}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, r3, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r4, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) mkdirat$cgroup(r4, &(0x7f0000000200)='syz1\x00', 0x1ff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x60, r3, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) 1m43.984808106s ago: executing program 3 (id=5055): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000003e0007010300000000000000017c0000040042800c00018006030000843b0000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1m43.907981576s ago: executing program 3 (id=5056): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008000000000000", @ANYRES32=0x0, @ANYRES32], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) r3 = socket$caif_seqpacket(0x25, 0x5, 0x5) poll(&(0x7f0000000440)=[{r2, 0x80c0}, {r0, 0x1000}, {r0, 0x2c}, {r3, 0xc4a8}, {r0, 0x2000}, {r0, 0xc0}, {r0, 0x2000}, {r0, 0x4001}, {r0, 0x401}, {r0, 0x4630}], 0xa, 0x5259) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a1905234f1", 0x35}, {&(0x7f0000000100)="0e046558", 0x4}, {&(0x7f00000002c0)="8d", 0x1}], 0x3) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r5, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@newsa={0x18c, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in=@local}, {@in=@loopback, 0x0, 0x32}, @in, {}, {}, {0x0, 0x1}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ctr-camellia-aesni\x00'}}}, @replay_esn_val={0x38, 0x17, {0x5a, 0x70bd2b, 0x70bd28, 0x70bd27, 0x70bd29, 0x8001, [0x5, 0x2, 0x80000000, 0x467, 0x4, 0x3, 0x3]}}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in6=@private0}}]}, 0x18c}}, 0x80) sendto$inet6(r5, &(0x7f0000000180)='\x00', 0x1, 0x294c7d32f9c90c35, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000300)="a4", 0x1, 0x8000, 0x0, 0x0) shutdown(r5, 0x1) socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0xb4, 0x2}]}, 0x10) r7 = socket(0x10, 0xa, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f00000001c0)={0x7, {{0x2, 0x4e21, @remote}}}, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000008c0)={'tunl0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x40, 0x7800, 0xc13, 0x4, {{0x5, 0x4, 0x3, 0x2d, 0x14, 0x68, 0x0, 0x8, 0x29, 0x0, @multicast1, @local}}}}) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004513001c0066e5fffb019078ac1414bbe000007813c84a7800080004fe2e5b58df7e050e196987ee57c28ef6dd668eeba51e6aa7b99937a35dcdbe69bb38af2bd3a752b2d73a4c33f57ca1f688a70cf7ebfe219cf34febeadc23305802102e1e3ec809a2914d1be60e4c25b4705e7f5f9192916fe4721af5015700040000cafd706c387e6b50bccf37693c0a36a941e881e8"], 0x0) 1m43.906312302s ago: executing program 1 (id=5057): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendto$inet6(r1, &(0x7f0000000240)="112efc61dfb89b674a9c6721decbc85f5b00"/28, 0xffffffffffffff55, 0x8010, 0x0, 0x0) 1m43.776399385s ago: executing program 1 (id=5059): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x5c, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xd}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x1bb18000) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0x30000, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000002000000000000000f00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf9100009b16f3c753c21e1e020000008500000085000000b7000000000000009500000000000000822883172591cced1c0df72029"], &(0x7f0000000080)='GPL\x00', 0x6, 0x78, &(0x7f00000000c0)=""/120, 0x41100, 0xd}, 0x90) (async) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r3, 0x1cf9f7a945d9327d, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x4b}, @void, @val={0xc, 0x99, {0xf7a4, 0x36}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xcc4d}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xb8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x10}]}, 0x50}, 0x1, 0x0, 0x0, 0x4c046}, 0x50) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r2) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x1, 0x80000000, 0x2, {{0xd, 0x4, 0x2, 0x1e, 0x34, 0x64, 0x0, 0x1, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x1f, 0xd6, [@multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x22}]}]}}}}}) (async) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001d00070f000200000000000007000000", @ANYRES32=r8, @ANYRES64], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 64) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x50) (rerun: 64) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x1c, r9}, 0x18) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r9, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="03000000040000000400"/20, @ANYRES32=r10, @ANYBLOB="1e719e7c00"/20, @ANYRES32=r11, @ANYRES32, @ANYBLOB="0400000002000000040000000000"], 0x50) (async) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000700)={r6, 0x1, 0x6, @random="889e7056b297"}, 0x10) r12 = socket$nl_route(0x10, 0x3, 0x0) (async) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r14}]}, 0x5c}}, 0x0) (async) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x17c, r5, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x4}, @HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x810}, 0x4810) (async) socket(0x11, 0x5, 0x5) 1m43.776002788s ago: executing program 2 (id=5060): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) recvfrom(r7, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) r9 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) syz_emit_ethernet(0x5a, &(0x7f00000010c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0x0, @remote, @local, {[@hopopts={0xf0, 0x0, '\x00', [@generic={0x7, 0x3, "801a8f"}]}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x3}}}}}}}, 0x0) pwritev(r9, &(0x7f0000000500)=[{&(0x7f00000000c0)="62c5d184c46fc76e6eeff03e748a477fb340cda12ef34257545a9a935e5c08fe375fc1e60b8a631120ef2ecbed5524c61638b4e1773200b7651e24a0201968a654", 0x41}, {&(0x7f0000000140)="38f70fa90226624b7933f5f1bbba99cb97f77e4fb1aaf2745b034da001f6925c6eb9c9354b72b9fa37e4d1838d27e5bdc7639392bf4497e7b417d29eb71951f599124487e2cd3ff6a5b585276c02efe95fee70cc83b6ef207fa85d073ed204234da34681f3c7066cfefac25136508c1d68fbbbda230022e410ce6ce0b68b3857f5e65d49f08dc73852", 0x89}, {}, {&(0x7f0000002e80)="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", 0x1000}, {&(0x7f0000000240)="829941fe0f152fd9267d5e117480c780500fc73ccc3ffe8480b77ea1bf011bbec8d5c92a9a98e069d66594c827727e0d01c36ece53f93fde87386e541f5e433e1aee7963c372fe0f752ae500eed70b0d7197312e64c08ec038c9320b9881cffaa2eb22b52e773acb44b9ee453ce2ed36ccad97113d69cea6760057c305a8ba9fe524f97a44eae16081c070e968d5985a1ed614c8322c86c3da0a1e59a060000f8148119cf19fb4040bb43b1a4d104eadb9aa3eb72bd12ad32b946dca8de0a4e9253a29f36a", 0xc5}, {&(0x7f0000000340)="7930f742f4a38ce541144fdee187d0691999c8e085cefd6785bb003c37048a4c4904ee", 0x23}, {&(0x7f0000000380)="042576e99d48ae74712e2c43238adb9e3e25833c38b5f78b9462559182c2fa713414fc277753db22801012e90f7b53252e56d1c1708982fbc4907d559147ac678a285464f9829d2df00ec3a5a99c8dc102457803b818571fef4a45274f6b4ffcc916d0752613886d920149713d4aafc12beda78f6099fa455d317b", 0x7b}], 0x7, 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x7, 0x8000, 0x0, 0x4, {{0x2e, 0x4, 0x2, 0x7, 0xb8, 0x66, 0x0, 0x5, 0x4, 0x0, @local, @local, {[@timestamp_addr={0x44, 0x1c, 0x2e, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0xf}, 0x7fff}, {@multicast2}, {@multicast2, 0x1}]}, @end, @rr={0x7, 0x1f, 0xcf, [@private=0xa010102, @loopback, @remote, @multicast2, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x25}]}, @timestamp={0x44, 0x14, 0x7d, 0x0, 0x7, [0x4, 0x100000, 0x7fff, 0x6]}, @generic={0x86, 0x2}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x7, [{@multicast2, 0x5}, {@loopback, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@empty, 0xd8b}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x28, 0x52, 0x0, 0x0, [0xffff, 0x2, 0xda, 0x89e4, 0x3, 0xf, 0x8, 0x1, 0x81]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="1803000040000000000000009c0000df18110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b5020000020100008500000083000000bc0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x1003, &(0x7f0000001e40)=""/4099, 0x41100, 0x9, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x9) 1m43.58670951s ago: executing program 2 (id=5062): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000080)) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffe0, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x7, 0x7, 0x0, 0x1, 0x6, 0x2}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 1m43.540652379s ago: executing program 1 (id=5063): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001980)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@volatile={0x8000000d, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0x30, 0x5f, 0x0, 0x5f, 0x60]}}, 0x0, 0x2b, 0x0, 0x1, 0x1}, 0x28) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xe2, 0x46}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1361}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008011}, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1m43.461452192s ago: executing program 1 (id=5066): syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x9, 0x9}]}}}}}}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 1m43.404066935s ago: executing program 3 (id=5067): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000210001000000000000000000020000000000000000000000050019"], 0x24}}, 0x48850) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x30, 0x5, 0x53, 0xfffff034}, {0x6, 0x4a, 0x6, 0x6}]}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@remote, 0x74}) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x2, &(0x7f0000000040)=""/167, &(0x7f0000000100)=0xa7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r2, 0x7ca8e000) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x8, 0x42, 0x40, 0xc0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000100)='GPL\x00', 0x200, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'tunl0\x00', &(0x7f0000000400)={'gre0\x00', 0x0, 0x10, 0x8000, 0x80, 0x6, {{0x15, 0x4, 0x1, 0x25, 0x54, 0x67, 0x0, 0x9, 0x4, 0x0, @broadcast, @local, {[@cipso={0x86, 0x3e, 0x1, [{0x1, 0x9, "204e210ccea716"}, {0x2, 0x6, "c903bdfb"}, {0x7, 0x4, "08b7"}, {0x6, 0xc, "e87e914a6f3e9a534025"}, {0x0, 0x12, "1a9c0c184b5c90e7bccf70d7bec29ce2"}, {0x2, 0x7, "4ceb7cfd39"}]}]}}}}}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x29, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb8bc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x6, 0x1, 0x0, r6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000500)='syzkaller\x00', 0x6, 0xc, &(0x7f00000003c0)=""/12, 0x41000, 0x1, '\x00', r7, 0x0, r4, 0x8, &(0x7f00000004c0)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000580)=[r8, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x4, 0x5, 0xc, 0x4}, {0x2, 0x4, 0x10, 0x7}, {0x2000005, 0x2, 0x1, 0x5}, {0x4, 0x4, 0x7, 0x2}], 0x10, 0x1}, 0x94) 1m43.270479253s ago: executing program 2 (id=5068): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='contention_begin\x00', r0, 0x0, 0x9}, 0x18) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000010) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket(0x10, 0x3, 0x0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=@newqdisc={0x24, 0x24, 0xf0b, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0x9) splice(r7, 0x0, r6, 0x0, 0x4, 0x5) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001c000000180001fc050000006e657464657673696d30000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x4) 1m43.208456514s ago: executing program 3 (id=5069): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendto$inet6(r1, &(0x7f0000000240)="112efc61dfb89b674a9c6721decbc85f5b00"/28, 0xffffffffffffff55, 0x8010, 0x0, 0x0) 1m43.180364214s ago: executing program 1 (id=5070): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000000000000005133dc63d2232e7a2e579c0b48c9b5726fdd2c1bc4edf0276a98760414abb27d531a91a90a8d833613a3227d42a80ef7378d3d862ba198c38f102936e4f4e28474250d226ce2342a210d5078514eece3a097a9d226e6043d39cde99e82e91e7a3e993d6d63813ff6a9c6d846c107ca", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000fff500000000000000000000000000001300000000000000000086216ee604f2a544fcfc07f1a30d8315bb606fab8abdefdc1134c62e6d474f43fdf5b341ff7c9d78df3bba7e5c2acc8e8e76176b8a7e4c8a0aef7c23a5d2bad538696344b2a14c03d4ccf969fcbb00b63149521c568ebb511996b3724e33e81aaaf77723c502ca98e2fa7eefb229f0e3aed750bfcb25b9c11531f26f0010f036a8ee691323eecb5c9c294f286322ba5f02f4d329332b0326bd2d9dd1b057220ced985a20ba93c7bfe28408f280"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000220000001801000020207025000000"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r2, &(0x7f0000000300)=[{{&(0x7f0000000980)={0xa, 0x4e21, 0x7fffffff, @mcast2, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="280000000000000029000000390000008402020100000400200000008000000000000000e7ffe1d30ad1be6d"], 0x28}}], 0x1, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r4) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r3}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x0, 0x29, 0x0, &(0x7f0000000380)="cc9f4d42d0e005000000bb03d0b5afd0", 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000540)="10031400e0ff0000000000000004a13bb100001100007fca1a008f28b10d22945d9b867a01a0b2e42364507ee2c5a87d3920a140833f3b05f3c7", 0x3a, 0x0, &(0x7f0000000140)={0x11, 0x0, r10}, 0x14) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000000000005fbaf4acbed6b0df1c1adbffee7ccf24f5777ab8e7e45e88f8e60e0b00"/52], &(0x7f0000000500)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000ec0), r13) sendmsg$NFC_CMD_DEP_LINK_UP(r13, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, r14, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0xb2ad9fb1bfbfce0b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4041}, 0x4000010) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000440)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000480)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r12, &(0x7f00000007c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x3020400}, 0xc, &(0x7f0000000780)={&(0x7f00000009c0)={0x32c, r14, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_SDP={0xd8, 0x13, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [{0x11, 0x1, 'NLBL_CALIPSO\x00'}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '\x00'}, {0x7, 0x1, ',.D'}, {0xe, 0x1, 'syzkaller\x00'}, {0x5, 0x1, '\x00'}, {0x7, 0x1, '&,}'}, {0x17, 0x1, 'sched_process_wait\x00'}]}, {0x1c, 0x0, 0x0, 0x1, [{0x11, 0x1, 'NLBL_CALIPSO\x00'}, {0x4}]}, {0x40, 0x0, 0x0, 0x1, [{0x11, 0x1, 'NLBL_CALIPSO\x00'}, {0x17, 0x1, 'sched_process_wait\x00'}, {0xd, 0x1, '\'!.&(.!+('}]}, {0x10, 0x0, 0x0, 0x1, [{0xa, 0x1, '%+@+-!'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_LLC_SDP={0x5c, 0x13, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [{0x8, 0x1, 'GPL\x00'}, {0x11, 0x1, 'NLBL_CALIPSO\x00'}, {0x4}]}, {0x34, 0x0, 0x0, 0x1, [{0x9, 0x1, '}\x9e-/!'}, {0x11, 0x1, 'NLBL_CALIPSO\x00'}, {0xe, 0x1, 'syzkaller\x00'}]}]}, @NFC_ATTR_LLC_SDP={0x1cc, 0x13, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [{0xa, 0x1, '{^&,:['}, {0x6, 0x1, '.^'}, {0xe, 0x1, '^*^][:{+#-'}]}, {0x30, 0x0, 0x0, 0x1, [{0x8, 0x1, 'GPL\x00'}, {0x4}, {0x5, 0x1, '\x9d'}, {0xd, 0x1, '(&*$*)^\'\''}, {0x7, 0x1, ':-w'}]}, {0x68, 0x0, 0x0, 0x1, [{0x7, 0x1, '{#-'}, {0x10, 0x1, '{.!p-\x17**\xec$\x9b@'}, {0x8, 0x1, 'GPL\x00'}, {0x11, 0x1, 'NLBL_CALIPSO\x00'}, {0x5, 0x1, '\x00'}, {0x6, 0x1, '\\+'}, {0x8, 0x1, 'GPL\x00'}, {0x17, 0x1, 'sched_process_wait\x00'}]}, {0x54, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0xa, 0x1, '-@\\/-]'}, {0xe, 0x1, 'syzkaller\x00'}, {0xe, 0x1, 'syzkaller\x00'}, {0xe, 0x1, 'syzkaller\x00'}, {0x5, 0x1, '-'}, {0x4}]}, {0xb4, 0x0, 0x0, 0x1, [{0xab, 0x1, '\xf7\xb5lP_T\xe4\x80\xf25\xd2\xa1a\x8bO\x1a`\x05\xc0\x05\x9f\xaf\x84\xef\xb9\xde\x9e\x8c\xf3@&,\xaf\xca\xfb\t_\xc7D\bTt\x9d\xe8-\x03S\x1cx\x12\xd7Y\x1dc0\xa3\x9a\xed\xe5l\x1a\xb4v\xcau\xad#\x11b\"\x0e\x9d\xa2\x17\x96\xa6\x06\xc0f2\x9a\\#\x1b\xe3\xdf@\x87>^\xbf\x88\xb4$[gH\x9d\xfa\x82P\xd0k\xcc\x93e\x04A\x1f\x9f\x99\xef\xc5\x02\x86\xc5\xbfE\xcfd\xf1k\b[\xecS\x16\xbb\xd9hVX\xf38\xf1\xcd\xd45\xd2\x1d\x8f\xa1\x8c\xf8\xcd\xcf\b\xb8*\xae\xa2|`\xd8\xa1\x95\xf3\x87\xb2\x97\x11/~\xb5\xbb\a\x02'}, {0x4}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}]}, 0x32c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB="110801060000000000000000918c9210c59aa2a52dd6c254f36dda0000000001000000d65d1a1eeeeda0f1", @ANYRES32=r6, @ANYBLOB, @ANYRES64=0x0], 0x20) setsockopt$inet6_tcp_buf(r6, 0x6, 0xe, &(0x7f0000000000)="019cdcc63ef22ece89e95e96e09817bc124fcd6a8e00219693e72e9f3db8aa0fb652801591329664be04a01d990b5278ba8bd8faeeda1ff497b12282258ff91b31447bf62d1e25382481c54e69bc5489acb15a63478e54d8299e51da72edda3d32bf9491f0f27ad4f2d929f198e6592e815ca77c68ebb9263a03074244d6489a7de260066a6c83ecdd4ef3b74d3606d1b2c88568b25e681268862d8ed6536fb6c067", 0xa2) 1m42.774825906s ago: executing program 32 (id=5069): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendto$inet6(r1, &(0x7f0000000240)="112efc61dfb89b674a9c6721decbc85f5b00"/28, 0xffffffffffffff55, 0x8010, 0x0, 0x0) 1m42.728396286s ago: executing program 33 (id=5070): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000000000000005133dc63d2232e7a2e579c0b48c9b5726fdd2c1bc4edf0276a98760414abb27d531a91a90a8d833613a3227d42a80ef7378d3d862ba198c38f102936e4f4e28474250d226ce2342a210d5078514eece3a097a9d226e6043d39cde99e82e91e7a3e993d6d63813ff6a9c6d846c107ca", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000fff500000000000000000000000000001300000000000000000086216ee604f2a544fcfc07f1a30d8315bb606fab8abdefdc1134c62e6d474f43fdf5b341ff7c9d78df3bba7e5c2acc8e8e76176b8a7e4c8a0aef7c23a5d2bad538696344b2a14c03d4ccf969fcbb00b63149521c568ebb511996b3724e33e81aaaf77723c502ca98e2fa7eefb229f0e3aed750bfcb25b9c11531f26f0010f036a8ee691323eecb5c9c294f286322ba5f02f4d329332b0326bd2d9dd1b057220ced985a20ba93c7bfe28408f280"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000220000001801000020207025000000"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r2, &(0x7f0000000300)=[{{&(0x7f0000000980)={0xa, 0x4e21, 0x7fffffff, @mcast2, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="280000000000000029000000390000008402020100000400200000008000000000000000e7ffe1d30ad1be6d"], 0x28}}], 0x1, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r4) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r3}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x0, 0x29, 0x0, &(0x7f0000000380)="cc9f4d42d0e005000000bb03d0b5afd0", 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000540)="10031400e0ff0000000000000004a13bb100001100007fca1a008f28b10d22945d9b867a01a0b2e42364507ee2c5a87d3920a140833f3b05f3c7", 0x3a, 0x0, &(0x7f0000000140)={0x11, 0x0, r10}, 0x14) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000000000005fbaf4acbed6b0df1c1adbffee7ccf24f5777ab8e7e45e88f8e60e0b00"/52], &(0x7f0000000500)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000ec0), r13) sendmsg$NFC_CMD_DEP_LINK_UP(r13, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, r14, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0xb2ad9fb1bfbfce0b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4041}, 0x4000010) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000440)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000480)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r12, &(0x7f00000007c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x3020400}, 0xc, &(0x7f0000000780)={&(0x7f00000009c0)={0x32c, r14, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_SDP={0xd8, 0x13, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [{0x11, 0x1, 'NLBL_CALIPSO\x00'}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '\x00'}, {0x7, 0x1, ',.D'}, {0xe, 0x1, 'syzkaller\x00'}, {0x5, 0x1, '\x00'}, {0x7, 0x1, '&,}'}, {0x17, 0x1, 'sched_process_wait\x00'}]}, {0x1c, 0x0, 0x0, 0x1, [{0x11, 0x1, 'NLBL_CALIPSO\x00'}, {0x4}]}, {0x40, 0x0, 0x0, 0x1, [{0x11, 0x1, 'NLBL_CALIPSO\x00'}, {0x17, 0x1, 'sched_process_wait\x00'}, {0xd, 0x1, '\'!.&(.!+('}]}, {0x10, 0x0, 0x0, 0x1, [{0xa, 0x1, '%+@+-!'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_LLC_SDP={0x5c, 0x13, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [{0x8, 0x1, 'GPL\x00'}, {0x11, 0x1, 'NLBL_CALIPSO\x00'}, {0x4}]}, {0x34, 0x0, 0x0, 0x1, [{0x9, 0x1, '}\x9e-/!'}, {0x11, 0x1, 'NLBL_CALIPSO\x00'}, {0xe, 0x1, 'syzkaller\x00'}]}]}, @NFC_ATTR_LLC_SDP={0x1cc, 0x13, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [{0xa, 0x1, '{^&,:['}, {0x6, 0x1, '.^'}, {0xe, 0x1, '^*^][:{+#-'}]}, {0x30, 0x0, 0x0, 0x1, [{0x8, 0x1, 'GPL\x00'}, {0x4}, {0x5, 0x1, '\x9d'}, {0xd, 0x1, '(&*$*)^\'\''}, {0x7, 0x1, ':-w'}]}, {0x68, 0x0, 0x0, 0x1, [{0x7, 0x1, '{#-'}, {0x10, 0x1, '{.!p-\x17**\xec$\x9b@'}, {0x8, 0x1, 'GPL\x00'}, {0x11, 0x1, 'NLBL_CALIPSO\x00'}, {0x5, 0x1, '\x00'}, {0x6, 0x1, '\\+'}, {0x8, 0x1, 'GPL\x00'}, {0x17, 0x1, 'sched_process_wait\x00'}]}, {0x54, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0xa, 0x1, '-@\\/-]'}, {0xe, 0x1, 'syzkaller\x00'}, {0xe, 0x1, 'syzkaller\x00'}, {0xe, 0x1, 'syzkaller\x00'}, {0x5, 0x1, '-'}, {0x4}]}, {0xb4, 0x0, 0x0, 0x1, [{0xab, 0x1, '\xf7\xb5lP_T\xe4\x80\xf25\xd2\xa1a\x8bO\x1a`\x05\xc0\x05\x9f\xaf\x84\xef\xb9\xde\x9e\x8c\xf3@&,\xaf\xca\xfb\t_\xc7D\bTt\x9d\xe8-\x03S\x1cx\x12\xd7Y\x1dc0\xa3\x9a\xed\xe5l\x1a\xb4v\xcau\xad#\x11b\"\x0e\x9d\xa2\x17\x96\xa6\x06\xc0f2\x9a\\#\x1b\xe3\xdf@\x87>^\xbf\x88\xb4$[gH\x9d\xfa\x82P\xd0k\xcc\x93e\x04A\x1f\x9f\x99\xef\xc5\x02\x86\xc5\xbfE\xcfd\xf1k\b[\xecS\x16\xbb\xd9hVX\xf38\xf1\xcd\xd45\xd2\x1d\x8f\xa1\x8c\xf8\xcd\xcf\b\xb8*\xae\xa2|`\xd8\xa1\x95\xf3\x87\xb2\x97\x11/~\xb5\xbb\a\x02'}, {0x4}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}]}, 0x32c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB="110801060000000000000000918c9210c59aa2a52dd6c254f36dda0000000001000000d65d1a1eeeeda0f1", @ANYRES32=r6, @ANYBLOB, @ANYRES64=0x0], 0x20) setsockopt$inet6_tcp_buf(r6, 0x6, 0xe, &(0x7f0000000000)="019cdcc63ef22ece89e95e96e09817bc124fcd6a8e00219693e72e9f3db8aa0fb652801591329664be04a01d990b5278ba8bd8faeeda1ff497b12282258ff91b31447bf62d1e25382481c54e69bc5489acb15a63478e54d8299e51da72edda3d32bf9491f0f27ad4f2d929f198e6592e815ca77c68ebb9263a03074244d6489a7de260066a6c83ecdd4ef3b74d3606d1b2c88568b25e681268862d8ed6536fb6c067", 0xa2) 1m42.727913953s ago: executing program 2 (id=5073): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000200)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x1, 0x0, 0x21}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="190000000400000008000000c827000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000fe585400"/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="050000000004"], 0x48}}, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2008000000000015000c0080ffffff3d03010000000000950000d300000000bc26080000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680cbc"], &(0x7f0000000100)='GPL\x00'}, 0x48) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000008b3027d3", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000400000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b703000000002b528500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f00000000c0)=r13, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000004c0)={r7, r13}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r11, @ANYBLOB="0c005a80040001800400038801"], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)={0x1b0, r8, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "34041b87c9a85f18e0c4846262258e7abe23c66f197944ed"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}], @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "95bc9fb6c8c8ff767b784081e73d26aebf1aea7239f52590"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "925497b55759a784a25b1ba5588c3fff1b00def48b3f29a1"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x90b3d45fb727f385}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000006c0)=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r5, r2, 0x25, 0x2, @val=@tcx={@void, @value=r5}}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000440)={@link_local, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x2, 0x0, @rand_addr=0x64010100, @private=0xa010101}, @address_request}}}}, 0x0) 1m42.633356067s ago: executing program 34 (id=5073): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000200)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x1, 0x0, 0x21}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="190000000400000008000000c827000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000fe585400"/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="050000000004"], 0x48}}, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000008b3027d3", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000400000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b703000000002b528500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f00000000c0)=r13, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000004c0)={r7, r13}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r11, @ANYBLOB="0c005a80040001800400038801"], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)={0x1b0, r8, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "34041b87c9a85f18e0c4846262258e7abe23c66f197944ed"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}], @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "95bc9fb6c8c8ff767b784081e73d26aebf1aea7239f52590"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "925497b55759a784a25b1ba5588c3fff1b00def48b3f29a1"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x90b3d45fb727f385}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000006c0)=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r5, r2, 0x25, 0x2, @val=@tcx={@void, @value=r5}}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000440)={@link_local, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x2, 0x0, @rand_addr=0x64010100, @private=0xa010101}, @address_request}}}}, 0x0) 6.912514483s ago: executing program 7 (id=5982): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000) (async) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffff000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) (async) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) close(0x4) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') unshare(0x6a040000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000040)={'raw\x00', 0x0, [0x7, 0x4, 0x2, 0x6d7b, 0x5]}, &(0x7f0000000100)=0x54) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaa000800450000001fe1e0000001"], 0x32) socket$inet6_icmp(0xa, 0x2, 0x3a) 5.411907191s ago: executing program 7 (id=5998): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x88200, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040)={@empty, 0x0}, &(0x7f0000000080)=0x14) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000100)=0x8, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@newtclass={0x38, 0x28, 0x703, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x2, 0x2}, {0x0, 0x1}, {0x9, 0xf}}, [@tclass_kind_options=@c_skbprio={0xc}, @TCA_RATE={0x6, 0x5, {0x7, 0x6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r2) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x21008000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x7, '\x00', r1, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0x1, 0xffffffffffffffff}, 0x4) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x20, &(0x7f0000000800)={&(0x7f00000006c0)=""/232, 0xe8, 0x0, &(0x7f00000007c0)=""/26, 0x1a}}, 0x10) r11 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000008c0)=@o_path={&(0x7f0000000880)='./file0\x00', 0x0, 0x10, r3}, 0x18) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000900)={0x0, 0x10000, 0x8}, 0xc) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000940)={0xffffffffffffffff, 0x8, 0x10}, 0xc) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)='%+9llu \x00'}, 0x20) r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000ac0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffffff9, '\x00', r1, 0xffffffffffffffff, 0x3, 0x5, 0x4}, 0x50) r17 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xd, 0x28, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa98f}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ldst={0x2, 0x0, 0x1, 0x4, 0x4, 0xfffffffffffffff0}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='GPL\x00', 0x80, 0x2d, &(0x7f00000005c0)=""/45, 0x40f00, 0x48, '\x00', 0x0, @sock_ops=0x3, r9, 0x8, &(0x7f0000000640)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0xa, 0x806}, 0x10, r10, r11, 0x8, &(0x7f0000000b40)=[r12, 0xffffffffffffffff, r13, r14, 0x1, r15, r16], &(0x7f0000000b80)=[{0x2, 0x2, 0x0, 0x3}, {0x2, 0x5, 0x1, 0x3}, {0x4, 0x5, 0x8}, {0x5, 0x3, 0x10, 0x8}, {0x3, 0x1}, {0x5, 0x1, 0xa, 0x7}, {0x3, 0x3, 0x9, 0x7}, {0x3, 0x5, 0x4, 0x6}], 0x10, 0x7}, 0x94) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000cc0)={0x0, 0x8, 0x5, 0xb5, 0x3, 0x3, 0xfe00, 0x4, {0x0, @in6={{0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}, 0x1f, 0x1, 0x601, 0x7ff, 0xffff}}, &(0x7f0000000d80)=0xb0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000dc0)=@assoc_value={r18, 0xffffff7f}, 0x8) r20 = accept4$ax25(r17, 0x0, &(0x7f0000000e00), 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r20, 0x8002f515, &(0x7f0000000e40)) ioctl$BTRFS_IOC_SUBVOL_CREATE(r8, 0x5000940e, &(0x7f0000000e80)={{r3}, "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"}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000001e80)={r19, 0x9}, &(0x7f0000001ec0)=0x8) r21 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), r5) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r5, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x1c, r21, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0xdf62381c15242469) 5.20352549s ago: executing program 7 (id=6001): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x82018404}, 0xc, &(0x7f0000000340)={0x0}}, 0x80) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) socket$tipc(0x1e, 0x5, 0x0) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) socket$tipc(0x1e, 0x2, 0x0) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x1, 0x2}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x1, 0x2}, 0x10) bind$tipc(r2, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) (async) sendmsg$tipc(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000640)=@newtfilter={0x48, 0x2c, 0xd2b, 0x70bd29, 0x35dfdbfb, {0x0, 0x0, 0x0, r10, {0xffe0}, {0xb}, {0xf, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xe, 0xffe0}}]}}]}, 0x48}}, 0x24040084) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x1f00) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 3.936713116s ago: executing program 7 (id=6011): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x4, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\n'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x4e4}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000780)="da", 0x1}], 0x1}}], 0x2, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x80}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 3.846469063s ago: executing program 0 (id=6013): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000), 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x103, @empty, 0xb}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x17, 0x4, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x11, 0x0, @private=0xa010102, @local, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@rand_addr, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@broadcast}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xb97, 0x0, 0xfffffd76) 3.583855304s ago: executing program 7 (id=6014): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg(r0, &(0x7f0000009d40)=[{{&(0x7f0000001f80)=@sco, 0x80, &(0x7f00000034c0)=[{&(0x7f0000000380)="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", 0x1}], 0x70, 0x0, 0xffffffffffffff8c}}], 0x1, 0x4004000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', @private0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4400046, r1}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000094ce0000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000640)={'veth1\x00', 0x800}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r4, &(0x7f0000000580)="81", 0x1, 0xc084, &(0x7f0000000280)={0xa, 0x0, 0x80, @mcast1, 0x81}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x3, 0x0, 0x7ff, 0xfffffffa}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'macvlan1\x00', 0x2}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0xffff, 0xfff2}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xf460000}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x6d}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="18000600561d01e5ff00000000000022070002f6862637ff"], 0x18}], 0x1}, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 3.485967875s ago: executing program 0 (id=6016): sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x2c0, 0xffffffff, 0xffffffff, 0x2c0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {0xff}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x2, 0x3, 0x1, 0x2}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000400)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000480)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000004c0)={r1, 0x4}, &(0x7f0000000500)=0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x8}, {0x4}}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x58, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0, 0xffe4}, {}, {0xc, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @mcast2}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @empty}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x48080}, 0x24000840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.213878639s ago: executing program 0 (id=6017): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000240)=[@window={0x3, 0x7, 0x2}], 0x1) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r2, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x80000000}, {0x61}, {}, {0x2}, {0x6}]}) 3.212742961s ago: executing program 7 (id=6019): unshare(0x6a040000) r0 = socket$inet6(0xa, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[], 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f80)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x6, 0x4, 0xb, 0x5, 0x0, 0xffffffffffffffff, 0x3}, 0x50) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={0x1, @null, @rose={'rose', 0x0}, 0x536e, 'syz0\x00', @bcast, 0x9, 0x1, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0x1000fff, r3, 0x0, 0xa0028000}, 0x86) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffc, 0x4e23, 0x3, 0xa, 0x80, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e00010a00000000000000a42d"], 0x14}}, 0x0) sendmmsg(r0, 0x0, 0x0, 0xffe0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) r5 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) unshare(0x6a040000) close(0xffffffffffffffff) 3.124700662s ago: executing program 6 (id=6020): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@getstats={0x1c, 0x5e, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='contention_begin\x00', r1, 0x0, 0x9}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) bind$netlink(r2, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbff, 0x400}, 0xc) socket(0x10, 0x3, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xc, 0x4, 0x1, 0x5}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20040040) r4 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000400)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r6, &(0x7f0000000340)='I', 0x1, 0x4c001, 0x0, 0x0) sendto$inet(r6, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9025a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5a", 0xed, 0x12, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) 3.069719636s ago: executing program 0 (id=6022): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x2d, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0x1}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x4, 0x800007}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x3400c81c) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x2d, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0x1}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x4, 0x800007}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x3400c81c) (async) 2.899649895s ago: executing program 0 (id=6025): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x36, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x58}, 0x1, 0x0, 0x0, 0x4c001}, 0x20000000) 2.75639043s ago: executing program 0 (id=6026): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xa, 0xfffffffd, 0x4800, 0x3c, 0x42}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) socket$kcm(0x2, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r6, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0c00990001fcffff2f000000"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x40) r7 = getpid() r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r10 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r10, 0x0, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r11, 0x0, 0xf, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r2, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.157328781s ago: executing program 6 (id=6030): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @empty=0x1000000}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)={0x2c, r3, 0x401, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040050}, 0x80) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r5, 0x800, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xf}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000092c000000000000000008500000053000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8dfffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0xc, 0xc}, {}, {0xe, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FD={0x8, 0x6, r8}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0xf}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000180)={@dev, 0x0}, &(0x7f0000000200)=0x14) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x180, r3, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}, @ETHTOOL_A_EEE_MODES_OURS={0xd8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xd4, 0x5, "ae0b1be0f17ef9cdc6210b427c5d2f105d77e7b397122dfd0a753241c78887f4c04b7fc5eeff90f157b3a01af70ed4cf0578bcf82623b0513f8fed9d8d62073162f3604eb0d28fd7ca7268801eab6c75a2e6135976344cb72e47492b64752c49c5487ebc03a933f9dd83487c477338ed936cb3b376d3beefbbd91ae8dd432ebd1e213c48a2d3619e3a09014ee84a808673fc0621ef0c6621e5f5e0059c06842c00856f46f2f5fab3d353f739d327e677a41317d22013d21c67f36abe39d7043d9403501b304952e27bd2bb34fd6c2ab8"}]}, @ETHTOOL_A_EEE_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_EEE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x4}, 0xc4) 2.0406251s ago: executing program 4 (id=6031): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x10}}], 0x10}, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x11000) (async) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000005c0), 0x6a, 0x12141, 0x0) 1.922344505s ago: executing program 6 (id=6033): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="380000006800010000000000000000000a000000000000000600070056000000100008800c00010000000000000000090800050022"], 0x38}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r2, r4, 0x25, 0x0, @void}, 0x10) (async) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) bpf$PROG_BIND_MAP(0x1c, 0x0, 0x0) (async) unshare(0x62040200) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) (async) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x50000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x44810) 1.789446738s ago: executing program 4 (id=6035): socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, 0x0, &(0x7f00000004c0)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f0000001d00)=[{{&(0x7f00000002c0)={0xa, 0x4e24, 0x2e08, @private1, 0xfff}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="a6", 0x1}], 0x1}}], 0x1, 0x0) (async) sendmmsg$inet6(r1, &(0x7f0000001d00)=[{{&(0x7f00000002c0)={0xa, 0x4e24, 0x2e08, @private1, 0xfff}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="a6", 0x1}], 0x1}}], 0x1, 0x0) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000000c0)={r3, 0x2, 0x1, "fa"}, 0x9) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000000c0)={r3, 0x2, 0x1, "fa"}, 0x9) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={r3, @in6={{0xa, 0x4e24, 0x94ce, @remote, 0x10001}}, 0x8, 0x8}, 0x90) syz_emit_ethernet(0x13, &(0x7f0000000040)={@local, @remote, @val={@void, {0x8100, 0x4}}, {@generic={0x88f5, '\x00'}}}, 0x0) 1.713833196s ago: executing program 5 (id=6036): socket$netlink(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r1, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x40080c1) 1.616607991s ago: executing program 6 (id=6037): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000002030101000000000000000000000006080001000000001108a287957437899d5470c1c930283bb614468981951ad3ae13c50b3d375bd8446c8cc44957c7d40e19c6338d6c0af466ed20235bc4055ddcc1517288d90667c509b1cb04426b63049bddeab7c75301ab91f47ab3b206dda2e5935b0e9c29ec1324e0623e5627c40f"], 0x1c}, 0x1, 0x0, 0x0, 0x280048d1}, 0x80) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x3, 0x0}}, 0x4e23, 0xfffc, 0x4e23, 0x3, 0xa, 0xc0}, {0x100000000, 0xb, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x0, 0xc}, 0xd6, 0x0, 0x1, 0x1, 0x0, 0x1}, {{@in=@broadcast, 0x210000, 0x2b}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffa}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffe0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xfe4f, 0x0, &(0x7f0000000000)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x704, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.570297022s ago: executing program 5 (id=6038): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f4010880700000804800098028a25880060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000008000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500"], 0x21c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000540)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x47dc, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 1.54652622s ago: executing program 6 (id=6039): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000000c0)="4ff6f8e7fd83cd9107f915429f3cbabff66eb12ae552c29df96b4cd58152c987fdf79f4a9e362f28c3798af7279357a7c8b28314838503d3799804e2e2cb", 0x3e) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f00000022c0)={0x2, 0x12, 0x6, 0x5, 0x2, 0x0, 0x70bd25, 0x25dfdbfb}, 0x10}}, 0x8010) (async) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f00000001c0), 0x8) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), 0xffffffffffffffff) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000b80)={{0x0, 0xfffffffffffffff6, 0x4, 0x6, 0x0, 0x3, 0x3042, 0x7, 0x2, 0x8f, 0x0, 0x200, 0xffffffffffffffff, 0x80, 0x70}}) (async) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r6, @ANYRES16=r6], 0x64}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX=r7], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') (async) unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044800}, 0x0) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10001}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 1.308656318s ago: executing program 5 (id=6041): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}}, &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="0000010051227b17774892c91ad1", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x2d) 1.196876354s ago: executing program 5 (id=6042): r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@phonet={0x23, 0x0, 0x0, 0x7}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[@mark={{0x14, 0x1, 0x24, 0x7}}], 0x18}}], 0x1, 0x44000) socket$isdn(0x22, 0x2, 0x10) close(0x3) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$key(0xf, 0x3, 0x2) write$tun(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r2}, 0x18) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x4}, 0x20) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000d80)={0x0, 0x1039000, 0x800, 0xb0, 0xed75d9a3c528c222}, 0x20) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) accept(r4, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x400, 0x8000, 0x0, 0xffffffffffffffff, 0x8000}, 0x48) write(r6, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r6, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r6, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) setsockopt$sock_timeval(r6, 0x1, 0x43, &(0x7f00000001c0)={r7, r8/1000+10000}, 0x10) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r9, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f) getsockopt$inet_opts(r9, 0x0, 0x4, 0x0, &(0x7f0000000040)) write(r6, &(0x7f0000000000)='\"', 0x1) recvmmsg(r6, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 814.275951ms ago: executing program 4 (id=6043): r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_buf(r0, 0x29, 0x1f, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="611570000000000061136c0000000000bfa000000000000014000000ee0016055e03010000000000160500000001000069163e0000000000bf07000000000000260507000fff07206706000020000000140600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) syz_emit_ethernet(0x3b6, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0) 527.928414ms ago: executing program 4 (id=6044): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="c29ae779092e7d9113f33afc8a462b99394e9561d0ab2d1ff4bb55f50c08be683aba4261ea0bff266db4c331991f04edced7a6e2ef75d7021e852b1bb4f0cdd45da7f32353e7f3a45e3011b7434c4a756489024cf252b876f767b3b2e619bba0bbca2a27db3438c811dfb1d3e3b2c43728723fa1f47b51d20b3b6f0ed936300e4aa217e5e5fe096ac6c4969f1783b1e576b482a979c5ad58beb2a9bf310d5a7011d01da4873bca01e8a979deb6d8e9f1272941ad3ab92bb56be514ad5854e70a3c90"], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="c29ae779092e7d9113f33afc8a462b99394e9561d0ab2d1ff4bb55f50c08be683aba4261ea0bff266db4c331991f04edced7a6e2ef75d7021e852b1bb4f0cdd45da7f32353e7f3a45e3011b7434c4a756489024cf252b876f767b3b2e619bba0bbca2a27db3438c811dfb1d3e3b2c43728723fa1f47b51d20b3b6f0ed936300e4aa217e5e5fe096ac6c4969f1783b1e576b482a979c5ad58beb2a9bf310d5a7011d01da4873bca01e8a979deb6d8e9f1272941ad3ab92bb56be514ad5854e70a3c90"], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000004f40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000c80)="19ea9bb34d5fdba17aa325ec3bddcd87038bba717d0dda0c5d73413ec584014bae866ef2e7b92d671b58821db731660a22999c5ebdcbba33d983a2251db5d76a9943ba2828852579ecb310dd16cb0203f5018f26218a3b968ba57db9d117291481a4889d7f3ea020e6346593fe6818fb094c04f7fab18fb1d5b6263b63e3f976fed43b7f39d146dab59fcbd87fff83c64d5ac7e213a27fb1e89cb685ad788d36d1a5d996c008959862eee9ef6e1723dc70849b099233fbe3324bffaeb0c3d2626c9332065aa517066a020a1a77e8fdbd878a961db0428dfc17ec76cee999e42af0e7d4275e0d069b263eb581910ec412223ed0e6a8ec9c9ab7f4c365add35f53e9579bed10f5bb041a918d3909a413c37315608447423683c64bf767d945297e5f4f7a691341128a11d718c277058ff9c891a13291030b590c11183e0a1a9e4df836ef97cfa829ff9c6606c53e9bb3b7bc3f688c248644b1f10e98902d3f19f80d500c2f93fc5c955428b2f17902d5dd22956ee2ef916b260c51154d3a8dc47ab6f2612569569ebb443b4e67667779c796a80f91932c2217d4fbe470acae7a1ad4a5dfd704021cd0de3e54750c0aa06b071bc90e6953083192e778e57fc3004067fac3d3a7dc6ab949e13bdcd36aa5bd2a38f3a1add9c98292dae029953ec99d4bb5f0ece8930933d76d2ec33743852c29e100717267af44b4a0a7c8ce97ee3ebdd80237ff61fb5d36aeb9afcf07b0d569b1e6813d28f64e17b1b0794dd3e8a57347dbab6f1b924213444dbbc58e57c24e76295d30ed4e7091e15c8313431fee46671c18983ad0257c55fcf2d253eb4d6b55378f1fc3ac0f30c9322c199af1cda158f2b5ecff28bf5516fbd46dfbc71d84c7c18a3d6d09ba08956778757b4d83639087559c1cf9867f8e6fcd7fa098e61453501ef02489773ee6616b1c3de1130b50d13716b8a50fcae5d8fb3baeb26f1c64cb01613f98a8755bf7268c351e221090b9484d0973ee65f87b764d97be0a8d6cf2be84378e406f701c9fbfcce1a39165b72c72f3b47f225db35f28190516f81398048f6845f1d08df2db3cc57a57d10278c17a08ff11339d9016e0f1735fc258e1956afa452ea8355d6a73a1691c699bb74127552e605022cc27614b916f2f0a648beefd18a92e89133655a9b848aa239d876a368874af4663ed92d856412c164dc50434d588193fbaaac632a7d4a407424884dbc8c7a0bd023cd02d5d64e201dc3af82382ef0b4c7ed419967a266cff31d5cb4ff71a922158de7d0574161504c21858a775059897cd79e81eed911c03ea1fc6192326de45ac9f07d0f59e5274ddf5be5b6a961d6375063b55a7c0c029935ffdbed5edd1284d7128621341b77e73a8dab8307f407b45b504121275fcee915c1423f2d27cbdd783163994774ca1f64b59950b897a07cd5f0ea334dabcd7ea9c07ac3823302403ffe5dc3082739b11e114823992f9ab820fd9e132db59862b8971d5b48e0fe41130d5195f93555c3c641bf1d7c03b314b61662be9dc2420f64d1ff731ef175c4d4a7adbd5e129aa9510ee1a7a3c15570f3184811613192f4e4d2700920b36d3ef8ab1760710868b8980707a29df785136500fb9d2d0acbead4c568b659534590843627159c89d955c61c31abf88fbeea46c229cf3bb7d321d5b5329cdf25b958aa0cdd36b59e654920ae3732953ef1171c63af89d96f64529c9f4e71bc0ad1838e30202722c8882b3d0cc0679de8338a0c2ed76e677d13ed30fc5d33faf0eaf48c5559df827c84c0d82809e9a31b9dd29f4c1f84c9fc71dd90d03fea5d66f5202090ec113503e88d84cdc9f55ad7f274b8f3504ff41122ce35eeb87709f8a7522d0a798ebbf474c44b0c1ff1523ff2c83d1fdb6bdf0f90d89af58cf70fa1dee90747a6b42e1efbc2586b565e9017d09388910f533a7e4a16c0f18ee2caed9a56def23f8e0d96cfbc4b8486c2e3a41943e632c1b9371ab3eccb0d59eda7a024578989ca02802da10499b496e34941f478f5dec1bb903ec3a1dc7984b8f6fcf5fdb374478de1fd1cbf7219028b1e632153f50d274a81060289c17e5ac3ac911f24d42f3975d8097d37f22ec77d6260c2bed52797c29df2bb9587f1fc4210bffdb161dc7618cfb7b94572cb73ad9d846dc2930e3432e152bb26cd49ca3c47876657d30c5b6979e13a51398696e95c23ae5593e5fb581d47ad1e8d60bb28d26d5cd9973f14845b6c086d5bd171c07b01ad02a27e2ba0de7aed9a858d3b3d292e1d6af9a0a912d0992f058e2456459ea01eb4e9f17af45ffb9da592c33ed89192680091d664177a642f5838092518026595cb547d155d43a5f9784368efcfb3e1e53c5137d8bafe8cee8a3e8a1ad5e15ab4da6dfc3857d4d23d15d69937a5e4bf06c920a38c2fde2ae814a0ce21387a5c6de9060b85b8cf84f20181f222234e8ba229ff1c7da842e9be9a90d910f8cb31a47425dfbc5680a3e441fd5ad510d0a7f146e50c3d345c675881b1b9adf4d1dfaa44738babb1c0a2e98efab56842d356ed17cf6044f9c146abdbc5047c5f7b389e82bb729634c8de33d6e087f842e42db72c85c40d2e10a572ea1b4dd8590105e758f86ead7bf17f594969a9156cb1660639580c4dbe1d534bc5b28f76ee58b6f0bcb70935731f5276cfd5ce1ea3ac83d04f55c612bff8488922736cb889b084171103f2265828ad326536f0802f10a9b7c2c5ddfbc151c86a3484536a420fa6aa224c2ca3a7ca8f55798fcb712a87c043cc1214b06666d0a485813ce7c7bdb5529f6a2006b6ae1841a9163fb0ec1604b33ceb4599834f8f313d9618b515c757cf885cc0c5a4b2f6d689a7eab6c898ef893e0dffd23c7421a88e06844e2e62c520f715b6b7cd63200924fb466294e1c7cd6db8cb199daeed525ba7fd3086b5f4aad214e6aac5ffd3d07d5a2fc828f08a5d72a1e4f87e4e36063605a7f56ab3b6ec8c541d869b10dc4afadc178fe9090eb749357e776d33bab4cc14dd46b2f12f28a9479c3f2f00c88a190f7ccbbe75cf1ec3c90262af5449a3a0467ca76ad75ad97425412e2ff7a55706832e858ae71d5dbe40187681b4210a8e46a8b10b30bdac5a30f17eca4c4f52efc1bf9083601d11a3c2f54f8430e984d3add6011fcaa6853dbd9d091051f4863748b015796a25c5f465ce37712acd7089a23b47c341bbd007a9f0a2dd293907849675d878f7bc8410c0357bb43191811503c2c0a8234db9f73a3647b71eb1478f173e2a22ed699e41aaa1e695f84b34b9f32c8eece14fb0c3693e73e91290eee45dda107f02681ea9fe829efdbfbe7e61467b18836aa50e83425e4b791232880380dac8d612b4fdd1988151e2f2695dfcb47a0c61b8b3533ad4d12048101d49bf717d202a09de36e8098c960075aca44f1d8bcc36f71441ca466f473b8d982094383ecf9b988e875f38326f4ed56a8f72445b779690ce76561cfd9477f10d7a64275c15726146f704667eaf8c1d9805157f38ade94a60d9c8bd08686ee6b7a96a91bc79bd93aae5db03c04d0158db16f9a40139c60d8136c9e69c16602e5d22a77a326a687d097e95e595c1f4a5837d8bd7f0b7d81fa1ded04d73dd3643871b00d084ed48786709cc1bfaacbe97b336c8cbff05e7e83ff8f861a16884ae39e45ae9a40894f1947c9c18f2c1c37853de74fd12efe7d6d1f07b6ab43741f48648165bfd33b162e3e30c83249acfaacab08e87cf092bab33bc1398405eb5030b9e5943271eee2976111bf5fe7edf256278f1acb203e61eb4b05bdeb44295d44619fe7ee5b4ccc15486e3bf4eed857193ce263c3da98342851adb7cbecd801b10655b89d43480954817abd4945ad832a5d98f417e1f16a189e03ea095adb04497a114823af713b85924a2db2fa7cca88a67ffd7492741086d1f1b2c21f044a6bfd1aa282", 0xae4}], 0x2, &(0x7f0000000600)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x798}}, @ip_retopts={{0x40, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0xf7, [@local, @broadcast, @loopback]}, @cipso={0x86, 0x20, 0x3, [{0x7, 0x7, "50ee396f44"}, {0x1, 0x8, "d9d77931d510"}, {0x7, 0xb, "6f2e4d42d573106481"}]}, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6b}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0x11}}], 0xd0}}], 0x2, 0x8014) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast2, @private1={0xfc, 0x1, '\x00', 0x4}}}}}}}, 0x0) 480.679986ms ago: executing program 6 (id=6045): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004208000040000000c0"], 0x50) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffb}, 0x94) r2 = socket$inet6(0xa, 0x5, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r3, 0x800448d5, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000000)=0x1, 0x4) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000180)={{0x2, 0x4e20, @empty}, {0x306}, 0x0, {0x2, 0x4e20, @broadcast}, 'macsec0\x00'}) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 360.193435ms ago: executing program 4 (id=6046): r0 = socket(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1100000004000000b304000000ff000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/28], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) close(r0) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000780)=@get={0x1, &(0x7f0000000680)=""/241, 0x4}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1b, 0x8, 0x40, 0x42}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000100000014000200776730000000000000000104000000007c0008802800008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c50000080200004000a004e2000100009ff02000000008f0000000000000000015d000000080003000600005f"], 0xa4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xd, 0x0, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086", 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) ioctl$sock_ifreq(r4, 0x8926, &(0x7f0000000140)={'veth1_to_team\x00', @ifru_map={0x9, 0x16b, 0x3ff, 0x1, 0x7}}) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="850000000400000007000000000000009500000010000000c7b81249ce000000000000000000001b"], &(0x7f0000000040)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r8, 0x14, &(0x7f00000000c0)={0x0, 0x11}, 0x1, 0x10, &(0x7f0000000000), 0xa, 0x0, 0xffffffffffffffff, 0x4c}, 0x70) syz_emit_ethernet(0x5a, &(0x7f0000000400)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @timestamp={0x44, 0x14, 0x5, 0x3, 0x0, [0x0, 0x10000, 0x0, 0x0]}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e61, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r6, 0x7) ioctl$EXT4_IOC_GET_ES_CACHE(r8, 0xc020662a, &(0x7f0000000480)={0xd3, 0x5, 0x0, 0x8, 0x5, 0x0, [{0x3, 0x8, 0x8, '\x00', 0x80}, {0x73b, 0x4, 0x8, '\x00', 0x80}, {0xffff00, 0xffffffff, 0x61cf, '\x00', 0x4}, {0x7, 0x8, 0xe, '\x00', 0x100}, {0x8000, 0x6, 0xffffffffffff9edc, '\x00', 0x482}]}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="850000006c0000007b00000000000000270000000a0000009500000000000000ed5f0be3755142ae31484cd0115bab2d0589e8ab9f429b60317312f13bd708a35c0670c61fc97c4551f58ae3bbfb9f1d97582f15f3922a3c39716ebdd3c864aec6bc39f3bf389d21e614314b44d3a320471dc33ceec91a1512761160808845c885e7e75118ae8702a167ce7d0ca850e435f105f4c7702c8505fc4669acef909579390b1a6795fae716b04fba77244be06160107ab2a3a30645bbec6570170c1d362e6d6209fa0809ffbcc48bfa0175374dc3"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x41100, 0x0, '\x00', 0x0, @sock_ops}, 0x94) 223.592346ms ago: executing program 5 (id=6047): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010f2bbd7000fcdbdf251000"], 0x14}, 0x1, 0x0, 0x0, 0x1021}, 0x4000000) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000000)=0x81, 0x4) 2.239877ms ago: executing program 5 (id=6048): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe18}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8, 0x40}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000200)=0x2, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x40, 0x8, 0x2, 0xd6, {{0x8, 0x4, 0x3, 0x3c, 0x20, 0x65, 0x0, 0x7d, 0x2f, 0x0, @remote, @loopback, {[@cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "8ad6"}]}, @noop]}}}}}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x28) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x7100000}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r2, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x0, 0x81, &(0x7f00000004c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xb3, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x17, 0x5, &(0x7f0000000100)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r0}, @alu={0x7, 0x1, 0x1, 0x5, 0x6, 0xffffffffffffffc0, 0xfffffffffffffff0}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x9}], &(0x7f00000001c0)='GPL\x00', 0x99f7, 0x5e, &(0x7f00000002c0)=""/94, 0x40f00, 0x5, '\x00', r4, @cgroup_sysctl=0x12, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, r2, 0x1, &(0x7f0000000700)=[r1, r0, r0, r0, r0, r9, r0, r1], &(0x7f0000000740)=[{0x1, 0x3, 0x2, 0x4}], 0x10, 0xab}, 0x94) 0s ago: executing program 4 (id=6049): r0 = socket$inet(0xa, 0x801, 0x84) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x1}, 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) write$bt_hci(r1, &(0x7f0000000140)=ANY=[], 0x6) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x7, 0x4) listen(r0, 0x8) r3 = accept4(r0, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000000)="ea", 0x1) sendmmsg$alg(r3, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="95", 0x1}], 0x1, 0x0, 0x0, 0x400401c}], 0x1, 0x8000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet6(r3, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000480)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xf, 0xe}, {0xb, 0xb}, {0x0, 0xd}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl1\x00', r5, 0x4, 0x3, 0x8c, 0x3, 0xe, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x40, 0x5465fe4537b75f8c, 0x6, 0x7}}) r6 = socket$alg(0x26, 0x5, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) sendfile(r7, r7, 0x0, 0x4) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000400000080000000000000", @ANYRES32, @ANYBLOB="008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000bcc600000000000000"], 0x48) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f0000000400)=[{0x0, 0x0, 0x0}], 0x1, 0x0) kernel console output (not intermixed with test programs): 23147] ip_rcv_finish+0x14c/0x2f0 [ 610.215485][T23147] NF_HOOK+0x30c/0x3a0 [ 610.215512][T23147] ? __pfx_ip_rcv_finish+0x10/0x10 [ 610.215534][T23147] ? NF_HOOK+0x9a/0x3a0 [ 610.215556][T23147] ? __pfx_NF_HOOK+0x10/0x10 [ 610.215576][T23147] ? ip_rcv_core+0x7f7/0xd00 [ 610.215602][T23147] ? __pfx_ip_rcv_finish+0x10/0x10 [ 610.215637][T23147] ? __pfx_ip_rcv+0x10/0x10 [ 610.215658][T23147] __netif_receive_skb+0x143/0x380 [ 610.215696][T23147] ? netif_receive_skb+0x115/0x790 [ 610.215724][T23147] netif_receive_skb+0x1cb/0x790 [ 610.215754][T23147] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 610.215779][T23147] ? __pfx_netif_receive_skb+0x10/0x10 [ 610.215815][T23147] ? tun_rx_batched+0x160/0x730 [ 610.215844][T23147] tun_rx_batched+0x1b9/0x730 [ 610.215870][T23147] ? __lock_acquire+0xab9/0xd20 [ 610.215896][T23147] ? __pfx_tun_rx_batched+0x10/0x10 [ 610.215926][T23147] ? tun_get_user+0x272f/0x3e90 [ 610.215968][T23147] tun_get_user+0x2b65/0x3e90 [ 610.216003][T23147] ? tun_get_user+0x6f6/0x3e90 [ 610.216031][T23147] ? tun_get_user+0x272f/0x3e90 [ 610.216069][T23147] ? aa_file_perm+0x44d/0x1550 [ 610.216089][T23147] ? __pfx_tun_get_user+0x10/0x10 [ 610.216128][T23147] ? __lock_acquire+0xab9/0xd20 [ 610.216156][T23147] ? ref_tracker_alloc+0x318/0x460 [ 610.216175][T23147] ? __lock_acquire+0xab9/0xd20 [ 610.216199][T23147] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 610.216227][T23147] ? tun_get+0x1c/0x2f0 [ 610.216259][T23147] ? tun_get+0x1c/0x2f0 [ 610.216283][T23147] ? tun_get+0x1c/0x2f0 [ 610.216314][T23147] tun_chr_write_iter+0x113/0x200 [ 610.216342][T23147] vfs_write+0x5c9/0xb30 [ 610.216378][T23147] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 610.216405][T23147] ? __pfx_vfs_write+0x10/0x10 [ 610.216447][T23147] ? __fget_files+0x2a/0x420 [ 610.216478][T23147] ksys_write+0x145/0x250 [ 610.216511][T23147] ? __pfx_ksys_write+0x10/0x10 [ 610.216546][T23147] ? do_syscall_64+0xbe/0xfa0 [ 610.216582][T23147] do_syscall_64+0xfa/0xfa0 [ 610.216611][T23147] ? lockdep_hardirqs_on+0x9c/0x150 [ 610.216642][T23147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.216663][T23147] ? clear_bhb_loop+0x60/0xb0 [ 610.216690][T23147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.216711][T23147] RIP: 0033:0x7fcde698e17f [ 610.216731][T23147] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 610.216750][T23147] RSP: 002b:00007fcde78ab000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 610.216772][T23147] RAX: ffffffffffffffda RBX: 00007fcde6be6090 RCX: 00007fcde698e17f [ 610.216789][T23147] RDX: 000000000000002a RSI: 0000200000000440 RDI: 00000000000000c8 [ 610.216803][T23147] RBP: 00007fcde78ab090 R08: 0000000000000000 R09: 0000000000000000 [ 610.216816][T23147] R10: 000000000000002a R11: 0000000000000293 R12: 0000000000000001 [ 610.216830][T23147] R13: 00007fcde6be6128 R14: 00007fcde6be6090 R15: 00007fff97fd3268 [ 610.216868][T23147] [ 610.764694][T23134] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 610.891813][T23152] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 611.101358][T23146] syzkaller0: entered promiscuous mode [ 611.146644][T23146] syzkaller0: entered allmulticast mode [ 611.402711][T23182] netlink: 'syz.0.4759': attribute type 32 has an invalid length. [ 611.416481][T23182] __nla_validate_parse: 10 callbacks suppressed [ 611.416504][T23182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4759'. [ 611.448940][T23185] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4763'. [ 612.017094][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 612.026956][T23182] bond3: option coupled_control: invalid value (2) [ 612.038857][T23182] bond3 (unregistering): Released all slaves [ 612.332649][T23210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4768'. [ 612.773210][T23215] netlink: 'syz.3.4770': attribute type 21 has an invalid length. [ 612.783212][T23215] netlink: 'syz.3.4770': attribute type 1 has an invalid length. [ 612.793622][T23215] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4770'. [ 612.814671][ T5837] Bluetooth: hci3: command 0x0405 tx timeout [ 612.881153][T23217] FAULT_INJECTION: forcing a failure. [ 612.881153][T23217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 612.923709][T23217] CPU: 1 UID: 0 PID: 23217 Comm: syz.1.4771 Not tainted syzkaller #0 PREEMPT(full) [ 612.923739][T23217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 612.923753][T23217] Call Trace: [ 612.923762][T23217] [ 612.923772][T23217] dump_stack_lvl+0x189/0x250 [ 612.923808][T23217] ? __pfx____ratelimit+0x10/0x10 [ 612.923840][T23217] ? __pfx_dump_stack_lvl+0x10/0x10 [ 612.923878][T23217] ? __pfx__printk+0x10/0x10 [ 612.923914][T23217] should_fail_ex+0x414/0x560 [ 612.923952][T23217] _copy_to_user+0x31/0xb0 [ 612.923983][T23217] simple_read_from_buffer+0xe1/0x170 [ 612.924020][T23217] proc_fail_nth_read+0x1b3/0x220 [ 612.924052][T23217] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 612.924083][T23217] ? rw_verify_area+0x2a6/0x4d0 [ 612.924111][T23217] ? __lock_acquire+0xab9/0xd20 [ 612.924130][T23217] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 612.924159][T23217] vfs_read+0x200/0xa30 [ 612.924187][T23217] ? fdget_pos+0x247/0x320 [ 612.924213][T23217] ? __pfx___mutex_lock+0x10/0x10 [ 612.924234][T23217] ? __pfx_vfs_read+0x10/0x10 [ 612.924265][T23217] ? __fget_files+0x2a/0x420 [ 612.924290][T23217] ? __fget_files+0x3a0/0x420 [ 612.924314][T23217] ? __fget_files+0x2a/0x420 [ 612.924341][T23217] ksys_read+0x145/0x250 [ 612.924373][T23217] ? __pfx_ksys_read+0x10/0x10 [ 612.924405][T23217] ? do_syscall_64+0xbe/0xfa0 [ 612.924440][T23217] do_syscall_64+0xfa/0xfa0 [ 612.924469][T23217] ? lockdep_hardirqs_on+0x9c/0x150 [ 612.924499][T23217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.924519][T23217] ? clear_bhb_loop+0x60/0xb0 [ 612.924544][T23217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.924564][T23217] RIP: 0033:0x7fb501d8e0dc [ 612.924583][T23217] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 612.924601][T23217] RSP: 002b:00007fb502bf5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 612.924624][T23217] RAX: ffffffffffffffda RBX: 00007fb501fe5fa0 RCX: 00007fb501d8e0dc [ 612.924640][T23217] RDX: 000000000000000f RSI: 00007fb502bf50a0 RDI: 0000000000000009 [ 612.924653][T23217] RBP: 00007fb502bf5090 R08: 0000000000000000 R09: 0000000000000000 [ 612.924666][T23217] R10: 000000000000002a R11: 0000000000000246 R12: 0000000000000001 [ 612.924679][T23217] R13: 00007fb501fe6038 R14: 00007fb501fe5fa0 R15: 00007ffc2c7e4a48 [ 612.924714][T23217] [ 612.994926][T23225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4774'. [ 613.127582][T23228] netlink: 'syz.0.4773': attribute type 5 has an invalid length. [ 613.230050][T23228] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.4773'. [ 613.643656][T23240] netlink: 'syz.0.4779': attribute type 13 has an invalid length. [ 613.661659][T23241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4776'. [ 613.708515][T23240] gretap0: refused to change device tx_queue_len [ 613.715696][T23240] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 613.929627][T23247] gretap1: entered promiscuous mode [ 614.204139][T23253] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4784'. [ 614.307058][T23261] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4786'. [ 614.329656][T23259] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4786'. [ 614.472010][T23267] bond0: (slave rose0): Releasing backup interface [ 614.894612][ T5837] Bluetooth: hci3: command 0x0405 tx timeout [ 614.922090][T23289] netlink: 'syz.3.4795': attribute type 6 has an invalid length. [ 614.941195][T23289] netlink: 'syz.3.4795': attribute type 5 has an invalid length. [ 614.953628][T23289] netlink: 'syz.3.4795': attribute type 4 has an invalid length. [ 615.337949][T23310] tipc: Trying to set illegal importance in message [ 616.447883][T23357] __nla_validate_parse: 12 callbacks suppressed [ 616.447915][T23357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4819'. [ 616.739508][T23370] netlink: 'syz.1.4823': attribute type 13 has an invalid length. [ 616.798161][T23370] gretap0: refused to change device tx_queue_len [ 616.814962][T23370] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 616.872626][T23373] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4824'. [ 616.901475][T23375] tipc: Enabled bearer , priority 0 [ 616.960369][T23373] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 616.987046][T23373] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.997759][T23373] bond0 (unregistering): Released all slaves [ 617.038835][T23375] syzkaller0: entered promiscuous mode [ 617.045725][T23375] syzkaller0: entered allmulticast mode [ 617.119623][T23375] tipc: Resetting bearer [ 617.151696][T23378] lo speed is unknown, defaulting to 1000 [ 617.186084][T23378] wg1 speed is unknown, defaulting to 1000 [ 617.348929][T23375] tipc: Resetting bearer [ 617.392027][T23375] tipc: Disabling bearer [ 617.597988][T23406] tipc: Enabled bearer , priority 10 [ 617.698228][T23411] netlink: 'syz.0.4834': attribute type 12 has an invalid length. [ 617.734004][T23405] lo speed is unknown, defaulting to 1000 [ 617.770928][T23405] wg1 speed is unknown, defaulting to 1000 [ 617.889994][T23416] netlink: 'syz.4.4836': attribute type 13 has an invalid length. [ 617.929277][T23416] gretap0: refused to change device tx_queue_len [ 617.941807][T23416] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 618.091110][T23428] veth1_to_bond: entered allmulticast mode [ 618.104172][T23420] veth1_to_bond: left allmulticast mode [ 618.112480][T23431] netlink: 'syz.4.4839': attribute type 15 has an invalid length. [ 618.321243][T23440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4843'. [ 618.626163][T23464] netlink: 'syz.0.4848': attribute type 27 has an invalid length. [ 618.643659][T23466] netlink: 'syz.1.4849': attribute type 13 has an invalid length. [ 618.703489][T23466] gretap0: refused to change device tx_queue_len [ 618.714554][ T10] tipc: Node number set to 2685707303 [ 618.739668][T23466] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 618.758482][T23463] netlink: 'syz.0.4848': attribute type 27 has an invalid length. [ 618.767023][T23463] netlink: 'syz.0.4848': attribute type 27 has an invalid length. [ 618.778573][T23463] netlink: 'syz.0.4848': attribute type 27 has an invalid length. [ 618.789659][T23463] netlink: 'syz.0.4848': attribute type 27 has an invalid length. [ 618.799588][T23463] netlink: 'syz.0.4848': attribute type 27 has an invalid length. [ 618.802326][T23474] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4852'. [ 618.808561][T23463] netlink: 'syz.0.4848': attribute type 27 has an invalid length. [ 619.171478][T23492] can: request_module (can-proto-3) failed. [ 619.514818][T23521] TCP: tcp_parse_options: Illegal window scaling value 47 > 14 received [ 619.608694][T23521] TCP: tcp_parse_options: Illegal window scaling value 47 > 14 received [ 619.699759][T23533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4869'. [ 619.710047][T23533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4869'. [ 619.719363][T23533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4869'. [ 619.757716][T23537] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4870'. [ 619.779943][T23537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4870'. [ 619.796969][T23536] lo speed is unknown, defaulting to 1000 [ 619.802905][T23537] netlink: 348 bytes leftover after parsing attributes in process `syz.2.4870'. [ 619.826418][T23536] wg1 speed is unknown, defaulting to 1000 [ 620.633804][T23553] syzkaller0: entered promiscuous mode [ 620.648639][T23553] syzkaller0: entered allmulticast mode [ 620.686477][T23553] 0: reclassify loop, rule prio 0, protocol 800 [ 620.790374][T23562] sctp: [Deprecated]: syz.4.4879 (pid 23562) Use of struct sctp_assoc_value in delayed_ack socket option. [ 620.790374][T23562] Use struct sctp_sack_info instead [ 621.139113][T23574] tipc: Enabling of bearer rejected, failed to enable media [ 621.291770][T23585] gretap0: refused to change device tx_queue_len [ 621.302128][T23585] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 621.331764][T23590] veth0_virt_wifi: entered allmulticast mode [ 621.351557][T23590] team0: Port device veth0_virt_wifi added [ 621.465116][T23600] __nla_validate_parse: 3 callbacks suppressed [ 621.465137][T23600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4887'. [ 621.569191][T23600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 621.790029][T23598] syz.4.4886 uses old SIOCAX25GETINFO [ 622.118414][T23614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4891'. [ 622.312657][T23618] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4893'. [ 622.364932][T23618] netlink: 35 bytes leftover after parsing attributes in process `syz.4.4893'. [ 622.370844][T23623] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4894'. [ 622.373940][T23618] netlink: 35 bytes leftover after parsing attributes in process `syz.4.4893'. [ 622.385314][T23623] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4894'. [ 622.410029][T23623] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4894'. [ 622.621341][T23635] gretap0: refused to change device tx_queue_len [ 622.649191][T23635] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 622.786270][T23647] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4902'. [ 622.823332][T23651] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4903'. [ 623.345401][T23670] validate_nla: 35 callbacks suppressed [ 623.345421][T23670] netlink: 'syz.4.4908': attribute type 2 has an invalid length. [ 623.388307][T23672] bridge: RTM_NEWNEIGH with invalid ether address [ 623.698388][T23691] bond0: option broadcast_neighbor: invalid value (5) [ 623.710007][T23691] bond0 (unregistering): Released all slaves [ 623.736130][T23699] netlink: 'syz.1.4913': attribute type 13 has an invalid length. [ 623.749576][T23699] gretap0: refused to change device tx_queue_len [ 623.759993][T23699] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 623.880915][T23703] tunl0: entered promiscuous mode [ 623.896159][T23703] netlink: 'syz.1.4917': attribute type 4 has an invalid length. [ 624.055929][T23713] sctp: [Deprecated]: syz.2.4919 (pid 23713) Use of struct sctp_assoc_value in delayed_ack socket option. [ 624.055929][T23713] Use struct sctp_sack_info instead [ 624.074577][T23713] netlink: zone id is out of range [ 624.079876][T23713] netlink: zone id is out of range [ 624.088886][T23713] netlink: set zone limit has 8 unknown bytes [ 624.172131][T23718] syzkaller1: entered promiscuous mode [ 624.180361][T23718] syzkaller1: entered allmulticast mode [ 624.218547][T23715] lo speed is unknown, defaulting to 1000 [ 624.226346][T23715] wg1 speed is unknown, defaulting to 1000 [ 624.419529][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.522500][T23728] sctp: [Deprecated]: syz.3.4923 (pid 23728) Use of struct sctp_assoc_value in delayed_ack socket option. [ 624.522500][T23728] Use struct sctp_sack_info instead [ 624.610016][T23733] siw: device registration error -23 [ 624.919590][T23746] netlink: 'syz.2.4931': attribute type 9 has an invalid length. [ 624.932167][T23744] pim6reg1: entered promiscuous mode [ 624.945928][T23744] pim6reg1: entered allmulticast mode [ 625.054072][T23752] dvmrp0: left allmulticast mode [ 625.802760][T23789] lo speed is unknown, defaulting to 1000 [ 625.840565][T23789] wg1 speed is unknown, defaulting to 1000 [ 625.932763][T23795] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.004645][T23795] netdevsim netdevsim0 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 626.181454][T23795] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.224558][T23795] netdevsim netdevsim0 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 626.349364][T23795] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.366996][T23795] netdevsim netdevsim0 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 626.447007][T23795] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.465866][T23795] netdevsim netdevsim0 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 626.633534][T23813] lo speed is unknown, defaulting to 1000 [ 626.649861][T19517] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.664675][T19517] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 626.688524][T23818] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.696400][T19517] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.719478][T19517] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 626.741223][T23813] wg1 speed is unknown, defaulting to 1000 [ 626.833428][T19517] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.862129][T19517] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 626.870721][T23817] lo speed is unknown, defaulting to 1000 [ 626.881284][T23820] __nla_validate_parse: 8 callbacks suppressed [ 626.881309][T23820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4950'. [ 626.886616][T23817] wg1 speed is unknown, defaulting to 1000 [ 626.907257][T19519] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.916859][T19519] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 627.439784][T23840] netlink: 'syz.3.4954': attribute type 5 has an invalid length. [ 627.571356][T23844] netlink: 'syz.4.4956': attribute type 1 has an invalid length. [ 627.602729][T23844] netlink: 'syz.4.4956': attribute type 2 has an invalid length. [ 628.170649][T23861] lo speed is unknown, defaulting to 1000 [ 628.186115][T23861] wg1 speed is unknown, defaulting to 1000 [ 628.245084][T23863] netlink: 'syz.4.4963': attribute type 1 has an invalid length. [ 628.309179][T23864] lo speed is unknown, defaulting to 1000 [ 628.438397][T23864] wg1 speed is unknown, defaulting to 1000 [ 628.710279][T23882] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4967'. [ 629.125869][T23894] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 629.137784][T23894] bridge5: entered allmulticast mode [ 629.331318][T23904] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4973'. [ 629.331819][T23902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4974'. [ 629.377941][T23902] xt_bpf: check failed: parse error [ 629.805133][T23916] netlink: 'syz.2.4978': attribute type 27 has an invalid length. [ 629.835196][T23918] netlink: 79 bytes leftover after parsing attributes in process `syz.0.4977'. [ 630.166160][T23937] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4982'. [ 630.204978][T23933] lo speed is unknown, defaulting to 1000 [ 630.223019][T23933] wg1 speed is unknown, defaulting to 1000 [ 630.284943][T23944] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4979'. [ 630.332925][T23936] lo speed is unknown, defaulting to 1000 [ 630.357717][T23928] lo speed is unknown, defaulting to 1000 [ 630.364680][T23936] wg1 speed is unknown, defaulting to 1000 [ 630.402757][T23942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4984'. [ 630.415729][T23928] wg1 speed is unknown, defaulting to 1000 [ 630.976099][T23963] netlink: 'syz.1.4987': attribute type 2 has an invalid length. [ 631.049790][T23961] lo speed is unknown, defaulting to 1000 [ 631.070895][T23961] wg1 speed is unknown, defaulting to 1000 [ 631.304869][T23960] lo speed is unknown, defaulting to 1000 [ 631.349341][T23960] wg1 speed is unknown, defaulting to 1000 [ 631.614683][T23990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4993'. [ 631.891071][T24003] netlink: 'syz.4.5000': attribute type 1 has an invalid length. [ 631.902405][T24001] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4999'. [ 631.924213][T24001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4999'. [ 631.933907][T24001] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4999'. [ 632.024028][T24003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5000'. [ 632.041525][T24007] bond4: (slave veth7): Enslaving as an active interface with a down link [ 632.100575][T24003] bond4 (unregistering): (slave veth7): Releasing active interface [ 632.139356][T24003] bond4 (unregistering): Released all slaves [ 632.401570][T24030] syzkaller0: Caught tx_queue_len zero misconfig [ 632.969617][T24064] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5017'. [ 633.056517][T24068] lo: entered allmulticast mode [ 633.075820][T24068] lo: left allmulticast mode [ 633.169359][T24026] delete_channel: no stack [ 633.395583][T24083] bond8: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 633.408885][T24083] bond8 (unregistering): Released all slaves [ 633.517987][T24092] æÿîÿ: entered promiscuous mode [ 633.984834][T24118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5037'. [ 634.000784][T24118] netlink: 'syz.3.5037': attribute type 1 has an invalid length. [ 634.142003][T24118] bond7: (slave veth7): Enslaving as an active interface with a down link [ 634.155328][T24128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5037'. [ 634.217859][T24128] bond7 (unregistering): (slave veth7): Releasing active interface [ 634.299484][T24128] bond7 (unregistering): Released all slaves [ 634.357292][T24135] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5040'. [ 634.738302][T24150] lo speed is unknown, defaulting to 1000 [ 634.800197][T24150] wg1 speed is unknown, defaulting to 1000 [ 634.832959][T24154] xt_CT: No such helper "snmp_trap" [ 634.871256][T24162] netlink: 'syz.1.5048': attribute type 1 has an invalid length. [ 634.881960][T24146] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5043'. [ 634.901847][T24146] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5043'. [ 634.995201][T24165] netlink: 'syz.1.5050': attribute type 4 has an invalid length. [ 635.182135][T24179] tipc: New replicast peer: 0.0.0.0 [ 635.190359][T24179] tipc: Enabled bearer , priority 10 [ 635.198960][T24179] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0002 [ 635.329378][ T30] audit: type=1800 audit(1762526322.143:11): pid=24181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5053" name="memory.events" dev="tmpfs" ino=2120 res=0 errno=0 [ 636.043957][T24214] syz_tun (unregistering): left allmulticast mode [ 636.166314][T19517] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.298143][T19517] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.308695][T12776] tipc: Node number set to 627213086 [ 636.376602][T19517] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.469495][T19517] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.676325][T19517] bridge_slave_1: left allmulticast mode [ 636.702623][T19517] bridge_slave_1: left promiscuous mode [ 636.726474][T19517] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.750163][T19517] bridge_slave_0: left allmulticast mode [ 636.756066][T19517] bridge_slave_0: left promiscuous mode [ 636.765357][T19517] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.993401][T24231] Can't find ip_set type hash:n [ 637.425555][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 637.435957][T19661] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 637.444736][T19661] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 637.453886][T19661] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 637.474254][T24246] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 637.488232][T24246] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 637.503135][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 637.518430][T24246] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 637.527566][T19517] bond2 (unregistering): (slave geneve2): Releasing active interface [ 637.532293][T24249] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 637.546486][T24249] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 637.551411][T24246] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 637.555157][T24249] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 637.568712][T24249] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 637.580342][T24249] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 637.597638][T24249] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 638.003156][T19517] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 638.013305][T19517] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 638.023104][T19517] .` (unregistering): Released all slaves [ 638.119946][T19517] bond1 (unregistering): Released all slaves [ 638.219615][T19517] bond2 (unregistering): Released all slaves [ 638.321242][T19517] bond3 (unregistering): Released all slaves [ 638.336173][T19517] bond4 (unregistering): Released all slaves [ 638.441245][T19517] bond5 (unregistering): Released all slaves [ 638.455863][T19517] bond0 (unregistering): Released all slaves [ 638.556371][T19517] bond6 (unregistering): Released all slaves [ 638.647184][T24245] lo speed is unknown, defaulting to 1000 [ 638.661535][T24241] lo speed is unknown, defaulting to 1000 [ 638.683944][T24245] wg1 speed is unknown, defaulting to 1000 [ 638.696825][T24242] lo speed is unknown, defaulting to 1000 [ 638.720337][T24241] wg1 speed is unknown, defaulting to 1000 [ 638.720348][T19517] tipc: Disabling bearer [ 638.740852][T19517] tipc: Left network mode [ 638.745314][T24253] netlink: 'syz.0.5078': attribute type 1 has an invalid length. [ 638.820057][T24242] wg1 speed is unknown, defaulting to 1000 [ 639.141761][T24268] xt_CT: You must specify a L4 protocol and not use inversions on it [ 639.358410][T19517] hsr_slave_0: left promiscuous mode [ 639.372960][T19517] hsr_slave_1: left promiscuous mode [ 639.379321][T19517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 639.387976][T19517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 639.469658][T19517] pim6reg (unregistering): left allmulticast mode [ 639.503835][T19517] pimreg24 (unregistering): left allmulticast mode [ 639.537377][T21452] Bluetooth: hci0: command tx timeout [ 639.623611][T21452] Bluetooth: hci2: command tx timeout [ 639.699746][T21452] Bluetooth: hci1: command tx timeout [ 640.298396][T24283] tipc: Enabled bearer , priority 10 [ 640.319055][T24286] __nla_validate_parse: 4 callbacks suppressed [ 640.319078][T24286] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5085'. [ 640.413418][T24241] chnl_net:caif_netlink_parms(): no params data found [ 640.479267][T24296] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5086'. [ 640.496643][T24292] bridge_slave_0: left allmulticast mode [ 640.502358][T24292] bridge_slave_0: left promiscuous mode [ 640.510350][T24292] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.527613][T24292] bridge_slave_1: left allmulticast mode [ 640.544459][T24292] bridge_slave_1: left promiscuous mode [ 640.549493][T24296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5086'. [ 640.555423][T24292] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.573933][T24292] team0: Port device team_slave_0 removed [ 640.588116][T24292] team0: Port device team_slave_1 removed [ 640.596045][T24292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 640.605020][T24292] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 640.784128][T24304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5088'. [ 640.802699][T24295] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 640.816852][T24295] bond4 (unregistering): Released all slaves [ 640.852606][T24242] chnl_net:caif_netlink_parms(): no params data found [ 640.894500][T12776] page_pool_release_retry() stalled pool shutdown: id 152, 1 inflight 60 sec [ 640.952099][T19517] IPVS: stop unused estimator thread 0... [ 641.017071][T24245] chnl_net:caif_netlink_parms(): no params data found [ 641.116231][T24241] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.123809][T24241] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.135061][T24241] bridge_slave_0: entered allmulticast mode [ 641.143726][T24241] bridge_slave_0: entered promiscuous mode [ 641.166780][T24241] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.173980][T24241] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.181618][T24241] bridge_slave_1: entered allmulticast mode [ 641.191161][T24241] bridge_slave_1: entered promiscuous mode [ 641.323800][T24328] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5092'. [ 641.332441][T24241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 641.350427][T24242] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.358260][T24242] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.365990][T24242] bridge_slave_0: entered allmulticast mode [ 641.374091][T24242] bridge_slave_0: entered promiscuous mode [ 641.410223][T24241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 641.415345][T24330] netlink: 'syz.0.5092': attribute type 1 has an invalid length. [ 641.460571][T24242] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.470293][T24242] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.477841][T24242] bridge_slave_1: entered allmulticast mode [ 641.493314][T24242] bridge_slave_1: entered promiscuous mode [ 641.521380][T19517] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 641.535197][T19517] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 641.614954][T21452] Bluetooth: hci0: command tx timeout [ 641.698918][T21452] Bluetooth: hci2: command tx timeout [ 641.726755][T19517] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 641.738007][T19517] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 641.774746][T21452] Bluetooth: hci1: command tx timeout [ 641.803365][T24241] team0: Port device team_slave_0 added [ 641.834136][T24242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 641.849608][T24245] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.858252][T24245] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.866344][T24245] bridge_slave_0: entered allmulticast mode [ 641.874624][T24245] bridge_slave_0: entered promiscuous mode [ 641.913864][T19517] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 641.924942][T19517] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 641.949882][T24241] team0: Port device team_slave_1 added [ 641.960077][T24242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 641.969833][T24245] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.977344][T24245] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.985225][T24245] bridge_slave_1: entered allmulticast mode [ 641.992831][T24245] bridge_slave_1: entered promiscuous mode [ 642.070242][T24347] lo speed is unknown, defaulting to 1000 [ 642.086337][T19517] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 642.098062][T19517] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 642.119150][T24242] team0: Port device team_slave_0 added [ 642.151582][T24241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 642.158728][T24241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 642.194001][T24241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 642.210904][T24347] wg1 speed is unknown, defaulting to 1000 [ 642.212958][T24241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 642.223894][T24241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 642.251773][T24241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 642.263420][T24352] netlink: 'syz.4.5097': attribute type 3 has an invalid length. [ 642.270149][T24242] team0: Port device team_slave_1 added [ 642.272734][T24352] netlink: 'syz.4.5097': attribute type 13 has an invalid length. [ 642.295783][T24245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 642.308791][T24245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 642.328334][T24349] syzkaller1: entered promiscuous mode [ 642.333974][T24349] syzkaller1: entered allmulticast mode [ 642.364861][T24242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 642.371854][T24242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 642.398058][T24242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 642.443043][T24242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 642.450756][T24242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 642.476983][T24242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 642.562019][T24245] team0: Port device team_slave_0 added [ 642.609605][T24241] hsr_slave_0: entered promiscuous mode [ 642.616213][T24241] hsr_slave_1: entered promiscuous mode [ 642.622433][T24241] debugfs: 'hsr0' already exists in 'hsr' [ 642.628245][T24241] Cannot create hsr debugfs directory [ 642.657372][T24245] team0: Port device team_slave_1 added [ 642.762281][T24242] hsr_slave_0: entered promiscuous mode [ 642.769793][T24242] hsr_slave_1: entered promiscuous mode [ 642.776958][T24242] debugfs: 'hsr0' already exists in 'hsr' [ 642.783128][T24242] Cannot create hsr debugfs directory [ 642.859622][T24245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 642.867354][T24245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 642.894620][T24245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 642.949366][T24245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 642.956726][T24245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 642.983786][T24245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 643.061410][T24368] netlink: 'syz.4.5102': attribute type 83 has an invalid length. [ 643.346908][T19517] bond2 (unregistering): (slave gretap2): Releasing active interface [ 643.370691][T19517] bond6 (unregistering): (slave gretap4): Releasing active interface [ 643.698876][T21452] Bluetooth: hci0: command tx timeout [ 643.746383][T19517] bond0 (unregistering): Released all slaves [ 643.777152][T21452] Bluetooth: hci2: command tx timeout [ 643.855283][T21452] Bluetooth: hci1: command tx timeout [ 643.862763][T19517] bond1 (unregistering): (slave vcan1): Releasing backup interface [ 643.872028][T19517] bond1 (unregistering): (slave vcan2): Releasing backup interface [ 643.880618][T19517] bond1 (unregistering): Released all slaves [ 643.895230][T19517] bond2 (unregistering): Released all slaves [ 643.997640][T19517] bond3 (unregistering): Released all slaves [ 644.097633][T19517] bond4 (unregistering): Released all slaves [ 644.198348][T19517] bond5 (unregistering): Released all slaves [ 644.214198][T19517] bond6 (unregistering): Released all slaves [ 644.228681][T19517] bond7 (unregistering): Released all slaves [ 644.265292][T24245] hsr_slave_0: entered promiscuous mode [ 644.271821][T24245] hsr_slave_1: entered promiscuous mode [ 644.280663][T24245] debugfs: 'hsr0' already exists in 'hsr' [ 644.287376][T24245] Cannot create hsr debugfs directory [ 644.293030][T24372] netlink: 'syz.4.5104': attribute type 1 has an invalid length. [ 644.453182][T19517] tipc: Disabling bearer [ 644.464456][T19517] tipc: Left network mode [ 644.916032][T24405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5110'. [ 644.948837][T24405] bond3: Invalid ad_actor_system MAC address. [ 644.955672][T24405] bond3: option ad_actor_system: invalid value (7) [ 644.963795][T24405] bond3 (unregistering): Released all slaves [ 644.992125][T19517] hsr_slave_0: left promiscuous mode [ 644.998779][T19517] hsr_slave_1: left promiscuous mode [ 645.198382][T19517] team0 (unregistering): Port device veth0_virt_wifi removed [ 645.784955][T21452] Bluetooth: hci0: command tx timeout [ 645.861116][T21452] Bluetooth: hci2: command tx timeout [ 645.905882][T24411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5112'. [ 645.917327][T24411] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5112'. [ 645.937575][T21452] Bluetooth: hci1: command tx timeout [ 645.958703][T24241] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 645.987592][T24241] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 646.052787][T24415] tipc: Enabling of bearer rejected, failed to enable media [ 646.062243][T24241] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 646.076990][T24241] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 646.097775][T24414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5113'. [ 646.130710][T24417] bridge5: entered promiscuous mode [ 646.137341][T24417] bridge5: entered allmulticast mode [ 646.156956][T24417] team0: Port device bridge5 added [ 646.344440][T24242] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 646.359147][T24242] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 646.382499][T24242] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 646.436002][T24242] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 646.576602][T24245] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 646.589605][T24245] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 646.597254][T24449] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 646.645047][T24245] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 646.663746][T24245] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 646.765963][T24241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.779806][T24459] lo speed is unknown, defaulting to 1000 [ 646.789111][T24459] wg1 speed is unknown, defaulting to 1000 [ 646.863845][T24460] xt_CT: No such helper "netbios-ns" [ 646.900079][T24241] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.949426][T24461] bond_slave_0: entered promiscuous mode [ 646.956508][T24461] bond_slave_0: entered allmulticast mode [ 646.980369][T19519] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.987664][T19519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.059427][T19519] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.066740][T19519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.277435][T24467] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5122'. [ 647.294708][T24467] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5122'. [ 647.331633][T24242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 647.417214][T24242] 8021q: adding VLAN 0 to HW filter on device team0 [ 647.447543][ T8327] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.454800][ T8327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.493267][ T8364] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.500591][ T8364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.526007][T24245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 647.622171][T24245] 8021q: adding VLAN 0 to HW filter on device team0 [ 647.656081][ T8362] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.663315][ T8362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.703023][ T8365] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.710266][ T8365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.949578][T24241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 648.143222][T24242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 648.187417][T24245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 648.239302][T24493] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5127'. [ 648.696861][T24241] veth0_vlan: entered promiscuous mode [ 648.723132][T24241] veth1_vlan: entered promiscuous mode [ 648.754016][T24519] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5131'. [ 648.764072][T24519] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 648.937906][T24241] veth0_macvtap: entered promiscuous mode [ 649.002374][T24245] veth0_vlan: entered promiscuous mode [ 649.039930][T24241] veth1_macvtap: entered promiscuous mode [ 649.057237][T24242] veth0_vlan: entered promiscuous mode [ 649.073716][T24245] veth1_vlan: entered promiscuous mode [ 649.106947][T24242] veth1_vlan: entered promiscuous mode [ 649.126028][T24529] pim6reg1: entered promiscuous mode [ 649.131403][T24529] pim6reg1: entered allmulticast mode [ 649.208400][T24241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.233285][T24245] veth0_macvtap: entered promiscuous mode [ 649.249910][T24241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.272595][T24245] veth1_macvtap: entered promiscuous mode [ 649.300570][T24242] veth0_macvtap: entered promiscuous mode [ 649.328338][T24242] veth1_macvtap: entered promiscuous mode [ 649.359562][ T8371] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.375335][ T8371] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.405543][ T8371] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.420829][ T8362] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.470273][T24245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.560020][T24245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.688333][ T8362] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.713353][T24540] netlink: 'syz.4.5135': attribute type 4 has an invalid length. [ 649.745021][ T8362] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.756779][ T8362] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.829379][T24242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.853483][ T8362] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.876822][T24242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.973635][ T8371] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.003211][ T8362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.011502][ T8362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.066179][ T8371] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.086531][ T8371] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.099045][T24546] netlink: 'syz.0.5137': attribute type 33 has an invalid length. [ 650.107651][T24546] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5137'. [ 650.135481][ T8371] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.171701][T24546] `: renamed from team0 (while UP) [ 650.199041][ T8362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.215199][ T8362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.328012][T19519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.358717][T19519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.388799][T19517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.414870][T19517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.528459][T24555] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 650.538195][ T8371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.556243][ T8371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.570549][T19519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.586481][T19519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.720887][T24559] netlink: 'syz.0.5139': attribute type 1 has an invalid length. [ 651.092125][T24556] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5081'. [ 651.114061][T24556] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5081'. [ 651.146499][T24577] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 651.198621][T24582] netlink: 'syz.5.5143': attribute type 12 has an invalid length. [ 651.359721][T24586] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.415862][T24586] netdevsim netdevsim0 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 651.594855][T24586] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.610647][T24586] netdevsim netdevsim0 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 651.767219][T24586] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.800697][T24586] netdevsim netdevsim0 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 651.893180][T24586] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.923597][T24586] netdevsim netdevsim0 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 651.927657][T24605] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5150'. [ 651.995762][T24605] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5150'. [ 652.009575][T24605] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5150'. [ 652.066918][T24611] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 652.226770][T24607] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.366305][T24607] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.428066][T24627] syzkaller1: entered promiscuous mode [ 652.443922][T24627] syzkaller1: entered allmulticast mode [ 652.459048][T24585] pim6reg1: entered allmulticast mode [ 652.509986][T24627] tipc: Resetting bearer [ 652.516627][T24627] tipc: Resetting bearer [ 652.560724][T24607] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.619679][T24631] netlink: 1 bytes leftover after parsing attributes in process `syz.5.5157'. [ 652.667517][T24607] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.885141][T24637] tc_dump_action: action bad kind [ 652.919316][T19517] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.932957][T24637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5159'. [ 652.953769][T24637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5159'. [ 652.978963][T24637] netlink: 'syz.4.5159': attribute type 6 has an invalid length. [ 652.990996][T19517] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.000501][T19517] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.088679][T19517] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.159924][T24638] lo speed is unknown, defaulting to 1000 [ 653.300339][T24638] wg1 speed is unknown, defaulting to 1000 [ 653.321485][T24647] batadv1: entered promiscuous mode [ 653.454141][T24655] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5165'. [ 653.568559][T24655] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 653.599006][T24652] lo speed is unknown, defaulting to 1000 [ 653.611227][T24652] wg1 speed is unknown, defaulting to 1000 [ 653.641678][T24660] bond0: entered promiscuous mode [ 653.647041][T24660] bond_slave_0: entered promiscuous mode [ 653.652961][T24660] bond_slave_1: entered promiscuous mode [ 653.658999][T24660] bridge1: entered promiscuous mode [ 653.665061][T24660] bond0: entered allmulticast mode [ 653.670201][T24660] bond_slave_0: entered allmulticast mode [ 653.676218][T24660] bond_slave_1: entered allmulticast mode [ 653.683775][T24660] bridge1: entered allmulticast mode [ 654.271541][T24676] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.383161][T24676] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.406893][T24686] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5175'. [ 654.541612][T24676] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.654026][T24698] lo speed is unknown, defaulting to 1000 [ 654.696608][T24676] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.715316][T24698] wg1 speed is unknown, defaulting to 1000 [ 654.739537][T24696] lo speed is unknown, defaulting to 1000 [ 654.748546][T24696] wg1 speed is unknown, defaulting to 1000 [ 654.863594][ T8362] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.888059][ T8364] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.983144][ T8364] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.017707][ T8364] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.591059][T24728] lo speed is unknown, defaulting to 1000 [ 655.600870][T24728] wg1 speed is unknown, defaulting to 1000 [ 656.538937][T24767] bond3: entered promiscuous mode [ 656.544043][T24767] bond3: entered allmulticast mode [ 656.572286][T24760] __nla_validate_parse: 1 callbacks suppressed [ 656.572308][T24760] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5195'. [ 656.573280][T24767] 8021q: adding VLAN 0 to HW filter on device bond3 [ 656.589149][T24760] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5195'. [ 656.796855][T24785] netlink: 'syz.5.5202': attribute type 16 has an invalid length. [ 656.806315][T24785] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.5202'. [ 656.820845][T24785] tipc: Started in network mode [ 656.841147][T24785] tipc: Node identity 46918039edfb, cluster identity 4711 [ 656.858240][T24785] tipc: Enabled bearer , priority 0 [ 656.885218][T24789] syzkaller0: entered promiscuous mode [ 656.924921][T24789] syzkaller0: entered allmulticast mode [ 656.982032][T24789] tipc: Resetting bearer [ 656.997687][T24783] tipc: Resetting bearer [ 657.075329][T24783] tipc: Disabling bearer [ 657.156324][T24803] 8021q: VLANs not supported on tunl0 [ 657.200434][T24804] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 657.229638][T24804] bond4 (unregistering): Released all slaves [ 657.244745][T24807] netlink: 'syz.0.5208': attribute type 39 has an invalid length. [ 657.314904][T24807] hsr_slave_1 (unregistering): left promiscuous mode [ 657.324723][T24815] netlink: 'syz.7.5211': attribute type 3 has an invalid length. [ 657.332909][T24815] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5211'. [ 657.587105][T24834] bond1: option arp_interval: invalid value (18446744073709551615) [ 657.595390][T24834] bond1: option arp_interval: allowed values 0 - 2147483647 [ 657.620788][T24834] bond1 (unregistering): Released all slaves [ 657.686644][T24838] lo speed is unknown, defaulting to 1000 [ 657.707495][T24838] wg1 speed is unknown, defaulting to 1000 [ 657.715222][T24828] lo speed is unknown, defaulting to 1000 [ 657.743577][T24828] wg1 speed is unknown, defaulting to 1000 [ 658.217148][T24862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 658.230086][T24862] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5221'. [ 658.242327][T24862] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5221'. [ 658.252519][T24862] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 658.737180][T24879] tipc: Started in network mode [ 658.744561][T24879] tipc: Node identity be99e67dfb5b, cluster identity 4711 [ 658.768856][T24879] tipc: Enabled bearer , priority 0 [ 658.819758][T24881] syzkaller0: entered promiscuous mode [ 658.837730][T24881] syzkaller0: entered allmulticast mode [ 658.986652][T24876] tipc: Resetting bearer [ 659.043810][T24866] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5220'. [ 659.066657][T24866] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5220'. [ 659.091204][T24875] tipc: Resetting bearer [ 659.126070][T24875] tipc: Disabling bearer [ 659.247616][ T30] audit: type=1107 audit(1762526346.063:12): pid=24891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ó%‘^D¹ÄQ¯ [ 659.247616][ T30] 4Û®ÏN´– ¸æG' [ 659.274249][T24894] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5227'. [ 659.722644][T24923] lo speed is unknown, defaulting to 1000 [ 659.736908][T24923] wg1 speed is unknown, defaulting to 1000 [ 659.815887][T24906] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 660.090242][T24934] lo speed is unknown, defaulting to 1000 [ 660.110629][T24934] wg1 speed is unknown, defaulting to 1000 [ 660.179690][T24945] lo speed is unknown, defaulting to 1000 [ 660.263744][T24945] wg1 speed is unknown, defaulting to 1000 [ 660.442991][T24961] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5244'. [ 660.795800][T24983] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 661.021952][T24991] lo speed is unknown, defaulting to 1000 [ 661.105718][T24991] wg1 speed is unknown, defaulting to 1000 [ 661.121648][T24965] lo speed is unknown, defaulting to 1000 [ 661.126837][T24997] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 661.194243][T24965] wg1 speed is unknown, defaulting to 1000 [ 663.004956][T25026] __nla_validate_parse: 2 callbacks suppressed [ 663.004977][T25026] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5256'. [ 663.060783][T25026] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5256'. [ 663.749083][T25000] syz.6.5253: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_RETRY_MAYFAIL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 663.770054][T25000] CPU: 1 UID: 0 PID: 25000 Comm: syz.6.5253 Not tainted syzkaller #0 PREEMPT(full) [ 663.770085][T25000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 663.770100][T25000] Call Trace: [ 663.770109][T25000] [ 663.770119][T25000] dump_stack_lvl+0x189/0x250 [ 663.770222][T25000] ? __pfx_dump_stack_lvl+0x10/0x10 [ 663.770254][T25000] ? __pfx__printk+0x10/0x10 [ 663.770278][T25000] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 663.770311][T25000] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 663.770345][T25000] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 663.770379][T25000] warn_alloc+0x214/0x310 [ 663.770420][T25000] ? __pfx_warn_alloc+0x10/0x10 [ 663.770465][T25000] ? __get_vm_area_node+0x28f/0x300 [ 663.770497][T25000] ? veth_dev_init+0x368/0x570 [ 663.770524][T25000] __vmalloc_node_range_noprof+0x690/0x12d0 [ 663.770556][T25000] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 663.770621][T25000] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 663.770651][T25000] ? __kasan_kmalloc_large+0x1c/0xa0 [ 663.770689][T25000] ? rcu_is_watching+0x15/0xb0 [ 663.770714][T25000] ? veth_dev_init+0x368/0x570 [ 663.770737][T25000] __kvmalloc_node_noprof+0x674/0x910 [ 663.770769][T25000] ? veth_dev_init+0x368/0x570 [ 663.770793][T25000] ? __pfx_netdev_lock_cmp_fn+0x10/0x10 [ 663.770825][T25000] veth_dev_init+0x368/0x570 [ 663.770855][T25000] register_netdevice+0x6bf/0x1ae0 [ 663.770896][T25000] ? snprintf+0xda/0x120 [ 663.770924][T25000] ? __pfx_register_netdevice+0x10/0x10 [ 663.770952][T25000] ? __pfx_snprintf+0x10/0x10 [ 663.770978][T25000] ? __asan_memset+0x22/0x50 [ 663.771007][T25000] ? dev_addr_mod+0x2ce/0x3d0 [ 663.771039][T25000] veth_newlink+0x5d4/0xa60 [ 663.771064][T25000] ? __pfx_veth_newlink+0x10/0x10 [ 663.771083][T25000] ? css_rstat_updated+0x23a/0x4f0 [ 663.771117][T25000] ? __pfx_css_rstat_updated+0x10/0x10 [ 663.771247][T25000] ? validate_linkmsg+0x765/0x950 [ 663.771290][T25000] ? __pfx_veth_newlink+0x10/0x10 [ 663.771314][T25000] rtnl_newlink_create+0x310/0xb00 [ 663.771345][T25000] ? __mutex_lock+0x5bb/0x1350 [ 663.771371][T25000] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 663.771400][T25000] ? __pfx___mutex_lock+0x10/0x10 [ 663.771433][T25000] ? ns_capable+0x8a/0xf0 [ 663.771462][T25000] rtnl_newlink+0x16e4/0x1c80 [ 663.771484][T25000] ? ____sys_sendmsg+0x505/0x830 [ 663.771522][T25000] ? __pfx_rtnl_newlink+0x10/0x10 [ 663.771636][T25000] ? __lock_acquire+0xab9/0xd20 [ 663.771687][T25000] ? __pfx_rtnl_newlink+0x10/0x10 [ 663.771708][T25000] rtnetlink_rcv_msg+0x7cf/0xb70 [ 663.771746][T25000] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 663.771779][T25000] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 663.771810][T25000] ? ref_tracker_free+0x63a/0x7d0 [ 663.771833][T25000] ? __asan_memcpy+0x40/0x70 [ 663.771861][T25000] ? __pfx_ref_tracker_free+0x10/0x10 [ 663.771896][T25000] netlink_rcv_skb+0x208/0x470 [ 663.771921][T25000] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 663.771957][T25000] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 663.771993][T25000] ? netlink_deliver_tap+0x2e/0x1b0 [ 663.772026][T25000] netlink_unicast+0x82f/0x9e0 [ 663.772070][T25000] ? __pfx_netlink_unicast+0x10/0x10 [ 663.772105][T25000] ? netlink_sendmsg+0x642/0xb30 [ 663.772126][T25000] ? skb_put+0x11b/0x210 [ 663.772160][T25000] netlink_sendmsg+0x805/0xb30 [ 663.772200][T25000] ? __pfx_netlink_sendmsg+0x10/0x10 [ 663.772228][T25000] ? aa_sock_msg_perm+0xf1/0x1d0 [ 663.772263][T25000] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 663.772284][T25000] ? __pfx_netlink_sendmsg+0x10/0x10 [ 663.772308][T25000] __sock_sendmsg+0x21c/0x270 [ 663.772342][T25000] ____sys_sendmsg+0x505/0x830 [ 663.772373][T25000] ? __pfx_____sys_sendmsg+0x10/0x10 [ 663.772410][T25000] ? import_iovec+0x74/0xa0 [ 663.772443][T25000] ___sys_sendmsg+0x21f/0x2a0 [ 663.772471][T25000] ? __pfx____sys_sendmsg+0x10/0x10 [ 663.772539][T25000] ? __fget_files+0x2a/0x420 [ 663.772559][T25000] ? __fget_files+0x3a0/0x420 [ 663.772593][T25000] __x64_sys_sendmsg+0x19b/0x260 [ 663.772621][T25000] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 663.772667][T25000] ? do_syscall_64+0xbe/0xfa0 [ 663.772704][T25000] do_syscall_64+0xfa/0xfa0 [ 663.772734][T25000] ? lockdep_hardirqs_on+0x9c/0x150 [ 663.772766][T25000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.772788][T25000] ? clear_bhb_loop+0x60/0xb0 [ 663.772816][T25000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.772837][T25000] RIP: 0033:0x7f13c058f6c9 [ 663.772857][T25000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 663.772876][T25000] RSP: 002b:00007f13c13f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 663.772904][T25000] RAX: ffffffffffffffda RBX: 00007f13c07e5fa0 RCX: 00007f13c058f6c9 [ 663.772920][T25000] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000008 [ 663.772934][T25000] RBP: 00007f13c0611f91 R08: 0000000000000000 R09: 0000000000000000 [ 663.772948][T25000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 663.772961][T25000] R13: 00007f13c07e6038 R14: 00007f13c07e5fa0 R15: 00007ffccea4b0e8 [ 663.772999][T25000] [ 663.773019][T25000] Mem-Info: [ 664.292764][T25000] active_anon:12068 inactive_anon:0 isolated_anon:0 [ 664.292764][T25000] active_file:3511 inactive_file:40124 isolated_file:0 [ 664.292764][T25000] unevictable:768 dirty:162 writeback:0 [ 664.292764][T25000] slab_reclaimable:12797 slab_unreclaimable:148597 [ 664.292764][T25000] mapped:40966 shmem:4354 pagetables:1099 [ 664.292764][T25000] sec_pagetables:0 bounce:0 [ 664.292764][T25000] kernel_misc_reclaimable:0 [ 664.292764][T25000] free:1259277 free_pcp:12824 free_cma:0 [ 664.340256][T25000] Node 0 active_anon:48472kB inactive_anon:0kB active_file:14044kB inactive_file:160288kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:163864kB dirty:648kB writeback:0kB shmem:15880kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15440kB pagetables:4252kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 664.372356][T25000] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 664.402708][T25000] Node 0 DMA free:15356kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 664.435479][T25000] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 664.441315][T25000] Node 0 DMA32 free:1120000kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48772kB inactive_anon:0kB active_file:14044kB inactive_file:160288kB unevictable:1536kB writepending:648kB zspages:0kB present:3129332kB managed:2565140kB mlocked:0kB bounce:0kB free_pcp:41600kB local_pcp:18484kB free_cma:0kB [ 664.475350][T25000] lowmem_reserve[]: 0 0 0 0 0 [ 664.480123][T25000] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 664.510029][T25000] lowmem_reserve[]: 0 0 0 0 0 [ 664.514925][T25000] Node 1 Normal free:3901752kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:9696kB local_pcp:3424kB free_cma:0kB [ 664.548849][T25000] lowmem_reserve[]: 0 0 0 0 0 [ 664.553638][T25000] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 664.569307][T25000] Node 0 DMA32: 943*4kB (UME) 249*8kB (UME) 126*16kB (U) 2*32kB (ME) 3*64kB (UME) 109*128kB (UME) 117*256kB (U) 88*512kB (UME) 43*1024kB (UM) 6*2048kB (M) 236*4096kB (UM) = 1119972kB [ 664.588468][T25000] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 664.600266][T25000] Node 1 Normal: 202*4kB (UM) 58*8kB (UME) 38*16kB (UME) 259*32kB (UME) 86*64kB (UME) 18*128kB (UME) 3*256kB (UM) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3901752kB [ 664.619372][T25000] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 664.629005][T25000] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 664.638909][T25000] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 664.648786][T25000] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 664.659392][T25000] 47986 total pagecache pages [ 664.664160][T25000] 0 pages in swap cache [ 664.668614][T25000] Free swap = 124996kB [ 664.672883][T25000] Total swap = 124996kB [ 664.677165][T25000] 2097051 pages RAM [ 664.680985][T25000] 0 pages HighMem/MovableOnly [ 664.685913][T25000] 424124 pages reserved [ 664.690103][T25000] 0 pages cma reserved [ 666.040584][T25020] syzkaller1: entered promiscuous mode [ 666.054596][T25020] syzkaller1: entered allmulticast mode [ 666.076879][T25031] tipc: Enabling of bearer rejected, failed to enable media [ 666.396599][T25038] vti0: entered promiscuous mode [ 666.582229][T25044] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5262'. [ 666.822682][T25059] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5266'. [ 666.878775][T25060] lo speed is unknown, defaulting to 1000 [ 666.899306][T25060] wg1 speed is unknown, defaulting to 1000 [ 666.961573][T25069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5267'. [ 667.029337][T25073] netlink: 9 bytes leftover after parsing attributes in process `syz.5.5271'. [ 667.045529][T25073] netlink: 9 bytes leftover after parsing attributes in process `syz.5.5271'. [ 667.079558][T25055] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5267'. [ 667.135437][T25069] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5267'. [ 667.239975][T25079] netlink: 'syz.4.5272': attribute type 1 has an invalid length. [ 667.269747][T25079] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5272'. [ 667.970761][T25113] lo speed is unknown, defaulting to 1000 [ 667.981797][T25113] wg1 speed is unknown, defaulting to 1000 [ 668.324967][T25132] netlink: 'syz.5.5288': attribute type 4 has an invalid length. [ 668.405208][T25134] delete_channel: no stack [ 668.601787][T25141] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5290'. [ 668.838581][T25151] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5294'. [ 668.848039][T25151] team0: No ports can be present during mode change [ 668.907146][T25151] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5294'. [ 669.215177][T25178] tipc: Resetting bearer [ 669.240258][T25175] tipc: Enabling of bearer rejected, already enabled [ 669.317893][T25171] lo speed is unknown, defaulting to 1000 [ 669.334989][T25183] netlink: 'syz.7.5299': attribute type 8 has an invalid length. [ 669.424466][T25171] wg1 speed is unknown, defaulting to 1000 [ 669.553899][T25197] lo speed is unknown, defaulting to 1000 [ 669.672321][T25204] 8021q: adding VLAN 0 to HW filter on device bond4 [ 669.685202][T25183] lo speed is unknown, defaulting to 1000 [ 669.685754][T25197] wg1 speed is unknown, defaulting to 1000 [ 669.770899][T25183] wg1 speed is unknown, defaulting to 1000 [ 669.909523][T25213] IPVS: Error connecting to the multicast addr [ 670.400193][T25198] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5304'. [ 670.409401][T25198] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5304'. [ 670.483297][T25226] xt_TCPMSS: Only works on TCP SYN packets [ 670.761693][T25233] tipc: Enabled bearer , priority 0 [ 670.787340][T25236] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5311'. [ 670.825859][T25233] syzkaller0: entered promiscuous mode [ 670.831537][T25233] syzkaller0: entered allmulticast mode [ 670.891772][T25233] bond0: (slave rose0): Error: Device can not be enslaved while up [ 670.932373][T25239] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5314'. [ 670.948434][T25239] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5314'. [ 670.980252][T25243] tipc: Started in network mode [ 670.987687][T25243] tipc: Node identity , cluster identity 4711 [ 670.994165][T25243] tipc: Failed to obtain node identity [ 671.000312][T25243] tipc: Enabling of bearer rejected, failed to enable media [ 671.274676][T25258] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5319'. [ 671.399105][T25263] bond0: option all_slaves_active: invalid value (7) [ 671.414897][ T30] audit: type=1804 audit(1762526358.233:13): pid=25263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.5320" name="/newroot/35/cgroup.controllers" dev="tmpfs" ino=198 res=1 errno=0 [ 671.439164][ T30] audit: type=1800 audit(1762526358.233:14): pid=25263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5320" name="cgroup.controllers" dev="tmpfs" ino=198 res=0 errno=0 [ 671.464242][ T30] audit: type=1800 audit(1762526358.233:15): pid=25263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5320" name="cgroup.controllers" dev="tmpfs" ino=198 res=0 errno=0 [ 671.567856][T25267] tipc: Enabled bearer , priority 0 [ 671.580272][T25267] syzkaller0: entered promiscuous mode [ 671.586558][T25267] syzkaller0: entered allmulticast mode [ 671.607403][T25232] tipc: Resetting bearer [ 671.641842][T25232] tipc: Disabling bearer [ 671.676718][T25267] tipc: Resetting bearer [ 671.711745][T25266] tipc: Resetting bearer [ 671.745583][T25266] tipc: Disabling bearer [ 671.774194][T25278] netlink: 'syz.5.5325': attribute type 1 has an invalid length. [ 671.914682][T25283] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5326'. [ 671.959602][T25283] netlink: 'syz.6.5326': attribute type 1 has an invalid length. [ 672.065020][T12773] IPVS: starting estimator thread 0... [ 672.166069][T25295] IPVS: using max 24 ests per chain, 57600 per kthread [ 672.676161][T25320] bond1: up delay (32769) is not a multiple of miimon (6), value rounded to 32766 ms [ 672.715322][T25320] bond1: peer notification delay (7) is not a multiple of miimon (6), value rounded to 6 ms [ 672.750911][T25320] bond1: option resend_igmp: invalid value (17105) [ 672.779929][T25320] bond1: option resend_igmp: allowed values 0 - 255 [ 672.819883][T25320] bond1 (unregistering): Released all slaves [ 672.914228][T25330] lo speed is unknown, defaulting to 1000 [ 672.922368][T25330] wg1 speed is unknown, defaulting to 1000 [ 673.574972][T25364] netlink: 'syz.0.5347': attribute type 1 has an invalid length. [ 673.683098][T25375] __nla_validate_parse: 6 callbacks suppressed [ 673.683118][T25375] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.5349'. [ 673.728432][T25375] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 673.749378][T25377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5350'. [ 673.768927][T25377] netlink: 'syz.4.5350': attribute type 14 has an invalid length. [ 673.773435][T25380] sctp: [Deprecated]: syz.6.5352 (pid 25380) Use of int in maxseg socket option. [ 673.773435][T25380] Use struct sctp_assoc_value instead [ 673.804659][T25377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5350'. [ 673.814521][T25377] netlink: 'syz.4.5350': attribute type 14 has an invalid length. [ 673.975717][T25388] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5353'. [ 674.394798][T25403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5358'. [ 674.432992][T25373] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5348'. [ 674.444679][T25418] netlink: 'syz.0.5360': attribute type 9 has an invalid length. [ 674.444706][T25373] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5348'. [ 674.454069][T25418] netlink: 'syz.0.5360': attribute type 6 has an invalid length. [ 674.499932][T25420] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5360'. [ 674.561406][T25425] netlink: 'syz.4.5362': attribute type 10 has an invalid length. [ 674.873531][T25439] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode [ 674.888167][T25439] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode [ 675.002349][T25451] syzkaller1: entered promiscuous mode [ 675.014806][T25451] syzkaller1: entered allmulticast mode [ 675.725825][T25495] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5380'. [ 675.727492][T25486] block nbd5: server does not support multiple connections per device. [ 675.744109][T25486] block nbd5: shutting down sockets [ 675.760379][T25496] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5378'. [ 676.400421][T25513] lo speed is unknown, defaulting to 1000 [ 676.408561][T25513] wg1 speed is unknown, defaulting to 1000 [ 676.645307][T25518] syzkaller0: entered promiscuous mode [ 676.650847][T25518] syzkaller0: entered allmulticast mode [ 676.829460][T25526] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 676.898497][T25518] lo speed is unknown, defaulting to 1000 [ 676.909712][T25518] wg1 speed is unknown, defaulting to 1000 [ 676.940747][T25533] nicvf0: entered promiscuous mode [ 677.311287][T25559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 677.475827][T25565] mac80211_hwsim hwsim31 syzkaller0: Caught tx_queue_len zero misconfig [ 677.517902][T25565] netlink: 'syz.4.5401': attribute type 1 has an invalid length. [ 677.696422][T25568] bond1: Unable to set down delay as MII monitoring is disabled [ 677.709517][T25568] bond1 (unregistering): Released all slaves [ 677.876321][T25585] tipc: Enabled bearer , priority 0 [ 677.934145][T25585] tipc: Resetting bearer [ 678.068324][T25597] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 678.423947][T25612] siw: device registration error -23 [ 678.497206][T25623] lo speed is unknown, defaulting to 1000 [ 678.515653][T25623] wg1 speed is unknown, defaulting to 1000 [ 678.972582][T25633] tipc: Started in network mode [ 678.981876][T25633] tipc: Node identity a2c485472c8c, cluster identity 4711 [ 679.024807][T25633] tipc: Enabled bearer , priority 0 [ 679.053162][T25636] syzkaller0: entered promiscuous mode [ 679.060669][T25636] syzkaller0: entered allmulticast mode [ 679.081997][T25639] __nla_validate_parse: 6 callbacks suppressed [ 679.082015][T25639] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5420'. [ 679.099265][T25639] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5420'. [ 679.148808][T25633] tipc: Resetting bearer [ 679.195830][T25631] tipc: Resetting bearer [ 679.281901][T25631] tipc: Disabling bearer [ 679.388829][T25652] lo speed is unknown, defaulting to 1000 [ 679.410713][T25652] wg1 speed is unknown, defaulting to 1000 [ 679.527657][T25659] x_tables: duplicate underflow at hook 1 [ 679.601870][T25662] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5426'. [ 679.614612][T25661] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5428'. [ 679.813016][T25674] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5430'. [ 679.977783][T25683] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5432'. [ 680.011257][T25683] netem: change failed [ 680.066950][T25687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5433'. [ 680.536518][T25713] netlink: 'syz.5.5443': attribute type 8 has an invalid length. [ 681.353538][T25731] netlink: 'syz.4.5449': attribute type 12 has an invalid length. [ 681.418803][T25738] netlink: 87 bytes leftover after parsing attributes in process `syz.4.5449'. [ 681.495794][T25745] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5451'. [ 681.826735][T25759] lo speed is unknown, defaulting to 1000 [ 681.853786][T25759] wg1 speed is unknown, defaulting to 1000 [ 682.164732][T25777] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5461'. [ 682.300685][T25785] nla_validate_range_unsigned: 55 callbacks suppressed [ 682.300707][T25785] netlink: 'syz.5.5464': attribute type 11 has an invalid length. [ 682.708140][T25812] netlink: 'syz.4.5471': attribute type 4 has an invalid length. [ 682.721863][T25814] netlink: 'syz.4.5471': attribute type 4 has an invalid length. [ 682.748723][T25816] netlink: 'syz.7.5472': attribute type 23 has an invalid length. [ 682.808183][T25796] bond1 (unregistering): Released all slaves [ 682.897798][T25816] syzkaller0: refused to change device tx_queue_len [ 682.924633][T25821] netlink: 'syz.4.5473': attribute type 2 has an invalid length. [ 683.158796][T25838] tipc: Enabled bearer , priority 0 [ 683.198934][T25826] tipc: Disabling bearer [ 683.233410][T25842] netlink: 'syz.4.5478': attribute type 3 has an invalid length. [ 683.248389][T25842] openvswitch: netlink: Actions may not be safe on all matching packets [ 683.302742][T25842] lo speed is unknown, defaulting to 1000 [ 683.311464][T25842] wg1 speed is unknown, defaulting to 1000 [ 683.659145][T25856] netlink: 'syz.5.5483': attribute type 6 has an invalid length. [ 683.683674][T25856] netlink: 'syz.5.5483': attribute type 5 has an invalid length. [ 683.743711][T25856] netlink: 'syz.5.5483': attribute type 4 has an invalid length. [ 684.334537][T24249] Bluetooth: hci2: command 0x0405 tx timeout [ 684.469166][T25884] __nla_validate_parse: 6 callbacks suppressed [ 684.469188][T25884] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.5490'. [ 684.564677][T25878] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.5490'. [ 684.658441][T25893] tipc: Enabled bearer , priority 14 [ 685.015757][T25906] lo speed is unknown, defaulting to 1000 [ 685.144777][T25906] wg1 speed is unknown, defaulting to 1000 [ 685.608542][T25931] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5507'. [ 685.628883][T25931] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5507'. [ 685.664559][T25931] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5507'. [ 685.673723][T25931] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5507'. [ 685.731171][T25931] validate_nla: 1 callbacks suppressed [ 685.731192][T25931] netlink: 'syz.6.5507': attribute type 6 has an invalid length. [ 685.774539][T12773] tipc: Node number set to 1170400893 [ 685.840414][T25927] lo speed is unknown, defaulting to 1000 [ 685.860178][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.923398][T25927] wg1 speed is unknown, defaulting to 1000 [ 686.169857][T25953] wg1 speed is unknown, defaulting to 1000 [ 686.210506][T25953] wg1 speed is unknown, defaulting to 1000 [ 686.253828][T25953] wg1 speed is unknown, defaulting to 1000 [ 686.265282][T25962] xt_TCPMSS: Only works on TCP SYN packets [ 686.288220][T25953] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 686.331940][T25953] wg1 speed is unknown, defaulting to 1000 [ 686.347262][T25953] wg1 speed is unknown, defaulting to 1000 [ 686.355738][T25953] wg1 speed is unknown, defaulting to 1000 [ 686.364352][T25953] wg1 speed is unknown, defaulting to 1000 [ 686.373626][T25953] wg1 speed is unknown, defaulting to 1000 [ 686.383076][T25953] wg1 speed is unknown, defaulting to 1000 [ 686.398694][T25953] wg1 speed is unknown, defaulting to 1000 [ 686.408894][T25953] wg1 speed is unknown, defaulting to 1000 [ 686.417313][T25953] wg1 speed is unknown, defaulting to 1000 [ 686.666613][T25975] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 686.760158][T25977] macvtap0: entered promiscuous mode [ 686.803437][T25977] syz_tun: entered promiscuous mode [ 686.821592][T25977] syz_tun: left promiscuous mode [ 686.930839][T25975] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 687.019228][T25986] ip6gretap0: entered allmulticast mode [ 687.043251][T25992] ip6t_REJECT: ECHOREPLY is not supported [ 687.068061][T25991] lo speed is unknown, defaulting to 1000 [ 687.078194][T25975] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 687.110861][T25987] ip6erspan1: entered allmulticast mode [ 687.117227][T25991] wg1 speed is unknown, defaulting to 1000 [ 687.132729][T25991] wg1 speed is unknown, defaulting to 1000 [ 687.195483][T25975] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 687.413071][T19517] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.439063][T26006] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5528'. [ 687.484912][T26006] nbd: couldn't find a device at index 0 [ 687.736014][ T8371] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.753011][T26014] lo speed is unknown, defaulting to 1000 [ 687.760960][T26014] wg1 speed is unknown, defaulting to 1000 [ 687.769050][T26014] wg1 speed is unknown, defaulting to 1000 [ 687.907505][ T8371] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.911055][T26036] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5535'. [ 687.919635][ T8371] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 688.052574][T26029] netlink: 'syz.7.5534': attribute type 13 has an invalid length. [ 688.067872][T26036] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 688.068762][T26029] gretap0: refused to change device tx_queue_len [ 688.098113][T26029] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 688.464895][T26054] ip6tnl1: entered promiscuous mode [ 688.479528][T26063] x_tables: duplicate underflow at hook 3 [ 688.686226][T26075] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5548'. [ 688.702145][T26071] netlink: 'syz.5.5547': attribute type 1 has an invalid length. [ 689.053174][T26102] x_tables: duplicate underflow at hook 1 [ 689.116151][T26102] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5554'. [ 689.474694][T26119] netlink: 'syz.5.5559': attribute type 25 has an invalid length. [ 689.703392][T26133] __nla_validate_parse: 1 callbacks suppressed [ 689.703417][T26133] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5565'. [ 689.752413][T26133] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5565'. [ 689.761874][T26133] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5565'. [ 689.771794][T26137] netlink: 'syz.0.5566': attribute type 28 has an invalid length. [ 689.837535][T26140] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5567'. [ 689.841828][T26141] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 689.860370][T26145] netlink: 'syz.0.5566': attribute type 13 has an invalid length. [ 689.869694][T26145] netlink: 'syz.0.5566': attribute type 17 has an invalid length. [ 689.943647][T26145] tipc: Resetting bearer [ 689.989353][T26145] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5566'. [ 690.007259][T26145] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5566'. [ 690.317002][T26171] netem: incorrect gi model size [ 690.322557][T26171] netem: change failed [ 690.352138][T26173] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5576'. [ 690.361894][T26173] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5576'. [ 690.451110][T26171] netlink: 'syz.7.5575': attribute type 3 has an invalid length. [ 690.475602][T26171] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5575'. [ 690.596881][T26189] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5581'. [ 690.871273][T26203] lo speed is unknown, defaulting to 1000 [ 690.956815][T26203] wg1 speed is unknown, defaulting to 1000 [ 691.006423][T26203] wg1 speed is unknown, defaulting to 1000 [ 691.861609][T26215] wg1: left promiscuous mode [ 691.876868][T26215] wg1: left allmulticast mode [ 691.896478][T26215] bond1: left promiscuous mode [ 691.901417][T26215] bond1: left allmulticast mode [ 691.921040][T26215] bond2: left promiscuous mode [ 691.937123][T26215] tipc: Resetting bearer [ 691.943503][T26215] syzkaller0: left promiscuous mode [ 691.949121][T26215] syzkaller0: left allmulticast mode [ 691.960888][T26215] mac80211_hwsim hwsim30 wlan1: left promiscuous mode [ 691.968748][T26215] macsec1: left promiscuous mode [ 691.978901][T26215] gretap1: left promiscuous mode [ 691.990974][T26215] bridge5: left promiscuous mode [ 691.996554][T26215] bridge5: left allmulticast mode [ 692.005233][T26215] bond3: left promiscuous mode [ 692.010207][T26215] bond3: left allmulticast mode [ 692.626924][T26271] lo speed is unknown, defaulting to 1000 [ 692.635697][T26271] wg1 speed is unknown, defaulting to 1000 [ 692.646383][T26271] wg1 speed is unknown, defaulting to 1000 [ 693.087202][T26292] syzkaller0: entered promiscuous mode [ 693.104907][T26292] syzkaller0: entered allmulticast mode [ 693.336857][T26308] macvtap1: entered allmulticast mode [ 693.342848][T26308] dummy0: entered promiscuous mode [ 693.365294][T26308] dummy0: entered allmulticast mode [ 693.372509][T26308] team0: Device macvtap1 failed to register rx_handler [ 693.382227][T26308] dummy0: left allmulticast mode [ 693.388069][T26308] dummy0: left promiscuous mode [ 693.654078][T26325] tipc: Enabled bearer , priority 0 [ 693.714213][T26325] syzkaller0: entered promiscuous mode [ 693.745126][T26325] syzkaller0: entered allmulticast mode [ 693.753908][T26325] tipc: Resetting bearer [ 693.783249][T26324] tipc: Resetting bearer [ 694.272423][T26341] xt_hashlimit: size too large, truncated to 1048576 [ 695.542608][T26324] tipc: Disabling bearer [ 695.782389][T26354] syzkaller0: entered promiscuous mode [ 695.810509][T26354] syzkaller0: entered allmulticast mode [ 695.818780][T26354] tipc: Resetting bearer [ 695.892435][T26365] sctp: [Deprecated]: syz.7.5629 (pid 26365) Use of struct sctp_assoc_value in delayed_ack socket option. [ 695.892435][T26365] Use struct sctp_sack_info instead [ 696.598190][T26391] syzkaller0: entered promiscuous mode [ 696.603834][T26391] syzkaller0: entered allmulticast mode [ 696.643682][T26393] lo speed is unknown, defaulting to 1000 [ 696.651839][T26393] wg1 speed is unknown, defaulting to 1000 [ 696.662016][T26393] wg1 speed is unknown, defaulting to 1000 [ 696.786870][T26400] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20000 [ 697.045623][T26421] ipt_REJECT: TCP_RESET invalid for non-tcp [ 697.208807][T26428] lo speed is unknown, defaulting to 1000 [ 697.219268][T26428] wg1 speed is unknown, defaulting to 1000 [ 697.227511][T26428] wg1 speed is unknown, defaulting to 1000 [ 697.398887][T26439] __nla_validate_parse: 7 callbacks suppressed [ 697.398908][T26439] netlink: 332 bytes leftover after parsing attributes in process `syz.0.5645'. [ 697.425520][T26439] netlink: 'syz.0.5645': attribute type 9 has an invalid length. [ 697.446929][T26439] netlink: 'syz.0.5645': attribute type 5 has an invalid length. [ 699.472491][T26464] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5649'. [ 699.484477][T26464] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5649'. [ 699.523474][T26468] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5653'. [ 699.540237][T26468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5653'. [ 699.843427][T26485] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5657'. [ 699.923363][T26482] netlink: 137592 bytes leftover after parsing attributes in process `syz.6.5656'. [ 699.954506][T26482] ksmbd: Unknown IPC event: 1, ignore. [ 699.960812][T26482] netlink: 137592 bytes leftover after parsing attributes in process `syz.6.5656'. [ 699.965125][T26489] netlink: 'syz.5.5658': attribute type 1 has an invalid length. [ 699.971071][T26482] ksmbd: Unknown IPC event: 1, ignore. [ 700.004757][T26489] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5658'. [ 700.101616][T26494] xt_TCPMSS: Only works on TCP SYN packets [ 700.121060][T26492] lo speed is unknown, defaulting to 1000 [ 700.152406][T26492] wg1 speed is unknown, defaulting to 1000 [ 700.162545][T26496] batadv_slave_1: entered promiscuous mode [ 700.171875][T26496] batman_adv: batadv0: Adding interface: macvlan2 [ 700.179539][T26496] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.234768][T26496] batman_adv: batadv0: Interface activated: macvlan2 [ 700.254179][T26492] wg1 speed is unknown, defaulting to 1000 [ 700.366806][T26504] warn_alloc: 1 callbacks suppressed [ 700.366827][T26504] syz.6.5663: vmalloc error: size 5758976, failed to allocated page array size 11248, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 700.415287][T26504] CPU: 1 UID: 0 PID: 26504 Comm: syz.6.5663 Not tainted syzkaller #0 PREEMPT(full) [ 700.415319][T26504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 700.415333][T26504] Call Trace: [ 700.415342][T26504] [ 700.415352][T26504] dump_stack_lvl+0x189/0x250 [ 700.415390][T26504] ? __pfx_dump_stack_lvl+0x10/0x10 [ 700.415419][T26504] ? __pfx__printk+0x10/0x10 [ 700.415443][T26504] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 700.415473][T26504] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 700.415504][T26504] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 700.415536][T26504] warn_alloc+0x214/0x310 [ 700.415586][T26504] ? __pfx_warn_alloc+0x10/0x10 [ 700.415629][T26504] ? __get_vm_area_node+0x28f/0x300 [ 700.415660][T26504] ? bpf_check+0x1aa/0x1d720 [ 700.415693][T26504] __vmalloc_node_range_noprof+0x690/0x12d0 [ 700.415755][T26504] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 700.415786][T26504] ? rcu_is_watching+0x15/0xb0 [ 700.415811][T26504] ? trace_kmalloc+0x1f/0xd0 [ 700.415837][T26504] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 700.415869][T26504] ? bpf_check+0x1aa/0x1d720 [ 700.415904][T26504] vzalloc_noprof+0xb2/0xf0 [ 700.415938][T26504] ? bpf_check+0x1aa/0x1d720 [ 700.415969][T26504] bpf_check+0x1aa/0x1d720 [ 700.415998][T26504] ? page_table_check_set+0x18d/0x730 [ 700.416029][T26504] ? page_table_check_set+0x18d/0x730 [ 700.416069][T26504] ? __handle_mm_fault+0x3ac9/0x5400 [ 700.416102][T26504] ? __handle_mm_fault+0x3ada/0x5400 [ 700.416138][T26504] ? css_rstat_updated+0x23a/0x4f0 [ 700.416171][T26504] ? __pfx_css_rstat_updated+0x10/0x10 [ 700.416216][T26504] ? count_memcg_event_mm+0x21/0x260 [ 700.416246][T26504] ? __up_read+0x280/0x680 [ 700.416282][T26504] ? __lock_acquire+0xab9/0xd20 [ 700.416311][T26504] ? __pfx_bpf_check+0x10/0x10 [ 700.416351][T26504] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 700.416379][T26504] ? lockdep_hardirqs_on+0x9c/0x150 [ 700.416412][T26504] ? ktime_get_with_offset+0x93/0x2a0 [ 700.416438][T26504] ? seqcount_lockdep_reader_access+0x174/0x1c0 [ 700.416465][T26504] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 700.416505][T26504] ? __asan_memset+0x22/0x50 [ 700.416534][T26504] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 700.416559][T26504] ? security_bpf_prog_load+0x125/0x3f0 [ 700.416601][T26504] bpf_prog_load+0x13ba/0x19e0 [ 700.416637][T26504] ? __pfx_bpf_prog_load+0x10/0x10 [ 700.416683][T26504] ? bpf_lsm_bpf+0x9/0x20 [ 700.416706][T26504] ? security_bpf+0x7e/0x300 [ 700.416736][T26504] __sys_bpf+0x507/0x860 [ 700.416759][T26504] ? __pfx___sys_bpf+0x10/0x10 [ 700.416801][T26504] ? rcu_is_watching+0x15/0xb0 [ 700.416834][T26504] __x64_sys_bpf+0x7c/0x90 [ 700.416865][T26504] do_syscall_64+0xfa/0xfa0 [ 700.416895][T26504] ? lockdep_hardirqs_on+0x9c/0x150 [ 700.416925][T26504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.416947][T26504] ? clear_bhb_loop+0x60/0xb0 [ 700.416973][T26504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.416993][T26504] RIP: 0033:0x7f13c058f6c9 [ 700.417012][T26504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 700.417032][T26504] RSP: 002b:00007f13c13b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 700.417055][T26504] RAX: ffffffffffffffda RBX: 00007f13c07e6180 RCX: 00007f13c058f6c9 [ 700.417071][T26504] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 700.417085][T26504] RBP: 00007f13c0611f91 R08: 0000000000000000 R09: 0000000000000000 [ 700.417098][T26504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 700.417110][T26504] R13: 00007f13c07e6218 R14: 00007f13c07e6180 R15: 00007ffccea4b0e8 [ 700.417146][T26504] [ 700.417155][T26504] Mem-Info: [ 700.854826][T26504] active_anon:6961 inactive_anon:0 isolated_anon:0 [ 700.854826][T26504] active_file:3511 inactive_file:40138 isolated_file:0 [ 700.854826][T26504] unevictable:768 dirty:269 writeback:0 [ 700.854826][T26504] slab_reclaimable:12703 slab_unreclaimable:159801 [ 700.854826][T26504] mapped:32312 shmem:2284 pagetables:1128 [ 700.854826][T26504] sec_pagetables:0 bounce:0 [ 700.854826][T26504] kernel_misc_reclaimable:0 [ 700.854826][T26504] free:1253616 free_pcp:13333 free_cma:0 [ 701.094393][T26504] Node 0 active_anon:35892kB inactive_anon:0kB active_file:14044kB inactive_file:160344kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:136536kB dirty:1084kB writeback:0kB shmem:15020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15764kB pagetables:4192kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 701.220410][T26504] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 701.337074][T26504] Node 0 DMA free:15356kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 701.506424][T26504] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 701.512383][T26504] Node 0 DMA32 free:1087672kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35892kB inactive_anon:0kB active_file:14044kB inactive_file:160344kB unevictable:1536kB writepending:1084kB zspages:0kB present:3129332kB managed:2565140kB mlocked:0kB bounce:0kB free_pcp:44952kB local_pcp:21448kB free_cma:0kB [ 701.622773][T26504] lowmem_reserve[]: 0 0 0 0 0 [ 701.665366][T26504] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 701.758165][T26504] lowmem_reserve[]: 0 0 0 0 0 [ 701.783529][T26538] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8 [ 701.794101][T26504] Node 1 Normal free:3902780kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:8676kB local_pcp:3168kB free_cma:0kB [ 701.837715][T26504] lowmem_reserve[]: 0 0 0 0 0 [ 701.843241][T26504] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 701.893868][T26504] Node 0 DMA32: 716*4kB (UME) 673*8kB (UME) 152*16kB (UME) 525*32kB (UME) 204*64kB (UME) 141*128kB (UME) 158*256kB (UM) 115*512kB (UME) 53*1024kB (UM) 5*2048kB (U) 212*4096kB (UM) = 1090776kB [ 701.920078][T26544] netlink: 'syz.4.5668': attribute type 2 has an invalid length. [ 701.931101][T26504] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 701.962965][T26504] Node 1 Normal: 203*4kB (UM) 58*8kB (UME) 38*16kB (UME) 265*32kB (UME) 95*64kB (UME) 20*128kB (UME) 3*256kB (UM) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3902780kB [ 702.012853][T26542] syzkaller1: entered promiscuous mode [ 702.018939][T26542] syzkaller1: entered allmulticast mode [ 702.034416][T26504] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 702.059999][T26504] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 702.074484][T26504] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 702.084396][T26504] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 702.104454][T26504] 45132 total pagecache pages [ 702.128475][T26504] 0 pages in swap cache [ 702.142929][T26504] Free swap = 124996kB [ 702.159336][T26504] Total swap = 124996kB [ 702.195567][T26504] 2097051 pages RAM [ 702.199619][T26504] 0 pages HighMem/MovableOnly [ 702.226875][T26504] 424124 pages reserved [ 702.231110][T26504] 0 pages cma reserved [ 702.268777][T26551] IPv6: addrconf: prefix option has invalid lifetime [ 702.275583][T26551] IPv6: addrconf: prefix option has invalid lifetime [ 702.328873][T26553] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5671'. [ 702.539509][T26553] nbd: socks must be embedded in a SOCK_ITEM attr [ 702.767212][T26564] dummy0: entered promiscuous mode [ 702.772682][T26564] macsec1: entered promiscuous mode [ 702.778634][T26564] macsec1: entered allmulticast mode [ 702.784091][T26564] dummy0: entered allmulticast mode [ 702.792736][T26564] dummy0: left allmulticast mode [ 702.806812][T26564] dummy0: left promiscuous mode [ 702.946992][T26571] lo speed is unknown, defaulting to 1000 [ 702.976249][T26571] wg1 speed is unknown, defaulting to 1000 [ 703.015105][T26571] wg1 speed is unknown, defaulting to 1000 [ 703.512740][T26601] netlink: 'syz.7.5683': attribute type 1 has an invalid length. [ 703.601243][T26606] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5684'. [ 703.810015][T26607] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 703.851528][T26601] 8021q: adding VLAN 0 to HW filter on device bond1 [ 703.874611][ T8362] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 703.976854][T26608] veth5: entered promiscuous mode [ 703.989252][T26608] bond1: (slave veth5): Enslaving as a backup interface with a down link [ 704.019101][ T8360] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 704.032654][T26617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5685'. [ 704.066345][T26621] syzkaller0: entered promiscuous mode [ 704.092449][T26621] syzkaller0: entered allmulticast mode [ 704.113963][T26617] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5685'. [ 704.133865][T26617] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5685'. [ 704.222639][T26626] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 704.249107][T26621] tipc: Enabled bearer , priority 0 [ 704.355652][T26621] tipc: Resetting bearer [ 704.502956][T26621] tipc: Disabling bearer [ 704.537585][T26642] ip6tnl1: entered promiscuous mode [ 704.542850][T26642] ip6tnl1: entered allmulticast mode [ 704.613877][T26647] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5693'. [ 705.261849][T26664] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5698'. [ 705.271781][T26664] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5698'. [ 705.413678][T26688] lo speed is unknown, defaulting to 1000 [ 705.422273][T26688] wg1 speed is unknown, defaulting to 1000 [ 705.431499][T26688] wg1 speed is unknown, defaulting to 1000 [ 705.858785][T26714] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5712'. [ 705.874267][T26712] lo speed is unknown, defaulting to 1000 [ 705.882335][T26712] wg1 speed is unknown, defaulting to 1000 [ 705.891041][T26712] wg1 speed is unknown, defaulting to 1000 [ 706.443735][T26737] tipc: Enabled bearer , priority 0 [ 706.451962][T26737] syzkaller0: entered promiscuous mode [ 706.460691][T26737] syzkaller0: entered allmulticast mode [ 706.483310][T26737] tipc: Resetting bearer [ 706.493880][T26736] tipc: Resetting bearer [ 706.535590][T26736] tipc: Disabling bearer [ 707.072114][T26752] netlink: 'syz.5.5723': attribute type 16 has an invalid length. [ 707.081146][T26752] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5723'. [ 707.108897][T26752] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5723'. [ 707.594077][T26766] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20001 [ 707.988653][T26779] netlink: 'syz.7.5730': attribute type 3 has an invalid length. [ 708.101420][T26784] Bluetooth: MGMT ver 1.23 [ 708.141176][T26779] nbd: socks must be embedded in a SOCK_ITEM attr [ 708.638809][T26803] netlink: 'syz.7.5736': attribute type 1 has an invalid length. [ 708.768463][T26803] 8021q: adding VLAN 0 to HW filter on device bond2 [ 708.823067][T26815] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 708.838895][T26809] veth7: entered promiscuous mode [ 708.849413][T26809] bond2: (slave veth7): Enslaving as an active interface with a down link [ 708.876365][T26817] RDS: rds_bind could not find a transport for ::ffff:172.30.1.6, load rds_tcp or rds_rdma? [ 708.920776][T26811] bridge_slave_0: left allmulticast mode [ 708.945907][T26811] bridge_slave_0: left promiscuous mode [ 708.951867][T26811] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.964786][T26811] bridge_slave_1: left allmulticast mode [ 708.970712][T26811] bridge_slave_1: left promiscuous mode [ 708.979591][T26811] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.997571][T26811] bond0: (slave bond_slave_0): Releasing backup interface [ 709.009345][T26811] bond_slave_0: left promiscuous mode [ 709.027982][T26811] bond_slave_0: left allmulticast mode [ 709.038935][T26811] bond0: (slave bond_slave_1): Releasing backup interface [ 709.047169][T26811] bond_slave_1: left promiscuous mode [ 709.052968][T26811] bond_slave_1: left allmulticast mode [ 709.131896][T26811] team0: Port device team_slave_0 removed [ 709.150630][T26811] team0: Port device team_slave_1 removed [ 709.158118][T26811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 709.166572][T26811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 709.176383][T26811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 709.187631][T26811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 709.198247][T26811] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 709.484257][T26839] netlink: 'syz.7.5746': attribute type 29 has an invalid length. [ 709.496080][T26839] C: renamed from lo (while UP) [ 709.503862][T26839] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 709.525651][T26839] netlink: 'syz.7.5746': attribute type 29 has an invalid length. [ 709.534260][T26826] __nla_validate_parse: 5 callbacks suppressed [ 709.538077][T26839] netlink: 500 bytes leftover after parsing attributes in process `syz.7.5746'. [ 709.604825][T26826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5742'. [ 709.624780][T26826] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5742'. [ 709.658274][T26843] netlink: 'syz.7.5748': attribute type 1 has an invalid length. [ 709.671681][T26843] netlink: 224 bytes leftover after parsing attributes in process `syz.7.5748'. [ 709.772433][T26847] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 709.781624][T26847] syzkaller1: linktype set to 768 [ 710.108955][T26855] lo speed is unknown, defaulting to 1000 [ 710.175740][T21452] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 710.182992][T21452] Bluetooth: hci0: command 0x0c1a tx timeout [ 710.209179][T26855] wg1 speed is unknown, defaulting to 1000 [ 710.309753][T26855] wg1 speed is unknown, defaulting to 1000 [ 710.437500][T26874] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5760'. [ 710.492185][T26869] netlink: 'syz.0.5758': attribute type 2 has an invalid length. [ 710.514463][T26869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5758'. [ 710.565656][T26874] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5760'. [ 710.784626][T26885] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 710.886490][T26885] bond5: Unable to set down delay as MII monitoring is disabled [ 710.913075][T26885] bond5 (unregistering): Released all slaves [ 711.458431][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 711.481895][T26917] netlink: 'syz.7.5770': attribute type 1 has an invalid length. [ 711.633098][T26917] 8021q: adding VLAN 0 to HW filter on device bond3 [ 711.753517][T26919] 8021q: adding VLAN 0 to HW filter on device bond3 [ 711.771165][T26919] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 711.778005][T26928] IPVS: length: 63 != 24 [ 711.805581][T26906] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5767'. [ 711.811538][T26919] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 711.836620][T26906] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5767'. [ 712.405917][T26954] tipc: Enabling of bearer rejected, already enabled [ 712.513164][T26954] syzkaller0: mtu less than device minimum [ 712.619527][T26966] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5780'. [ 712.653429][T26963] netlink: 'syz.7.5779': attribute type 3 has an invalid length. [ 712.899856][T26976] lo speed is unknown, defaulting to 1000 [ 712.907830][T26976] wg1 speed is unknown, defaulting to 1000 [ 712.918328][T26976] wg1 speed is unknown, defaulting to 1000 [ 713.396720][T26994] IPVS: set_ctl: invalid protocol: 46 172.30.0.1:20003 [ 713.485772][T26999] sctp: [Deprecated]: syz.7.5788 (pid 26999) Use of struct sctp_assoc_value in delayed_ack socket option. [ 713.485772][T26999] Use struct sctp_sack_info instead [ 714.492466][T27054] 8021q: adding VLAN 0 to HW filter on device bond5 [ 714.551442][T27054] tipc: Enabling of bearer rejected, already enabled [ 714.580463][T27054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 714.599412][T27054] bond5: (slave bond0): Enslaving as an active interface with an up link [ 714.689627][T27064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 714.862492][T27054] bond5 (unregistering): (slave bond0): Releasing backup interface [ 714.877414][T27054] bond5 (unregistering): Released all slaves [ 714.903613][T27065] __nla_validate_parse: 7 callbacks suppressed [ 714.903633][T27065] netlink: 176 bytes leftover after parsing attributes in process `syz.6.5807'. [ 715.217991][T27080] tipc: Enabling of bearer rejected, already enabled [ 715.312435][T27080] tipc: Resetting bearer [ 715.559705][T27095] sctp: [Deprecated]: syz.5.5815 (pid 27095) Use of int in max_burst socket option. [ 715.559705][T27095] Use struct sctp_assoc_value instead [ 715.585212][T27097] netlink: 604 bytes leftover after parsing attributes in process `syz.4.5809'. [ 715.605584][T27075] netlink: 'syz.4.5809': attribute type 29 has an invalid length. [ 715.624663][T27095] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5815'. [ 715.642751][T27086] netlink: 'syz.4.5809': attribute type 29 has an invalid length. [ 715.643437][T27095] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5815'. [ 715.684867][T27100] netlink: 80 bytes leftover after parsing attributes in process `syz.7.5817'. [ 715.815446][T27108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5820'. [ 716.057851][T27125] tipc: Enabling of bearer rejected, already enabled [ 716.068451][T27125] tipc: Resetting bearer [ 717.430385][T27174] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5837'. [ 717.662155][T27184] lo speed is unknown, defaulting to 1000 [ 717.748712][T27192] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9 [ 717.761114][T27184] wg1 speed is unknown, defaulting to 1000 [ 717.769510][T27184] wg1 speed is unknown, defaulting to 1000 [ 717.807191][T27188] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5838'. [ 717.838579][T27188] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5838'. [ 717.926476][T27196] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5844'. [ 718.618415][T27216] IPVS: Scheduler module ip_vs_sip not found [ 718.873301][T27225] openvswitch: netlink: nsh attribute has 996 unknown bytes. [ 718.884399][T27225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 719.039645][T27236] pimreg: tun_chr_ioctl cmd 2147767506 [ 719.305958][T27246] lo speed is unknown, defaulting to 1000 [ 719.320063][T27246] wg1 speed is unknown, defaulting to 1000 [ 719.337468][T27246] wg1 speed is unknown, defaulting to 1000 [ 719.472240][T27259] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 719.492421][ T30] audit: type=1800 audit(1762526406.303:16): pid=27254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5855" name="memory.events" dev="tmpfs" ino=2878 res=0 errno=0 [ 719.599473][T27264] netlink: 'syz.4.5858': attribute type 12 has an invalid length. [ 719.650524][T27264] netlink: 'syz.4.5858': attribute type 4 has an invalid length. [ 720.142942][T27282] __nla_validate_parse: 3 callbacks suppressed [ 720.142963][T27282] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5862'. [ 720.179731][T27283] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5863'. [ 720.211649][T27283] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5863'. [ 720.238840][T27283] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5863'. [ 720.279973][T27283] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5863'. [ 720.315002][T27283] netlink: 336 bytes leftover after parsing attributes in process `syz.5.5863'. [ 720.325156][T27288] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5864'. [ 720.342819][T27288] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5864'. [ 720.642868][T27306] nbd: couldn't find device at index 536870912 [ 720.740487][T27316] netlink: 'syz.0.5873': attribute type 1 has an invalid length. [ 720.790845][T27319] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5874'. [ 720.825217][T27315] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 720.868153][T27321] lo speed is unknown, defaulting to 1000 [ 720.876246][T27321] wg1 speed is unknown, defaulting to 1000 [ 720.883865][T27321] wg1 speed is unknown, defaulting to 1000 [ 720.977947][T27311] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5871'. [ 721.059606][T27334] netlink: 'syz.0.5879': attribute type 10 has an invalid length. [ 721.336076][T27348] lo: entered allmulticast mode [ 721.357050][T27343] lo: left allmulticast mode [ 721.606591][T27354] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 723.431972][T27371] lo speed is unknown, defaulting to 1000 [ 723.472642][T27371] wg1 speed is unknown, defaulting to 1000 [ 723.507933][T27371] wg1 speed is unknown, defaulting to 1000 [ 723.878881][T27401] lo speed is unknown, defaulting to 1000 [ 723.899346][T27401] wg1 speed is unknown, defaulting to 1000 [ 723.907548][T27401] wg1 speed is unknown, defaulting to 1000 [ 724.372270][T27416] : entered promiscuous mode [ 724.484214][T27423] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 724.847991][T27434] netlink: 'syz.7.5905': attribute type 6 has an invalid length. [ 724.858356][T27434] netlink: 'syz.7.5905': attribute type 5 has an invalid length. [ 724.873556][T27434] netlink: 'syz.7.5905': attribute type 4 has an invalid length. [ 724.919562][T27434] netlink: 'syz.7.5905': attribute type 4 has an invalid length. [ 724.954989][T27440] lo speed is unknown, defaulting to 1000 [ 724.963981][T27440] wg1 speed is unknown, defaulting to 1000 [ 724.965904][T27434] lo speed is unknown, defaulting to 1000 [ 724.973038][T27440] wg1 speed is unknown, defaulting to 1000 [ 725.001992][T27434] wg1 speed is unknown, defaulting to 1000 [ 725.011085][T27434] wg1 speed is unknown, defaulting to 1000 [ 725.334842][T27453] bridge0: port 3(vlan2) entered blocking state [ 725.341500][T27453] bridge0: port 3(vlan2) entered disabled state [ 725.348736][T27453] vlan2: entered allmulticast mode [ 725.354124][T27453] bridge0: entered allmulticast mode [ 725.370698][T27453] vlan2: left allmulticast mode [ 725.376257][T27453] bridge0: left allmulticast mode [ 725.526393][T27462] __nla_validate_parse: 9 callbacks suppressed [ 725.526413][T27462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5912'. [ 725.543546][T27462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5912'. [ 725.628567][T27469] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 725.640384][T27470] x_tables: duplicate underflow at hook 2 [ 725.777715][T27475] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5916'. [ 726.009546][T27483] lo speed is unknown, defaulting to 1000 [ 726.017800][T27483] wg1 speed is unknown, defaulting to 1000 [ 726.025917][T27483] wg1 speed is unknown, defaulting to 1000 [ 726.324365][T27493] netlink: 'syz.5.5921': attribute type 1 has an invalid length. [ 726.405846][T27497] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5923'. [ 726.553443][T27497] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5923'. [ 726.606043][T27497] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5923'. [ 726.656984][T27504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5924'. [ 726.666533][T27504] netlink: 'syz.0.5924': attribute type 3 has an invalid length. [ 727.236098][T27517] lo speed is unknown, defaulting to 1000 [ 727.245908][T27517] wg1 speed is unknown, defaulting to 1000 [ 727.276459][T27517] wg1 speed is unknown, defaulting to 1000 [ 727.297378][T27522] netlink: 84 bytes leftover after parsing attributes in process `syz.7.5931'. [ 727.329185][T27522] netlink: 84 bytes leftover after parsing attributes in process `syz.7.5931'. [ 727.397532][T27530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5932'. [ 727.601472][T27534] lo speed is unknown, defaulting to 1000 [ 727.633052][T27534] wg1 speed is unknown, defaulting to 1000 [ 727.657644][T27534] wg1 speed is unknown, defaulting to 1000 [ 727.762328][T27542] macvtap0: entered promiscuous mode [ 727.772962][T27542] macvtap0: entered allmulticast mode [ 727.790094][T27542] veth1_to_bridge: entered allmulticast mode [ 727.797392][T27542] veth1_to_bridge: entered promiscuous mode [ 727.806688][T27542] team0: Device macvtap0 failed to register rx_handler [ 727.820029][T27542] veth1_to_bridge: left allmulticast mode [ 727.826937][T27542] veth1_to_bridge: left promiscuous mode [ 727.878639][T27543] macvtap0: entered promiscuous mode [ 727.884130][T27543] macvtap0: entered allmulticast mode [ 727.890594][T27543] veth1_to_bridge: entered allmulticast mode [ 727.897189][T27543] veth1_to_bridge: entered promiscuous mode [ 727.907532][T27543] team0: Device macvtap0 failed to register rx_handler [ 727.919814][T27543] veth1_to_bridge: left allmulticast mode [ 727.926320][T27543] veth1_to_bridge: left promiscuous mode [ 728.005225][T27550] dvmrp1: tun_chr_ioctl cmd 1074025673 [ 728.187749][T27558] pim6reg: entered allmulticast mode [ 728.207970][T27558] pim6reg: left allmulticast mode [ 729.781695][T27609] netlink: 'syz.0.5953': attribute type 2 has an invalid length. [ 729.792309][T27609] netlink: 'syz.0.5953': attribute type 1 has an invalid length. [ 729.808294][T27609] tipc: Enabling of bearer rejected, already enabled [ 730.441014][T27635] bridge6: entered promiscuous mode [ 730.523824][T27639] tipc: Enabled bearer , priority 0 [ 730.543700][T27639] syzkaller0: entered promiscuous mode [ 730.574572][T27639] syzkaller0: entered allmulticast mode [ 730.574673][T21452] Bluetooth: hci2: command 0x0405 tx timeout [ 730.615891][T27639] __nla_validate_parse: 6 callbacks suppressed [ 730.615909][T27639] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5963'. [ 730.776836][T27653] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5966'. [ 730.797820][T27639] tipc: Resetting bearer [ 730.889504][T27655] tipc: Resetting bearer [ 730.945988][T27655] tipc: Disabling bearer [ 731.056443][T27653] lo speed is unknown, defaulting to 1000 [ 731.064094][T27653] wg1 speed is unknown, defaulting to 1000 [ 731.174576][T27653] wg1 speed is unknown, defaulting to 1000 [ 731.195877][T27675] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5971'. [ 731.264550][T27664] lo speed is unknown, defaulting to 1000 [ 731.361511][T27664] wg1 speed is unknown, defaulting to 1000 [ 731.441462][T27686] lo speed is unknown, defaulting to 1000 [ 731.450008][T27664] wg1 speed is unknown, defaulting to 1000 [ 731.469072][T27686] wg1 speed is unknown, defaulting to 1000 [ 731.551457][T27686] wg1 speed is unknown, defaulting to 1000 [ 731.689175][T27692] lo speed is unknown, defaulting to 1000 [ 731.844743][T27692] wg1 speed is unknown, defaulting to 1000 [ 731.925861][T27692] wg1 speed is unknown, defaulting to 1000 [ 732.214671][T27713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5978'. [ 732.226491][T27713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5978'. [ 732.376157][T27713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5978'. [ 732.394198][T27713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5978'. [ 732.469130][T27722] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5981'. [ 732.555163][T27722] Cannot find add_set index 2 as target [ 732.912634][T27723] lo speed is unknown, defaulting to 1000 [ 732.948673][T27723] wg1 speed is unknown, defaulting to 1000 [ 732.956558][T27723] wg1 speed is unknown, defaulting to 1000 [ 733.151760][T27748] ipvlan2: entered promiscuous mode [ 733.159513][T27748] bridge0: port 1(ipvlan2) entered blocking state [ 733.167869][T27748] bridge0: port 1(ipvlan2) entered disabled state [ 733.176111][T27748] ipvlan2: entered allmulticast mode [ 733.181655][T27748] bridge0: entered allmulticast mode [ 733.190539][T27748] ipvlan2: left allmulticast mode [ 733.196296][T27748] bridge0: left allmulticast mode [ 733.766297][T27770] netlink: 'syz.0.5994': attribute type 1 has an invalid length. [ 733.799726][T27766] netlink: 140 bytes leftover after parsing attributes in process `syz.5.5992'. [ 733.919307][T27779] xt_bpf: check failed: parse error [ 733.936865][T27779] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5996'. [ 733.957768][T27779] netlink: 'syz.6.5996': attribute type 6 has an invalid length. [ 733.973650][T27779] netlink: 'syz.6.5996': attribute type 5 has an invalid length. [ 733.983827][T27785] sctp: [Deprecated]: syz.7.5998 (pid 27785) Use of struct sctp_assoc_value in delayed_ack socket option. [ 733.983827][T27785] Use struct sctp_sack_info instead [ 734.077747][T27789] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20004 [ 734.400304][T27806] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.117066][T27806] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.248852][T27806] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.299866][T27834] netlink: 'syz.6.6010': attribute type 64 has an invalid length. [ 735.397144][T27806] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.618892][T27850] 8021q: adding VLAN 0 to HW filter on device ` [ 735.650407][T27850] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 735.681202][T27847] lo speed is unknown, defaulting to 1000 [ 735.689445][T27847] wg1 speed is unknown, defaulting to 1000 [ 735.743096][ T8327] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.760063][T27847] wg1 speed is unknown, defaulting to 1000 [ 735.806028][ T8364] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.897064][T27862] __nla_validate_parse: 7 callbacks suppressed [ 735.897084][T27862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6016'. [ 735.925018][ T8364] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.978007][ T8327] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.192093][T27873] lo speed is unknown, defaulting to 1000 [ 736.200946][T27875] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6021'. [ 736.256484][T27873] wg1 speed is unknown, defaulting to 1000 [ 736.288835][T27873] wg1 speed is unknown, defaulting to 1000 [ 736.699667][T27894] lo speed is unknown, defaulting to 1000 [ 736.757084][T27898] can: request_module (can-proto-0) failed. [ 736.810268][T27894] wg1 speed is unknown, defaulting to 1000 [ 736.925516][T27894] wg1 speed is unknown, defaulting to 1000 [ 737.268363][T27915] netlink: 'syz.6.6030': attribute type 13 has an invalid length. [ 737.288408][T27916] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 737.973625][T27944] lo speed is unknown, defaulting to 1000 [ 738.007487][T27944] wg1 speed is unknown, defaulting to 1000 [ 738.023237][T27944] wg1 speed is unknown, defaulting to 1000 [ 738.729136][T24249] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 738.744657][T24249] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 738.756072][T24249] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 738.779181][T24249] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 738.788179][T24249] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 738.902649][T27959] lo speed is unknown, defaulting to 1000 [ 738.946700][T27959] wg1 speed is unknown, defaulting to 1000 [ 738.958724][T27959] wg1 speed is unknown, defaulting to 1000 [ 739.009259][T27952] delete_channel: no stack [ 739.730339][T27959] chnl_net:caif_netlink_parms(): no params data found [ 739.891378][T27976] slab net_namespace start ffff888027398000 pointer offset 4344 size 9280 [ 739.900633][T27976] list_del corruption. prev->next should be ffff88806632f708, but was ffff88806632edc8. (prev=ffff8880273990f8) [ 739.913114][T27976] ------------[ cut here ]------------ [ 739.918642][T27976] kernel BUG at lib/list_debug.c:64! [ 739.923995][T27976] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 739.930266][T27976] CPU: 0 UID: 0 PID: 27976 Comm: syz.4.6049 Not tainted syzkaller #0 PREEMPT(full) [ 739.939664][T27976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 739.949749][T27976] RIP: 0010:__list_del_entry_valid_or_report+0x15a/0x190 [ 739.956824][T27976] Code: e8 6b 26 71 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 6c ee 92 fd 49 8b 17 48 c7 c7 00 0c bf 8b 48 89 de 4c 89 f9 e8 07 c4 94 fc 90 <0f> 0b 4c 89 f7 e8 3c 26 71 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 3d [ 739.976462][T27976] RSP: 0018:ffffc9000d77fad8 EFLAGS: 00010246 [ 739.982565][T27976] RAX: 000000000000006d RBX: ffff88806632f708 RCX: 97509e87280c4000 [ 739.990566][T27976] RDX: 0000000000000000 RSI: 0000000000000202 RDI: 0000000000000000 [ 739.998598][T27976] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 740.006616][T27976] R10: dffffc0000000000 R11: fffffbfff1bba680 R12: 1ffff11004e7321f [ 740.014619][T27976] R13: dffffc0000000000 R14: ffff8880273990f8 R15: ffff8880273990f8 [ 740.022617][T27976] FS: 000055558ce67500(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 740.031575][T27976] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 740.038190][T27976] CR2: 0000200001000000 CR3: 0000000039a20000 CR4: 00000000003526f0 [ 740.046191][T27976] Call Trace: [ 740.049496][T27976] [ 740.052449][T27976] sctp_destroy_sock+0xb4/0x370 [ 740.057329][T27976] ? sk_common_release+0x69/0x310 [ 740.062396][T27976] ? __pfx_sctp_destroy_sock+0x10/0x10 [ 740.067883][T27976] sk_common_release+0x75/0x310 [ 740.072781][T27976] sctp_close+0x77e/0x900 [ 740.077148][T27976] ? __pfx_sctp_close+0x10/0x10 [ 740.082035][T27976] ? down_write+0x162/0x1f0 [ 740.086563][T27976] ? __pfx_down_write+0x10/0x10 [ 740.091441][T27976] ? ip_mc_drop_socket+0x25a/0x270 [ 740.096592][T27976] inet_release+0x144/0x190 [ 740.101120][T27976] sock_close+0xc3/0x240 [ 740.105403][T27976] ? __pfx_sock_close+0x10/0x10 [ 740.110290][T27976] __fput+0x44c/0xa70 [ 740.114312][T27976] task_work_run+0x1d4/0x260 [ 740.118943][T27976] ? __pfx_task_work_run+0x10/0x10 [ 740.124092][T27976] ? exit_to_user_mode_loop+0x40/0x130 [ 740.129584][T27976] exit_to_user_mode_loop+0xe9/0x130 [ 740.134894][T27976] do_syscall_64+0x2bd/0xfa0 [ 740.139525][T27976] ? lockdep_hardirqs_on+0x9c/0x150 [ 740.144782][T27976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.150874][T27976] ? clear_bhb_loop+0x60/0xb0 [ 740.155581][T27976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.161501][T27976] RIP: 0033:0x7f12ad38f6c9 [ 740.165944][T27976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 740.185671][T27976] RSP: 002b:00007ffde8f96f88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 740.194101][T27976] RAX: 0000000000000000 RBX: 00007f12ad5e7da0 RCX: 00007f12ad38f6c9 [ 740.202083][T27976] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 740.210057][T27976] RBP: 00007f12ad5e7da0 R08: 0000000000000214 R09: 0000001ee8f9727f [ 740.218036][T27976] R10: 00000000003ffbc4 R11: 0000000000000246 R12: 00000000000b4b46 [ 740.226040][T27976] R13: 00007f12ad5e6090 R14: ffffffffffffffff R15: 00007ffde8f970a0 [ 740.234028][T27976] [ 740.237065][T27976] Modules linked in: [ 740.241048][T27976] ---[ end trace 0000000000000000 ]--- [ 740.246551][T27976] RIP: 0010:__list_del_entry_valid_or_report+0x15a/0x190 [ 740.253621][T27976] Code: e8 6b 26 71 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 6c ee 92 fd 49 8b 17 48 c7 c7 00 0c bf 8b 48 89 de 4c 89 f9 e8 07 c4 94 fc 90 <0f> 0b 4c 89 f7 e8 3c 26 71 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 3d [ 740.273296][T27976] RSP: 0018:ffffc9000d77fad8 EFLAGS: 00010246 [ 740.279422][T27976] RAX: 000000000000006d RBX: ffff88806632f708 RCX: 97509e87280c4000 [ 740.287448][T27976] RDX: 0000000000000000 RSI: 0000000000000202 RDI: 0000000000000000 [ 740.295483][T27976] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 740.303481][T27976] R10: dffffc0000000000 R11: fffffbfff1bba680 R12: 1ffff11004e7321f [ 740.311514][T27976] R13: dffffc0000000000 R14: ffff8880273990f8 R15: ffff8880273990f8 [ 740.319538][T27976] FS: 000055558ce67500(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 740.328526][T27976] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 740.335153][T27976] CR2: 0000200001000000 CR3: 0000000039a20000 CR4: 00000000003526f0 [ 740.343154][T27976] Kernel panic - not syncing: Fatal exception in interrupt [ 740.350690][T27976] Kernel Offset: disabled [ 740.355020][T27976] Rebooting in 86400 seconds..