last executing test programs: 2.252901492s ago: executing program 3 (id=1895): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x18, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000080}, 0x4008084) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x484cb}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x7fff}]}}}]}, 0x3c}}, 0x0) 2.173108288s ago: executing program 4 (id=1897): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_int(r1, 0x0, 0x19, &(0x7f0000000080)=0x3, 0x2) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r2) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x24, r3, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$isdn(0x22, 0x2, 0x26) close(r6) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r5, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r7, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a7a, 0x23b08}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x1}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x7}, @IFLA_MACSEC_ES={0x5, 0xa, 0x61}]}}}]}, 0x4c}}, 0x24000000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@ifindex, 0x312e26f95b33e991, 0x1, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000280)={@ifindex, r10, 0x2f, 0x0, 0x0, @void, @value=r11}, 0x20) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000140)={0x3, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@fallback=r10, r12, 0x2f, 0x30, 0x4, @void, @void, @void, @value=r13}, 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r9, @ANYRES32=r4, @ANYBLOB="2f00000021003900046bad8e0edcfa78373a716b1ac9edbab1a8191f5e60e6f80868f263acc8e49e436487093dabf99a2c3b3c64d09a5f7d96984ad2d39ea496bc4c06fd353ca795f9cb8a1003", @ANYRES32=r5, @ANYBLOB, @ANYRES32=r13, @ANYRES64=r8], 0x20) 1.901694072s ago: executing program 0 (id=1902): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockname$packet(r0, 0x0, &(0x7f0000000000)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x8, &(0x7f0000000100), 0x12d) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="5de04ced791ffe00bb4030e6000a8c20", 0x10) syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) getsockname$packet(r0, 0x0, &(0x7f0000000000)) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x8, &(0x7f0000000100), 0x12d) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="5de04ced791ffe00bb4030e6000a8c20", 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) (async) 1.845198245s ago: executing program 4 (id=1903): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000090600010015"], 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) 1.796160538s ago: executing program 0 (id=1904): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x70bd28, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0xfffc}]}}}]}, 0x40}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) (async, rerun: 32) sendmsg$can_bcm(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x48}}, 0x0) (rerun: 32) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x20, 0x140b, 0x305, 0x70bd28, 0x67, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4) (async, rerun: 32) sendmsg$SMC_PNETID_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r2, 0x20, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x4008004) (rerun: 32) 1.633085148s ago: executing program 3 (id=1906): getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x7300, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4}, 0x28) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r1}, 0x8) syz_emit_ethernet(0x7a, &(0x7f0000000400)={@broadcast, @remote, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x40, 0x3a, 0xff, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "10b1a0", 0x0, 0x0, 0x0, @empty, @local, [@srh={0x2b, 0x0, 0x4, 0x0, 0x4, 0x8, 0xadaa}], "fafb17c133d11e59"}}}}}}}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000740)={{r2, &(0x7f00000005c0)='+\x00', 0x591141, &(0x7f0000000600)={@_ha_fsid={[0x6df383d, 0x30d]}, {0x2, 0xff5, 0x54965813, 0xfff}}, 0x2, &(0x7f0000000640), &(0x7f0000000680)=0x4}, {[0xfffffffd, 0x7, 0x8, 0x3]}, 0x5fbd, 0x56, &(0x7f00000006c0)=""/86}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000007c0)={'veth1_macvtap\x00', 0x20}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x1}}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0x57, 0x0, 0x6a}, @volatile={0x1}]}, {0x0, [0x2e, 0x30, 0x2e, 0x0, 0x5f]}}, &(0x7f0000000280)=""/70, 0x53, 0x46, 0x0, 0x0, 0x10000}, 0x28) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4) 1.628190526s ago: executing program 4 (id=1907): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x2, &(0x7f0000000300)=@raw=[@exit, @exit], &(0x7f0000000100)='GPL\x00', 0x8, 0xf6, &(0x7f0000000180)=""/246}, 0x90) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x100, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x86}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4c43}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8bf}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x888ae8e}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffb}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x80c0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)={0x10, 0x10, 0x509, 0x70bd25}, 0x10}], 0x1}, 0x0) (async) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)={0x10, 0x10, 0x509, 0x70bd25}, 0x10}], 0x1}, 0x0) 1.565683668s ago: executing program 2 (id=1909): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) (async) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f00000002c0), 0x161) (async) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x31, &(0x7f0000000640)=r0, 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x31, &(0x7f0000000100), 0x4) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="09000000010000006d05000001"], 0x50) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000300000000000000070000001c000180b66c0300ac1408aa060005004e2400000600010002000000"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x900, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1d084, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r6}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x14, r5, 0x20, 0x70bd2a, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDFWD(r8, 0x8919, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r2}, 0x38) (async) r9 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r9, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="00000000e5c06417e58f2aaa43f325e4ae709296", 0x14}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x20004086) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)="493770433456026b7e060000006e32c377a11b817fcebf59f44c641bc4334fadbbc4c930f3e08bf1387419b1830f12618618f79634bfea679d08751018c37918994d2034779f2bf99b99cfa4fbf695f94131e9eef6960ac462d2349d9df45d55b5a62ca6666db42da35294e556b8eceb185e2bd23c9b136e5561fbf87f7b9e4342cd1e7390cdc0f722a27525ab2730d2e190cb40070fea30296277e30df43c7a8bf42023646d3976d6ab1ea81887302384011be8d74fe9c82ab286d294695289532a92a59556f653e0d002b8153d9c8b8e6306b508c8d58badb8877993c38f31bae5426cc356790432467400"/245, &(0x7f0000000080)="9df897b249d63830a28251dd6adb691c4db033f892658c2a4bfdb824a48e60b73840c25f7bf80b", 0x1000, r2, 0x4, 0x11000000}, 0x38) 1.5376139s ago: executing program 0 (id=1910): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000004680)=[{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000000600)="00128f6787bbda3e1597c5f656fa1f40", 0x10}], 0x1, 0x0, 0x0, 0x4002}], 0x1, 0x4044800) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async) getsockopt$llc_int(r1, 0x10c, 0x2, &(0x7f0000001b00), &(0x7f00000004c0)=0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c0000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a8014000700fc020000000000000000000000000000140003006970766c616e300000000000000000001c0012800b0001006970766c616e00000c0002800600010000001000c0a9d36edcda9a1e84b08877ccf00630"], 0x6c}}, 0x0) 1.441481513s ago: executing program 3 (id=1911): bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x3, 0x18}, 0xc) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x3, 0x18}, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x10011, 0x1, 0x2, 0x2, 0xc}, 0x20) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r2, 0x8b32, &(0x7f0000000040)) (async) ioctl(r2, 0x8b32, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) socket$inet6(0xa, 0x1, 0x0) (async) r3 = socket$inet6(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x9) socket$kcm(0xf, 0x3, 0x2) (async) socket$kcm(0xf, 0x3, 0x2) socket$inet6(0xa, 0x3, 0x7) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2b970b3da7f0f578}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x34, 0x1, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x48040) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) pipe(&(0x7f00000002c0)) (async) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$SO_J1939_SEND_PRIO(r8, 0x6b, 0x3, &(0x7f0000000300)=0x4, 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r5, r7, 0x25, 0x2, @val=@netfilter={0x3, 0x1, 0x0, 0x1}}, 0x20) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x50, &(0x7f0000000000)={0x0, 0x0}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x50, &(0x7f0000000000)={0x0, 0x0}, 0x10) 1.385761538s ago: executing program 2 (id=1912): ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f5, &(0x7f0000000400)="2a154009780c4974e54ab7bc21143d0e36da3485eb3ab6db54e3f6f2f22849b0f52ea7aaab363c7807d10e9c5db9fe88f5075e5e38cdf048e332f9d613b64ca7a07cd8a71864c2a1a8aefcadd39cfa7e6916a1430fd824c7c8f9844aad5665dd89cae8625d496f8948019fbce00ada7448d134a447104923ce1aa3ab137cc251b6ad26ed102466e50d5525e195afb3c0780646b291c79f9a2f015dd4e129e06907a2c4d6bc3fb85cf9603663dcb4564a3c7da14ff56dac35539a27908f079431e9d2234af21c6c67c276d26dfbbf1402ebdb52ed60d961da292b8a2a020e0b683cffd1") r0 = socket(0x11, 0x3, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) mmap(&(0x7f0000159000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0x200000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x2000e8, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000095c0)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000000000ac141414e0000003808a8972bd0b72e4a139697dd206"], 0xdd12}, {&(0x7f0000000080)=ANY=[], 0x10}], 0x2, 0x0, 0x0, 0x4040814}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r5}, 0x10, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000040000000000000000000000b8ee0816756b62187804752330b2b558fe9a8f0201f7693863f7adcb30d7228ef1593c0639bd084bba9efd8db72f0600000000000000c6ec61a03fc316d5d47970907af5fc"], 0x20000600}}, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x204) socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @multicast}) close(0x3) 1.384570443s ago: executing program 0 (id=1913): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0xf8}, @val={0x6, 0x84, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010101, @broadcast}}}, 0x22) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000180)={'geneve0\x00', @local}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}]}, 0x40}, 0x1, 0x7}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x15, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r4, 0x10e, 0xa, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000001180)={@val={0x0, 0x86dd}, @val={0x0, 0x3, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf98, 0x2c, 0x0, @local, @mcast2, {[@dstopts={0x3c}], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x19, 0xb, "68b221212701229eef96453f92c74956377e0ee0b4d368b74711618c3a0f2d41cd57d92a7284e1e26a46ee6abda18869b35cb216edd0a0ffbc70fc4f537dff97a5954d1bafa8a22ebc17113645f9968cbc9a7f76ca31"}, {0x1f, 0x20, "71ccf488671b39cc5dd5ed567f2dfc00b00b4cddf30512e2a4aa238e68c5fc536833ee6689bbf0282992158a9bd2dae3065378072869f2cd248b383866308136d59a05dbff44d418199f969e9d7ae16046fd53cc14b987fed8b60c043035359f2ac0a09f759bd5c58fc9894dc1b782ff47ea05ae8d7378e456e9ab39c7c83bf81dbf1f83290bba53f09e1ab44966a56848bdb03f715d62b589d2398a42f7d48f133b68510340ba41bc19b569dcbcd3959fd3815c62399468de6f8bca8093b028da2cdb49efd4139fc6d4459221f13d9c8b0fabacdc62217d3f7d410fea59e01bf1d801e68a1f9a6675315cb96210adfbe96e236e0bae0e3fd37e49709ea9"}, {0x2, 0x12, "d00267dacbc68021c0b3a1390895049c3de366c3aa8653a6fcba5804868e50ed2daa13b9dd4cb73a0a7ab11286709990ef1db4d2e6b8976029967226cbe3ade8efc8862bc22963c54fe23cdc08373ed52f2482f8459da8f33d246726977f33fe2cb7a691b161a814812d2b181415828465a6a6a2346b757a20cd497a4dff4511039f3ee898c6f75e342cfbbac07f3c0b965d95"}, {0x5, 0x2, "1a51e8434bbc75afff3e391f153ee15250fa"}, {0xd, 0x1a, "39f85c27c51259c3bb081e8209ebbe7b168b1878c7bebe3383e86f3b5ee892c5c4d064ccc24e05a5cb0f6d9aa4f649c58b212dd03541f51c3906e3e8ced0cbe40311dfe21cae347dc7322240dc4935d6d1f3160dd8478c69bdedeb2516a50ef7044ae0c101897d4c73aa06c9058f86083f263c38647a89e754773acdb71f616f69826f3e515dd55e56d098e0aea8fcbfa5f069f1e0ce33f327203a251832e35d27033f994a3bd4f011d97d80944b037c0c4056cfcf3549f6104cfbb04fcec5066e7af66c6273d0ff5d8eb563d155c55a3c4f"}, {0x1b, 0x5, "196e1787ef24fd1e1a6c1d09fb96a26b2d0105ef33120866d0bdb0119c529f5c68b6934e1a0e427a6afb45"}, {0x5, 0x1, "0d21ad86cbc69bfdec74edce02"}, {0xe, 0x17, "ff4e9a50e3c9058ba689db036f8288e303397778a528c5b595aea5cdc09cccb60cc2fbab14d3d7257ea9f1f3c69fb870becbebf4e2b23315944c55899b5317ce0616eea7f58224e4473732e637ae845702b373b2f513ee347b0ce2c4fa85fdb4434e45ebf43f6bea4a0917ddf61f0a71d2e943ac99fd89562c9c6721daf0e2793eaba683d18ad217f87696f20ffa8b8b900704e5946b29f428b688ccaa1fa6bf217c337caef63601212e8bd7954e3fcb916b08939b8a61d163bb4c7c"}, {0x3, 0x177, "1819954587d4c8af7899409a9c439f043a7fa37f13c4ac2f0217e54ece4e6a80124e77d45ceff9341996ba9ce28f08da8d7f850058dae7effc5bfb20287396ca168210adecb227ee17d8d89bc674f97dc890d217fe0c6488691b50dcb65200645ba8b63ee0c16b47dd9398d3bebd3967a9cde50d30feea9003b4afcebd3b79a98a660b6ecbabdc520b890c83c3522ceea8b46cc6e6f1a6953cd8b1471c1efcf8fc393e1641be69bd01fefe0069e682131929ef061f4e07f83d95a429414a4d1b1e197e8d14962f7429d0dec8dc078fe3ba9e871c6a931882f4e266b90155901f8e0c25baa86258a33f6f20225a747641dea2e6316674537e04ea2e65e620793a68c8398cf352b231ee40a3eafadec84df775419984211e048469ab19181dd7eb08b68ce3d5e294e178f82832497e9e384619bdf2cac9516c0519f3495245605da0e8bbd56bce89bbc67eef4415a40b7c612f533fe5eac917193047f022b699f69be2fcef21faa306f3961c55cbea6509ca2c65664f7d140aa345492c21d9cc7be113c92ac1e0164fbd10c2d17c4406404488527f5c9aae764955fe8640c2a0c63f8c7d71518c7a8298ab5a3a2a1f587471a26103cbd66d0f8ac29bcab775a97ebf2efcc62c9df8f8eb04345d99ff16381001ccb1a2a8e385fec424f596e31e7e8bb020ac00b1ca4b682b91ea11040904d2832013ee246e3a6739f51ed69ec2bb2dd2e2511cb07e6a5cfa0938d7b809bde701c5c2e320ee1953c931856338896fd1c9ff13b07d97b5f7936437a5a825dcd09c22b6d8fd981cad2318cef16bfbd1b4f510f3f4ecf8dd449b673314e3b169f13c721ca6ce89d5378f3ea8f430b72496f675db13ae9941b059cbe333c2bad3763e6210b3cd29a51dd9e4eaa4356b77574200c25548b22ea05ee12cbb2ab359fa67142205a9d012aab931ea45120e1dc355363e328388c54e22f0c4fb3a3f695611a47c7db515e39de988118c2b83b41c27e041c5361d4aa222955a88f0dc534ba43c2dc5162efbad9bd3f19813a8a19f1c6f975d7efaef0e0a48e748c2d2c732f776079da74607231a72ad090efc053e109961d258e17039653a5e0559b1dce51cd901a023a8bcff01234a8324d428d6658fd959139417e932910d8df31c440e58e56aa7c9ff8b975d4d658c36c8b3e8f557ca1831a1d88cce45734368acd9739a267668476bfcc872014e538e1e19312ac8656e59007816db793986bd7eae99d78ff9fd32b21eab5b73e3010aadc38a032238f247aea29e450b2e69426eb2911435cb8ba7b5b74794a733711c885441b53c7ff08e65969199fe468e508e6f4c16941b29fb9aa1f59512137a9431db4c5301c67620bb0979b93f53fcf1344ee0828e30beda41c190ec4eb733546bbe6714cffd0edc65ec0c6f6d4f359f53ec2af19ccc310bf444450c9189aae8891154af68c794172adfb37e549ccd61826ea89f14643840676b32d530f1d4aed7700be2e3059f991b94c0335ebd49995de529a21731823d9893dc0d2827f0ab71a7f42f04e51c711468b729485f69963b9a36090945ee876c081282ec1c110524d9ac56ec4227e7b2c7f6d1abd8075c4b061bf7edac855d7253414761dd71102d4f7799eb407694e8a9b20f93198c26e67e5facb9fb368b645bc5b614fd99641323a7a10829b78385fa52afc8bc1722857990b3d2e34e7a649d26d041f37745752466c2f2a8c9c33d4bfbc17945d63568a71aae63b493a0c6d9e25ea4e38967698c90e144e3787108e22072180ae1e7ae66257b37d5a7deef10a53e59b26143bc16426030ce4fb9d0436635d18dc3ea52e022f92ce67daafac7c83b90e1c851159f9588e1d99b568b0a8ec72fb9e1b0012315480fa91ccd95c82f9425f7d0f23bfc01993a75b07d2da79d25f570e9c273a39e6b36a18d6379388229d7516d669c79abcf6bdc9ecff7a56e4ce0f175c3e209f585588d65cfa3b1c81a1c2efcdc85226caad147bf1a755b85d255eed08e543ba85c04920976208007ff75204f54d9cf74b677d22cd763f02a0b2a5766453d87becd187171227f4e6d53fe1b4a353cb6a45919413c4ef27b789f09c7b0f5f40efbf6bbefdb7ce1e8a76fa57b5083f8f2aa3ce756fc4143641fee8c0d25f819faa1c5accf8b2e284f76c7a589266a3bef1c62fa27640c7580a9a484e803f0b3092dd77c59caea5bc6d979494b22f4c59e3323bfa30639b37481088f8cd3fca0f62123b8a0b3dc181bf6dd7f620e4c6e6838e5451d8582baa1389ce35a9624df65ee9d666c80a4c172b32fae9f5872d4c7530733cbb9b8432cb7d7c6a4b3efd44418bf34a31c063b297a9f3db5a04c34edebd98bf727816364e526d766c85ac1afc583dc538458ad5269adf9459a4135496bad4221031eded8a94f5edeb68aef0fd97efc655998df757217273b5d8a1fe9ddaa0f3f5823e9751f182b0678963c58ad92069e9eaea133c2da7c7ad8de456ca8e7373284c32693f73a8931a13702589f64371de2619d081b33ec2672381bc09ca9ef645211287aff3f84bdacace3cba3ee4648a1c8a99b50eb97fc2e78141acb1f7f461d0736578752bf1f808a9cdf4d97d85243cd1296d325eb18f33c8831d865073111bcbe388d0ee8614abcb394e46fbaedfc749260df914f459e533b21c61f6bb52551e828a885bc7289ab52f6c17fedb075b37f0c6747b88ef6c98e6accfa99d0faa710caf1aa591e65a16f4935fb82a8c5bc4a93f80a1ea7580356c249fff88cd0b2ff4b775e1de3080de4d4b4a14ed0847d57610280a1cc4552039bdf445a9b35503e4ec253089cfe3f94156f3538750efcd4b2903c4728e2feb8a8037ed9c5b9140a270517c84d082d1aedc9ac7940a9a5432d936c5ad9867b07770e163664f44651c814458b526cafc0d98eb41b6087d25f95cefd5acff3e9628825bd2f83979444213a59b348f222861011870f5bc3fef0ddc72dce10a3787d471c34eed594863231855f3310100d372af785349360390b350033970fcb85accff7de971ef971f43c04647a5235525d68f8427936a08118c1a2f1d0df664f4a861a8022f4ea29280114f7d38c8b96c0b08d859a4dac12c306a8700d676bd40aa72f7b19072a7f5e8230dc64b4cc38684560af6b79319224b37a26fe7656dcd537dbe76d0888c8a90e39c82555bb1a961c5b14e877a1717ab9eeff08a9e9322d80eefb2d5ff67261b9d867a30f82a3ad7d2bdfd25e1e666673d5ff5d638e3e76859a0ccd7d5f877ded7df24b1064768be0f50b7b8ffcd4bbc4df3c81e9dd8b999e849ef3748371487faef903d3652f41101a2b5cce3239c706fcb7d48b26378f2ff748ba931ee992e818505e6f48a6d11cab5452d036328f4d657285a5492cced3d3e6e987a489b40b7484f044bbaf5150bd3d2739e7a20c45279b61a8ca4a6c29887889963ed6d9a0146111516a032f981ef3d365c1fcbffb27ff0fc7c814c7981595b6ac096b4a511490d157241e69ee17e968157cbddf3e147f21030807592e64cc6591cb19bacc3837988822a9d396b7c898e2bb08d41156f2571b1e4a846216f4e4e31eb13c6b63471d6e4b597c637b70a3f21b40065ac4f70ffc13d966f67d246ca3111db1ded2f3e3667173122b27e9dd52fab6e97f6d1fbe916368116a254fa7b1e03b227d18e7d9802872a109d4bd1302715823d8bcf521e6d11ed7458ff4f115e23c60cd1ec404ddb8412458db7188633862162655732ae5ea4f1ddf32e1b8461688faa393f1c4f15509055c87ef477159041f8208cf53e42d1e37760dedc0bfcd2bc4479edae353cb515b7db097d34c942fb4a1cde272b4cae74a4ccd0cc868ecf32e455a5b1020d5ff3ebe1d4a2816e515a14b84ac9f9cdcd0ee60cdae08628770f9e3a28ed1575566705271dd020513e3db5dbe0916ffd76c2fee17d9bc820be40ae9082a7ee3b1defa12e8b14291f5e2b8e4dc70ae89435501abdf9578ce7179c3363629acdb347c1ec6a5e99e9d3535d02c04d06a394346abed1294f1651aa4c4224892747aabf9846c7e0ec648225af4117d2191c2b356f29005011c0a74d212fc3f5f05a48a7f9c032562530f7b48b036cd7c28931b2fc6bf64a8eee7ebb64f9419a0838e5b753012ebae70b51ad24dd9e015daa27defa88afb7a63cae2a283cd7b0ca3b9136f2e52a269bbf2f89532c0ff7266098a5a8053c56b2bf2352717cdf22c52ba5a9b03f5a01fddff9a7b41"}]}}}}}, 0xfce) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000100)={0x7, 'wlan0\x00', {0x10001}, 0xef}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 1.297242509s ago: executing program 1 (id=1914): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)}}], 0x2, 0x4040040) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000002000010000180000ffffffff0a14955f00000000000000000000000000001400010020010000000000000000000000000001080017004e214e22"], 0x4c}, 0x1, 0x0, 0x0, 0xc011}, 0x4040000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c00000010003904000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc02"], 0x5c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x40000) sendmsg$can_bcm(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000400900000200df0000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYRES64, @ANYBLOB="030000c001"], 0x80}, 0x1, 0x0, 0x0, 0x4001}, 0x20008814) sendmsg$can_bcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x2, 0x202, 0x1, {0x0, 0xea60}, {}, {0x0, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x1, 0x1}, 0x1, 0x1, 0x0, 0x0, "3ec4e61694e462ee"}}, 0x48}, 0x1, 0x0, 0x0, 0x240040c0}, 0x40840) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xd0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}, 0x3}], 0x2, 0x62, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0d00700201000000010000002c401910ff18098f", @ANYRES32=r7, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000e80)=ANY=[@ANYBLOB="180000000108000000000000fdffffff18110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800), r4) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x58, r9, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xf}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xfffffffffffffffe}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x200c015}, 0x800) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f00000007c0)={&(0x7f0000000380)={0x1d, r10}, 0x10, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="02000000440000000500000000000000", @ANYRES64=r11, @ANYRES64=r12/1000+10000, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0400c247000000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4010000}, 0x40) 1.259533675s ago: executing program 2 (id=1915): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)={'c', ' *:* ', 'rw\x00'}, 0x9) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x1}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}]}, 0x1c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000c000000080026000816"], 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r3, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x7}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x1]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xea}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x7f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008004}, 0x800) (async) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r3, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x7}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x1]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xea}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x7f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008004}, 0x800) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}}, 0x0) 1.129143137s ago: executing program 3 (id=1916): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x9c, 0x0, 0x0, 0xffffffff}, {0x6}]}, 0x10) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0x24, &(0x7f0000000000), 0x4) 1.079187777s ago: executing program 3 (id=1917): socket$kcm(0x10, 0x3, 0x10) (async) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)="1400000016000b63d2b947468b041c031193e473", 0x14}], 0x1}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x4f}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r4) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000480)={0x44, r5, 0x11, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xfffffffd, 0x2d}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r7, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4004) (async) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r7, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket$netlink(0x10, 0x3, 0x10) (async) r9 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r9) (async) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r9) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3}, 0x50) (async) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1, 0xffffffffffffffff}, 0x4) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x18}, 0x18) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r14, 0x0, r15, 0x0, 0x25a5, 0x0) r16 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r16, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x12, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x4}, [@map_fd={0x18, 0x8, 0x1, 0x0, r11}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}]}, &(0x7f00000005c0)='GPL\x00', 0x8, 0x9c, &(0x7f0000000600)=""/156, 0x41000, 0xc, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, &(0x7f00000007c0)=[r4, 0xffffffffffffffff, r13, r14, r16], 0x0, 0x10, 0x646684a4}, 0x94) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x28, r10, 0x223, 0x0, 0x0, {0x3}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback={0xe0ffff00000000}}]}, 0x28}}, 0x0) getsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, &(0x7f0000000080), 0x2) (async) getsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, &(0x7f0000000080), 0x2) 1.072699599s ago: executing program 2 (id=1918): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x400, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008080}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) poll(&(0x7f0000000040), 0x55, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x58, 0x30, 0xb, 0x5, 0x0, {}, [{0x44, 0x1, [@m_ct={0x40, 0x1, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "2c693b7b2f748e36c1cbde6d4db950c3"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xf646d5f7286d7fdb}, 0x480c0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0xffffffb9, &(0x7f0000000280)={&(0x7f00000000c0)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x0, 0xffffffff, {0xa, 0x0, 0x10}}, 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd698b0f0800000000000000000000dd000000000039fe80aa4e224e2400"/58, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="61c2000190780ffd04020000"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x50}}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x2000) 1.063168068s ago: executing program 0 (id=1919): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001940)=@newlink={0x50, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x28000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x8, 0x8, 0x0, 0x1, [@loopback]}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24048800}, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000400)) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000040)=0x9, 0x4) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)={@void, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x2e, 0x4, 0x3, 0x28, 0xfc, 0x64, 0x0, 0xd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@noop, @timestamp_prespec={0x44, 0x14, 0xa, 0x3, 0x6, [{@multicast1, 0xffffff0d}, {@rand_addr=0x64010101, 0x6a}]}, @timestamp_addr={0x44, 0x44, 0xe0, 0x1, 0x9, [{@rand_addr=0x64010100, 0x3}, {@rand_addr=0x64010100, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x2}, {@empty, 0x3}, {@rand_addr=0x64010101}, {@multicast2, 0x5}, {@loopback, 0x10001}]}, @ssrr={0x89, 0x3, 0xcc}, @ssrr={0x89, 0x27, 0x51, [@dev={0xac, 0x14, 0x14, 0x16}, @private=0xa010102, @multicast1, @remote, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast1, @empty]}, @ra={0x94, 0x4}, @end, @end, @ssrr={0x89, 0x1b, 0x51, [@private=0xa010101, @local, @local, @remote, @broadcast, @remote]}]}}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x3, 0x0, {0xf, 0x4, 0x3, 0x9, 0x1, 0x65, 0x2, 0x86, 0x0, 0x3, @local, @loopback, {[@end, @lsrr={0x83, 0xb, 0x3d, [@private=0xa010101, @private=0xa010102]}, @lsrr={0x83, 0xb, 0x9, [@empty, @remote]}, @generic={0x88, 0xf, "ced8f62f2b2153077cfabd0f57"}]}}}}}}}}, 0x10a) 920.888328ms ago: executing program 1 (id=1920): bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=r0, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000a00000007b0a00ff000000001d0a000000aa2a0000009500000000000000850000008b0000000000000000000000950000000000"], &(0x7f0000000140)='GPL\x00', 0xa, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3d, &(0x7f0000000140)={0x2}, 0x8) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000080), 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000018000900001c140000fec5ff00"/28], 0x1c}}, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockname$l2tp(r6, 0x0, &(0x7f0000000400)) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000481100fe8000000000000000000000000000bbfe800000000000e3340000000000000000aa4e200e22"], 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty, 0x33}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b00)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008041}, 0xc040841) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000040000000800000020500000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x588, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4b8, 0xffffffff, 0xffffffff, 0x4b8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2b, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@loopback, [0xff, 0xff000000, 0xffffffff], 0x4e23, 0x4e21, 0x4e22, 0x4e21, 0x100, 0x1, 0x6, 0x3ff, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) r8 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r8, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local, 0x400}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)="ae10355a3319", 0x6}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000000000084"], 0x10}}], 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x2, 0x6, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xc, 0xe6, &(0x7f0000000540)=""/230, 0x0, 0x64, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 659.850046ms ago: executing program 2 (id=1921): r0 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000001cc0), &(0x7f0000001d00)=0x8) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000070500030001000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x70}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) (async, rerun: 32) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x0) (async, rerun: 32) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000600)={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x37}, 0xb}, 0x1c) listen(r3, 0x2) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) (async) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async, rerun: 32) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) (async) r7 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r7, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) (async) listen(r7, 0x0) (async, rerun: 32) r8 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) getsockopt$inet_tcp_buf(r8, 0x6, 0x23, &(0x7f0000000000)=""/36, &(0x7f0000000040)=0x24) (async) sendmmsg(r7, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000580)={0xffffffffffffffff, 0x1, 0xe, r6, 0xffff}, 0xc) (async) syz_emit_ethernet(0x4e, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60000000001806fffe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c20000927800001e020000e90984a32ce7a852ba0ea4588867bf1ab4669d02c3ee6a0f429f64c3a1fa0e4b739d33e42e7f32e0a7732be6d8ea48857d67058b0ac798d0cc1049c2860897f42f9a1a"], 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x4}}]}, 0x38}}, 0x0) 629.447618ms ago: executing program 4 (id=1922): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000229bd7000fbdbdf2505000000080004000600000005000500f90000007a4cedce834d0c1b60e5cc3bb1dd6dbe3258b301040000406f0ea9d0f01c172f886940c27e35d6d8ab58b2ca38"], 0x24}}, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r5, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffffc, 0x0, {0x0, 0x0, 0x4, 0x0, 0x414, 0x5ff10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040011}, 0x40050) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000b575cb2398001001000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r7, 0x83, &(0x7f00000010c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/194, 0xc2}}, 0x10) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r3, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x15, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x36, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) (async) splice(r7, &(0x7f0000000440)=0x87, r8, &(0x7f00000004c0)=0x3, 0x0, 0xa) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 480.827036ms ago: executing program 2 (id=1923): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00'}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x80000) recvmsg$can_raw(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/243, 0xf3}, {&(0x7f0000000300)=""/115, 0x73}], 0x2}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote}}}, 0x108) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448d4, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x70}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x2) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000380)="8e7031d081967c0794eb30e804492183703cfc1faaf68949d8620a79a6051e40b488239932b1399cdbbb5006ff752bea9cec0547be8cd8e1adc19bdbed72bf1ee371b0f48c8bee591d589b6438f9b0b9", 0x50}, {&(0x7f00000007c0)="6b87fc673bb9e422478911b0921790656ac79c9cefbbb83f8e0691fc404039ab39fcc66c00917dcc6d442f92d6a228b6f35e54eb8cc7d9ddb45661f79213fae324a28bc71f9e0563dc9b13403334a854a69e8c5322f16822375b96498d60f0afd51e884d996617d3d54b8dba78e4c8fc96d7aae0615828a90b28ea38d76e40ca6366a382518655c814938fbea1e5ed8755ed3b214c7026a515e583421ce5f34856556cec0ac4e57f2767da44842ddc7098167bc12cc99b0f57122e400f9ce69018f3537be1512f7e33fab9588da77ee54a20f7b07c580e44ef936e288a692a3b30b28bee58162eb2aedd", 0xea}], 0x2, &(0x7f0000000900), 0x0, 0x20004000}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 475.961315ms ago: executing program 1 (id=1924): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f00000001c0), 0x10) (async) bind$can_raw(r0, &(0x7f0000000000), 0x10) (async) r1 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') (async, rerun: 64) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x10a2}}}}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 451.183396ms ago: executing program 4 (id=1925): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000180)=0x10) 273.358774ms ago: executing program 4 (id=1926): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="0800330001"], 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r4, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@ipv6_getroute={0x34, 0x1a, 0x4, 0x70bd29, 0x25dfdbfb, {0xa, 0x10, 0x0, 0x7, 0xff, 0x2, 0xff, 0x4, 0x2c00}, [@RTA_PRIORITY={0x8}, @RTA_PREF={0x5, 0x14, 0xff}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40041}, 0x8011) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r3, 0x8, 0x401, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xfd}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x7}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xfffb}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8001) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {}, {}, {}, {}, {0x2d}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r12, &(0x7f0000000380)="fad33075218151db00316f3a277fedbc6c8e46fe766f486d7ce218d5be2cf4380cc23b64201f3516", 0x28, 0x6008092, &(0x7f0000000080)={0x11, 0x88a8, r11, 0x1, 0xda, 0x6, @remote}, 0x14) sendmsg$nl_route(r7, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@RTM_NEWMDB={0x78, 0x54, 0x100, 0x70bd2b, 0x25dfdbfc, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x3, 0x4, {@in6_addr=@private0={0xfc, 0x0, '\x00', 0x1}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x2, 0x2, {@ip4=@empty, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x0, 0x0, 0x2, {@ip4=@broadcast}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4001001}, 0x40) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) 256.822804ms ago: executing program 1 (id=1927): r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000440)={0x37, 0x1, 0x9, 0x4, 0x6, 0x0, 0x9, 0x9}, &(0x7f0000000480)={0x3, 0x200, 0x4, 0x7fff, 0x9, 0x1, 0x2}, &(0x7f00000004c0)={0x7, 0x59e, 0x8000000000000001, 0x2, 0x37b, 0x3, 0x5, 0x7}, &(0x7f0000000500)={0x77359400}, &(0x7f0000000580)={&(0x7f0000000540)={[0xe1]}, 0x8}) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r1, 0x1, 0xffffffff, 0x400000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x5c}, 0x1, 0x620b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="000000000000a9183bef6f7a2b77070000000000000000504d37336e06a3b1c74f61781d9c1653005333323008e79545e2403bf37f5fc18314437b2fcfc0ab357cd03b34542df4e0044a70ec11352a3fd8d2e296d0194a5bc6ac1fa9cae01ebc521b62"], 0x78}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r3, 0x83, &(0x7f00000010c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/194, 0xc2}}, 0x10) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r5, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r6, 0x113, 0x3, &(0x7f0000000000)=0xffffffff, 0x4) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000180)={r4, r4, 0x81, 0x1, &(0x7f0000000240)="b4", 0x81, 0x7, 0x1, 0x4, 0xc336, 0x1, 0x10, 'syz1\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) syz_emit_ethernet(0x6a, 0x0, 0x0) r8 = socket(0x15, 0x5, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r8, 0x0, 0x4884) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x84, @empty, 0x15, 0x3, 'sed\x00', 0x3, 0x4, 0x79}, 0x2c) r10 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x3, 0xcd}}, 0x44) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0xa, 0x2, 0x0) 225.355769ms ago: executing program 0 (id=1928): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) (async) r5 = gettid() (async, rerun: 32) r6 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r4, 0x59808, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) (async, rerun: 64) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005300)={0x2894, 0x10, 0x701, 0x0, 0x0, {0xa}, [@nested={0x111d, 0x6c, 0x0, 0x1, [@nested={0x39, 0x65, 0x0, 0x1, [@nested={0x4, 0x14a}, @nested={0x4, 0x53}, @generic="17b25051c333dc333bd6816fa57961380ee2144814d1952e42b2a8d8055cf93625f90422893dbc2c41e7e7496b"]}, @typed={0xc, 0xfc, 0x0, 0x0, @u64}, @typed={0x14, 0xf3, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @generic="a8a43002bf7d343f854a729138efe4ce283a419ea9", @nested={0x10a6, 0x48, 0x0, 0x1, [@generic="3ea195d5825d98d24a1b0b21e9eca268ae30fc9c5133a8c39b608de9eb70a1502fdf4e3797607b1fbda0b7004403f0fa823ff55281fabc1837886b30a49a1436a1f2db76c18fe6d165787e3f653706b5ff607ab5f7b6b35cfb1222bf464f56c35348f893eadbc652902a33932861eaf059096c6dbb5cba4c17032eeafd78ef12ff8296a9698b580d1c02344ced10b2103441585c4b7d1d176f9953a0aea141c8a83daa663dc70df9fe8172afcf6005d1b328868f4fa1ab69a7fda60ed276d0c85d80944ad76957041e3458f4de2567578de59c1ed14fd46825f63493f66bc1d294ea119fec54d6b83125a3be80a56e2bc2ff9abdf43a6766499503d5c5e8df08198fc5353ed6b2126af0d9559f87449d10ff72d10b4c5571cf263a7a0d531be98d1b6ade8f4b4ef36d5751eeba0afeaffed97da155c6bd4bd5bc62c37b91a27661de43a5cf3216016e0359cc7a23b32b2713ffb63ac07b4452e3249007033c6e66a5104ad961c9945712933915e395e7092b6b21715bedab687600d6fbf800b844d181d28a78d61c5785f8b27a82f116fa1d6447c17fe7eb605a0a0aeeaae5e38d7d75e388249da03a31b66328d2daae1f770e14d14575e4511e9847d9893f8b603e1ad2ae651f8d104260907e770baeaa91c1a4cd9995872061848709ff2ec28a9fc24b85747cec1a7548f8c6d39efda91559b7184e8de49a466db89015d4b0dd6bd89f19ed718d5f4eb78c13821420f000d8300ea2703a73766b57d1939f78770a01a926fd4c0a035abd691dd2167a4b492430d48840b3d0cddc11ada320a6542edb3d1e89064295484d9ab35f5fcab1a27cec43fca932a79d9ab46c24cdf1cdbde88114d393c65f5e040e7ca96bea9f6241627e812564f5e5fb7eaab733c5c658620281ec7aab4c207744daecf283f83a2302cd46910da4c3b69c4d8fb99208d59325d6a7514d63df9a6f42f45fe54407326d993c8099b25cf0fdb27e962df7180af9f09897050e85b1c1a9c47a9995ccacd52f68b237913e2d5e086d8a0b31413a2a2f26a6b18954ad7297bc0f6204e2fb0ec8a38beb856d15f699089b473a537b977f26478b650cf53c1895e787d864fa2741c457188a065c8a03e44a71a0854bb09a66a78f6ecc6b4a7d38eb2d5d1328d3f8fb65710138edb4d4dea5aa645de81185aa4072d8748c5cb71bcfe3a6eeebd07886f050d8991e13829268785976d8bac2f60e132381f3393bb1c2def1408ff4cd694463ec9ad812619792f9050a41d0adcc7592bc46d3b689a867319e44f9b8c93f375067aee3f3d57c6254613bdff335e447ff10fe8f31c000bbe1a6078bcee652eba431886fa2737e63c58a55520bcf63d0d8ac469606e048669f5962397c54dd44007c0e5cadbaaa7dbe6a169f364e05850abd89f1a8e0f98484289588fbaa1711060c935f9c1c7ca09cdf79c683336643c61c3cd13ec873b7bbbe49684cdcf40a99aafe54cfc6572148c6f237a88d6152675beb97da020f93f5026229194a2fedc7f0f3537549abfb75cc205fae4775e780e74930b48773dc4ec0be14015f128fdab8462c1c728bcbac4e7e8e05beea13509e8f26329597b3597932a7e75d3330818a8fd8c4ccdb293ae8f3eab5f11a7448bdaa03f5e57712de422a3a1559ee8046609858805aa94fbb5f79821842cf81cd98b5499753354713f6de2723efdf16ef9dabb2fc568ef2889e8e889fa17a184b023596ec4cde690328ccb7d18df4c7c5bda8c441bd130d2cf7bc65bb68cf889020f3533699ad2d75f88e196c7ddf122acd73263e389a8c8c59bbbb5ea3fb6475e6a703a1907c61e4a411e660c0b400f6230d3983bd5fa1aed3c94258e573fa191e5bc0fe9440f0b61572c866114098e4a68949a0488c1ac4363c8d583ff1e1771c9e65ea31590dff58c72e2851d3616deefd40cabd23ba16a23b559427a79ef5e7ae8244b15a13a31148a6cfca15039d57fa1a2916e00854dec4e3414d05c29f4df5d955fdb708874e11c6e2b1578c7680aa5fd8d48a22773c2b3cbfc09a6059baecf40f9b298cf5aa4a49fb9e321f5966b6c8cc2abcaea08ace99ea19fef23a7090e5eead186ce3c82e835609e6dd04e6da48f784ded86f0d6a9c659e0286830c915e4dea2444ab71f1742efaa01ff03f04e729b3fc018fb1d8814f51c4df23285da4e73ff37c3294e58aa1b08f9f95fe554a7620f342ec39f71db5c3908dac3cb91319cb23fefa110d469635297376287b087aa811ff5bcdb4a8176b974a556d97322a9acc10425abe38386f50f8ee0b7b3b8267d2f5ed791e4b628e94997da9bf3b093e74df79600a883188324048f43c7e499cd3a2d99648f134301c7d5f89eed51c38aad50ab607dd2d703acdb393a16a2301f92dd5a7aebf0d5899d774bfb15fe74bb0d9e235512c9bd25074189fe609679b67d5db73385008e5b182bee98ce85e63dd1527d331b5f71d4a7f7cca4955b1c9d75355d6b2e474717e2e9aafead02d6f96bd1b9a4780f6531e48e71c6512b8f739e0a324f30ab6fe7c6eb8a5899b3a5efa10f76dd8fb712e68b47dcedb59fa75317b1bc11d842c1cc8dba1cb9442965589f66bb8f1c8aaaa8a564b5400fad02cd850f6b777c8af66beba936a7bb2a227d687f7e9e62126f77ec118c994d66ac426596afe151ddc33d4c6de950e1ccbfec9b69aff607f0b168f8abc8be342f968df23b343a3626da5824b5fa4b43a128a8d89b74c5faf0374c90024e8d28e1da9526f0c4744601d1e51b2e952f98b9c7c0ff8859cd6d611e0b906c571ff7b1c0a06c77b1e8be5544271455cc7222bbbc1ae0ae7231a081a1ee84fdab804b6ff3f6c31f3ecb67203fce0eacd72a39f5369d25fa2679c9595cbfdf4ae450fc2a4b7920df947d6074190b37803d41174ade2842f8aee6eefa9e91dd6d56f6d56c5f60c9b9ac607c3156f21a2250eb4c90713e214444944748e12f9cdc27c138cc6752df904d5555667ad300e63dcb34ee5f57184c1e82ba5c34f85aefa9751a4659f296538d06b3572ebd6a1ea766e7b155d4058ed4f89b7ce6cd36ac434e0843dbf41b5f0911c16429ca33bc7759efc0e1c67da35c0893a989718f873daad2ee22489e8566cf5761a9abf1f6ebc1afc28eab995c9cb807dd06d163fbd658d7bf36e72fc72a3e83965a57a37b084ad09b991ea802785a6bd6d8683ba3998456bc78e6388a12f154e39379b47d8c88e21eea91577e8fbcae4e23eca937d6edcc7a14c96a7075027aaed2ea371b360a5f60e549075434a7372d99105cc17e9dd781015b75fa3c33e77d45a6cdbc06257ccbaa20b346ecb7cfee05fef9e6c6f646593de6738ebf72db9e50c41947dac4c41fc5d3249934b564ba986f6182bc8ee6c451fd514a9b5f2e2a33fbe3d5483328b025faf21d310cbdd64da9f5470c5cf69f147d85b1a0ad4b5d397477536597676dac6b6ac6ee159c7c0cdf3ef90c7706f29e76d5e91ac8938a05751ab62ef8c5056b8ab81d23d8d1b6d995cd8e8039284c14e432493dee85cb0a434f5d5cb82597abc250cfbd223f34ff43036c293c7a67199b49dc3cae71462f0d1e25eedd357f655181bd500de18c20238bf30ab57acca411921be2d5be70334f0b3e576fa7843b0451b43dd26388ba73569e3b3dbc201151b0c93cf30c7b54ad6619339159839be209f82bdcc5995bdaa4694c418570b26d3ff20253e7ffbc049bd10100eb7cf653d09a0878dc384e200f0d98c6ff0f88e6b2c906a5397dc5dfef9ec3c3d9c4ec94e600318a49bcbc11593adc1daf8810ffa4ae7dad4e14c857dc462248fd67dd35b1da45e7e62c8cc6409f14ae53deb07c0ba81c338c074f1dc57cb431656649a6b2e46bd524c8825064b43b493f1ef7f1ee3513e730006443b464e567fa8e101a730731d95b6c8840ff829b550bf18bb72159d18e86590f330f7ac6090d6c3d874ea5e4c0480ab7be945bd0c1cb57b7f3d6e87ca77f9b38221a67b4ba87f9684d6e2ec3eaa2b551a74ad1973f2ede6b5adb7bf2b168cde05dee5ed90bc9553eb9543913a8d9d4e380410fad8a5dd269c47c1cf980b05903005830e22e60701209dbcfbea0a21bec554c72cecd7af04660c455ac7327bf22854b4507e837e458904af7704dc2c28e12915e3c9b44db10628f123428f79f6379dd5f5048e949a8d43691563d9b5403c23ea33c68a23b5e40c4715d217636e0a61e2b63d8be19b1e515306d80fe1476a09071fbaaf5b753aae15e4399ff68c46635acf763f96519ea0f1f41d1bd8dba599ab0c1ec070f0ba5dc13b48d3684d10f94551a02c2a86cf67e0f7f7dfa93383e2c0bf1dd0b9bd30360596e785a4d7fd274c34495c726e260110ac15e5e4930f5a0aaa0ecf69ced9a86ac0d59b5ad0890f4a799bcc6daa0cc1a88ae21f66800e3ca079b5372e2e0889580e794ff08e1f1a63fdcd309c323eb81cc2adb1ce08c8f0362e65ceb0481a425ce957d20d55ae79393e26651b60498150238100bd22279138682c4084936195987fa7cb9277ff43bc4ff861ed0cd1a5abafef9b2436a17d329a0e5c99bb6e8d638e54e3d4768af934fa427e5a88f3eeaccea2959c466ffa3a6f252e8470064be1be596feb3e4564f5435d56fd25c39ab22d89d56ab7a2da101caa6ec0a54be888ccc8fe685d596afbd09cf43d444cd80220b9aa9b35b21aea8f36dd1832468ae9a42fb8549a10daae04d5733553295f7dc3e9340dcadd496a00c83b4bf28c0a534e2016ec29ce56a96129b7b16b760a1c87568c64dfdf8139ffc95be5281c225fc17348b05ab105e801098bfa07a3f2e7a512fafa6b7765d8701a83ab1c6fad3fe639a764502a6f6c81d7e565351ffc2f9b93832728ca5c92ad31144cd00d01417c3a0ddec3000d7fc825c1947028a427d30c4519ca7c0f3d94f5d5888a54937444baf52b553c248b5480155dba592a884e9975a299ca522620d2f282c095384974011d88c49b234bb9f2a4730d75b6c3e59b8698cd685a47bff8ab08044eb5bef5bc02cca15578d015aa3e094ee9b5feeca57d3fa581439ec25bbfaa225093edd4371d19a69794d0281b187937839a90c1b411ffbfa317fa68b431e86f023e43b662dfc0542e3718e13f5e8dea937efe706af8f192c27a63c72199a76cc83846645abfda75d825d3d92cf3e1b490fd1956a11c7c333d72c506d1c2492b3ea989ce2ab7d1f793c49922cc8cf2d21d7f5a54cc1e3a74aa35197a5140b33fde8abd0436ee53b13714d52e799ebe5892b68b249ca08eed00a087340053f09df981b2a122fdd339e5e00d0bc49107c642705522f588fef4457253f123315e77fcb514df21a7ca501204904c86ed53cb42e55bca74bf3fb056d38b77fa7737d4a30d356bb12dfe971024aa4021e5b8daa9f964ad90e1396d1e8712de7244fa78db4d4452d07af3ca9fb53ee141b6489d11fc628f6ad36488a0d104f6569f897f826558ea31a0504424995b58bfb257ac09b46bcc8ccc97622e3f53c24f0004d8d31b4ac66fd2564bfdbe4b00bb5fddf344cb58000ff6f58c8fc3b50ab64426283f7aa2490ef5b68c0eeb769a7a0615728abb6c72033882af40fdc4625d187f7fdc70ce7a6bb94709cb5496423202ab2a49fb1214909bcd333371149f895ec7db7af177fe6d4cfb3ff3e9a190c0fb5b9390e027c59b1c684b9ebd50278e70ad777482578fca5ad82863b2f32bd688677d742b50a76348cf95ada5b1c261d2be60cd846195d7538340bdd59cb0388fe76079cbe142b0cbf77aa74eb9a015a9700c6d1d3e1f", @generic="7592aadc93f4cffe53a3649cddc77213be1dc5d610d4c377ddd55a7063adf39800acec8bf69acaacfe36464bf371c96db89f6b595304", @nested={0x4, 0x55}, @generic="6b24f6f2e93821175c0768cc25ee22edf05029df45fb2e3aa600fcfedb3ef71731bf4312e5e5abf904b79f318514b6fb6de12947687e3e6b413f66b4debac0822f3f1ce33eecb689b61637947490db76ae1a899e73d682a069bbe3596a710805", @typed={0x8, 0xaf, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x25}}]}]}, @nested={0x3d4, 0x3c, 0x0, 0x1, [@generic="382836890914af3e664d55ffd9d64027d5b9dfa528dec969c14329e0311705e9fd7295cb49b4a50c3444ea01370083475510bc85cd267927fb0442d7f189680fa69947d51e1aa38f4c8984209e77eebf0a86c1b540f62cb640ea44986ef8e2bafef13c31030a35320deebf6cdf5906928854f7e31043410bc70b9061b7127adbf890255cd152678b0f146260e9035a0bf50993301f556bb101ad2ac4a15a4e0d34a857beb1ea1487e2db4617f8a488cbdc7f41814f434eb4e7b392cec1af0bc8fd3eb21f4ce2c88e1b40cda350c85e18a977f111eaf4bfe9c2e24fee9d1c138579e98eb87d5c40fc580b1ba8cf4583d0", @typed={0x8, 0x4d, 0x0, 0x0, @fd=r1}, @nested={0x171, 0xa, 0x0, 0x1, [@generic="ed8af7e93bf9cd5b01b189414fe52ebcb9f47fe18cef60c31aa506a96e7dac0aa25142df227381bf5c35c4f39a6678b06557def19c23f3be0dc6a761f0e5cd640f4d456174672d3127bd704695b0c6949ebf6b738cfcfeac78d7b7ec47e59c876111c82a7543f55140b0e00dc97e6ce1ca4e13350f17683e30fb4118b7375e7e83aac173043d2c74e7cf2fd86f5327ebd0f011bc15cb12", @typed={0xa, 0x5f, 0x0, 0x0, @str='%[^-\\\x00'}, @generic="9a320dea6717228334c334fa2101cbc9f5e6d46b5499ce0b1ead76990733d147bef5d9a4ecdeedbe94e9f21f60a41b3da8a42aab5c0b1e944d989198df8f4f75e4ee83c794a224e0cacc217333c156deffa07e941887516b952a9d3d1f2a197d63990681d3ea2f07576abe62e311ff320c674dc3e9dc1ea0ff9c106aec991b9e4a09e9eee873d0c44b21fd72b9517939344326a2c663f945dab1358320d13ea9391e21f98e0caf26863c956b60ef3691db8b36d4fcd28397702ad3120d48ff7dce71bb8fd181", @nested={0x4, 0x6e}]}, @typed={0xbc, 0x128, 0x0, 0x0, @binary="2d24e1a049a6dc85e76fc751cbb89df172db12e9d0a909de3b5e82ce2551efaa4d99aef954f7695cf9ea28c8e88338fab58cb062645864657108be4faddc599a7acd66eca0fe69c5c1f7ccd4a142adf50a639531993ab0b275b52182f843e4a78bbbbfe1e242aa0c5e30a74dbb5c6a0c265fc63bfc8577de9b8fb1c557655a5d46795a44ef2de2f4be444acd24d465577de0ca114f5dca8bf1f9417b2cf3c4d57b2ac26e8aa025b54f4b35925ebe4eec800e3e305e5982c6"}, @generic="18b0ce72ce52c38db0e759de04c0eb0213fddae138725c4b09832e1bb8dcd96f746290606dd36b10a559064a40936b1357d89348181be98038b1b8ef72530926993c19af517d6d14fb0f38df1cb48143cbf7ced724ad05ce835d7c2d446b8ac7460832308795b6fa07a982d32b601f2a501658a8fd", @generic="038a1d6da5816f742c0da2a74b49a5210d831663cdcd3e48eb22704cf6ca6a363f0e832a7292881c5f926578cc9901eb63f2e9"]}, @nested={0x19e, 0xbc, 0x0, 0x1, [@nested={0x10, 0xda, 0x0, 0x1, [@typed={0x8, 0x89, 0x0, 0x0, @uid=r2}, @generic, @nested={0x4, 0xb2}]}, @generic="09c1d01d6856534bac64c226d563e1b8b35f14e0591b2c3cae87bfd62ef246cb5a44faa553f729bb6a694d3f9b8a0cd62a5c", @typed={0x5, 0x138, 0x0, 0x0, @str='\x00'}, @nested={0x99, 0x13a, 0x0, 0x1, [@generic="5f8901a82161d54b33ab903e796c01eb5d761bf1af0d6a136dc33b882988c915903b1ff0f704a6ec6e29516c84f64d71f30c956ea7c727f6192a9f74907e753afebaa78233e0c89dac32af03f52591c85410b36fb36f75bfe8175fc4c644db96bcb5cdedbe602cd9819f7e3e7f6c8a4ac07bdd160f39409e3f18d7d9b9dfb4f3449f16d262e7db164b28dd0d41061fe9a4db0a59fb"]}, @generic="f09c9b3466132884a811102c2fb0fee115b0480b4a237a69e873f5d413d28b53460de110dc79d138ae212f43a4de51eb770e816f8e050bcdb2e8c8277ab0df99f70c9e18c171908037d1812add1320f743a177541962a13704e606c15325bedfca02e914f043b4d4374f80778727355a7af391b20582ff876a6ee359a220d5ed3e3483cf961df7b0", @typed={0x6, 0x59, 0x0, 0x0, @str='\x88\x00'}, @typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}, @typed={0xc, 0x4, 0x0, 0x0, @u64=0x101}, @typed={0x8, 0x126, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0x86, 0x0, 0x0, @pid=r5}]}, @nested={0x159, 0xe3, 0x0, 0x1, [@generic="5c5f63d2f6951e8b65b8d67a759d33ac6257ffd824374df749fa198bbd4ce2c478716fd5108c7c2803880667ab007b637e992b61ada9456cef104341cad93b6f448bcaa4c92231211a041868e199bf30990197321f225731ccb5fd01edfd0079128d91a387cdef1bf5ab35d84d9e2ee3d58415281d4fa6f5a939fb80771508c839", @nested={0xd3, 0x156, 0x0, 0x1, [@typed={0xc, 0xa4, 0x0, 0x0, @u64=0x6}, @generic="d2117f1738ab80f850d7d42594e6dbfdb282c6f86554a1e2559eadfc209a8f069b2f362dfb80f90a4a314a9cf34e1b70fcb993a37c1fed82ba77c3db7dde292cfea72fb47f33ff97e490617ad7ca8a9434a357a8ce5965b62a20f49c4216b158be379076ef57e1ea04ec45ed5d2eab3a430351f37c5a83c239434ef24e3c8195cee7f0eb4f7356ee34a22d9833431079c58d198d1d60671edabf7fdc4478f6a5d2525c4f19184837203792027b1448df34ae75a0656e13481dd68ad13f2d720533019f"]}]}, @nested={0x1090, 0xcf, 0x0, 0x1, [@nested={0x8c, 0x13f, 0x0, 0x1, [@generic="b7c2c332a78d107d8b3d3aa876198db854d2c6c2c8cb3dcdf72642985597da392879cc06bfe6709f740b9f3d2a3191166523", @generic="16e3a7c1ef8b62ad5dce959b595bdf1e44544fffe298b0af784e06972862512093fd1f0952d61ac27c833c2d032e155eb87b718b5f63f309812cf0c42b00f2a1ccbc61ca8f10e197f652", @typed={0x8, 0xdb, 0x0, 0x0, @ipv4=@private=0xa010101}, @typed={0x4, 0xba}]}, @generic="c5b6250ee060c743795b38ad0c243898b270690582b3e171df8e5b553843fe75cabc7d19bf1e9c3b079befd9603322429c8443bfb4a899af51226b75ebbf7623c761900dd9735b0331d3828f604cb5cba6b295599e102b16d40a0e60f5b9df2a417fa17164b1193df410ae090f9a62c23e9626263bde38e780156629d1fa1eab01320d560871c14874b96f9cf2a209128b3659e707d1932ef76ff6e78f175320ad4f5da3754b49bc7a7ea309036de9f889c2f4c96a771c313ea558b149870f3d6a1a597571e3ef0329c5ab2226104704aaac7fda5278f8eab909bc77911b8eeed30321e4f40d4b8760b96c1ce6a3dd8b21af1149f52fb3e5e472cd7f83d8d0d83e8f548b28859b51047c58c222028c481b7e49c98b004d4afef11e142aea4e65975aa01e85b5b2785570efd62c02ce93aa6d1426e81883526528908c1b76e57a00d415b9af0b8984b33e6859d31a6bb167cab3838933f61e3d742275de9dcd4a998ea280a811661a4b7737a69439ca58efcf982e8fc4183717b38f8a4e8791089591f2753f54277007b7a768a4e542fee0afa8aebb768409654b4341dc20150f468dd691eee659a5f35c4b24096c770e48ae4438ac25c33066fb86d5c0c6311b9f16d37154a7b2c5a7583211061b4dd1063657266c97268859c1a0e54b9fdc4dc4911c1f4e5d173514ea9bd2ddb4c76538e9e6c9a5e398ad35be8701b840febcaa65046049d7c763945cc0d316ac3a22f8d18c73957b5cb51481ff94f02630a2a6d4fabb54ea6440537f1e0ed855ea4007631601e814c594104cc2acd8bb72fbdefbfcef37eba75772e88bcdcded1945995e001a5cf6c5d491da6d1ccaaa3930678cd993e45177707976212e9a163580bb039324348a8346a8a6cc6fea93ae94156ce8584c2b0020d3078df0bd70c92d8cd851a61ed9037993732d93271b090a5f71bd81211779b6dde8daa48d91ebbbc1dce675a11afc2daf02bd41dee896b88de91fa9eac563b7411405956f238970b1c63d0e508c8f32da0d81030b24c74f04138c5f982edf9a41c85e928754b268841d7824f0e28c0ea50bd12aea30d575b5958d5b15ef9f122bd8c88b6fa138887f9f2e6ed865080609ed0e095a26e9a53c5147fe57847e867abfa326a4372bdb4e26ae4c334cd51d4a0ff7af296743bd4429470a0e339c264e7c69a94fb64693abef44f21eead08bc940670ea69dc657d4ede929a0f747c950ea9d8f1e56f254afb1556594319b7562978a4b19e97ccdda5b2118d9e603d9b7977df972b82659022992d170d07d66486393a967a3ebca01a19200b2a85db7b7fbcc00ad93cd70d513f446b51735b72aff5eb8415bdc844a645c8f87083448a5e7a9517aa94185882618ae6e02fd7a6bd09e531d002c1e01a43c7d6377fc96ea827526e94e22a7feacc148d61d3745e584093ab39c64f9f55aae670a49887f6bf030da97613e1d23face3981d820060eb2ae8851a0bcd89f521183168a2bb05e3bff1425a8f8f0db9478b4957d0dd7471aa4efc58185ef6c6a45fdaa4b82ea07e6e2d464f1cc7ca72af3ededa7e1d2e4d57d21ea4e73f0f9af508dc9e64e65e78a147ebae0bfbf2961617ea4fcac5c4a507e8db64ff99928aa6caa50f872eef580a562a103298430f05d092d9f7b1325794456b4e4b30454ff19cabc1728f04ed330609780e8842802bceef7777cef92241797aae6c434fdafa6d9972d88ae2d4c2ef8cf77db9788dd8890190a4fdcef715793e4283e57f2717e65da6e23d082f9c15cc4e62eb9f7524a5a5767f08f0917159d42f2598218bb2de25f4fd3142dbf2996cb9e5725d5dccf50810777388229310ec32e1acb0742a3b9ffe490611a13481eacda116e9edc61610fa5bd06bde03f0a38edf7fc0367f410e275174ea0a5ad2b4478e9090de58e36e0365a27f5d911cd0439668112348608dc8db90cabac61edc222d6f290281e29f3d2ec5753f6936ea4a485fb10715fb8032282271cee7623c5e12a47bfd7f6a0f72515bdfeec30cec9e4c16ead78fb6c3dc9c5c9908f23930cfa785ef499f137b58da3f231b6e2d6fe5dd8bc72122c5ce63f40cdda2fb436ee9d3a73e653143a0a33a3ea45b89748e24c44b5f3a9f662771de306746c6bc94c0b8140818542ef3658d46b3315a228ffb0b1305a8a53fc02b41fa88bd617c2310f632e950d02e3fa9507fd148b786af2a723a289326b5758b64f1c1f2b7aabb805b4a3f21ff111bcfd5ffc32b967651fd9f91212da5ac5d90c3ca788330629595b95f5a8c4b0ca2d1abafdd3aadf60c8a872de64bb4c997f68b6c61825b3a82e4256897be06e08e1fd93c8bf5935b38e7ffa7545a1ab34b41e824b93520ab9169c94608f8925f43610faca42c0dd3ca44ad197b205d5a1eb790f1da3e1c094bf96616998a066e9131e9baa9e0eb00de17feb720e4427bb1e03f38a7c45349db7bd1c021dd391d058939b8b1d58bd6a85e737631d52fd64337d22986aeb1a394c0bd075a651b22301f230097fb9c21faeff10d63f9a4fff075e49233f647639a8e834d93317794a747fa4b1cca26dc2a9f54460dd3ce69a1082433549438448e1cd3fab8012c38461a7933e8e76bf5fd4f65ca7147185cb7fdfcde1f5f3162c4c4e92f0655d35b12cca9c45be9ed1491cb2deaeb1d6a70f1a002ee7bdfc41aaff20ce47ba340ccea0f7a038ef493477d7490e5ecc1e9a6eed715eaedc0778e28d9fee9952a702bbda7125402cd25d43a70e9998c8849907694e5f9b6fefec21b48e54de7c413bb5d745a104f6b4aec5cd2617739d1fa94376cd2b465700fb732fb8727c9a2c6d1a8d0b5a468110b4d9423cb92d737c8c94f3dbbab77a937c824cb02ff63b14f2f489483a20859abae41e0d7a7eeda1bdf0edc6bcc098a34ccf1a275e046f30d1048daa517ad9213b749681a4a7ec5f735f89b54c7ee081d85c60e3692ab4f277f1cdb36c89ede18b66952683325476743aa145ad08abf9400b6a5636dd2c5760bb24544b01f7971b16dcfd7fed7bb85a37664b72271bd66102587fe173bcb4b9a2a421fe43733566335222c25879268b6484f014bf6469f5ec7c8cec007ebd30566b4c6d9068436d98bb87b20174ac6cdcc71619ad7432fbb69f3c04425d784ec622234b32454f50b5ca276cb89ac9dbbb1d8e0bb92aaa5ddc0724af93540c288a400a95eaa08db389f22a2db81d466121391056ed998bcacb76d69c49b69971c3a5eda5fc7858cf21cd1d47e2fc10b5de6e9966dd01452e7a7a7f77131e548ad00f89705bce48b12e4e06996c4996ebf0078035cebf0dbff231b383c17a7d30ccf2244069d79dec5e449747877db156aa6eef4bd774081ad772659b2984079a762dd24e2dc16d18ee0b7a2c75777b56681a6d778a666dd1c4fe11d7b304f402ceb60bfd3fca89980af79ce0bfb0a34eca24e8574787f77e480091ce426a3cabed0c182fa23523c8cae3d83301710389b035392e62837e6fb9e64e78175ea95e98a6645cd84c457b18687deab518048768c7510b082e86fa4fd5986e27eca6977bb2bec6fb035f21352616827bb1ee7a15fb9eb971f2196f4129e1c3805f20013b935e5182c0f6cf71d90f6e64cd4fa1da11058815ec657a84af21fcc32337c68d240f9e5c91af0bfca092f31532c897019d3bd0c85bcabbe1e7c1823499b7b179fb62c7b6de74e7012febe0f73e071223a7addbbbfd5420380e738e829b70a6e0f3a910d0722fed39e5ece389cb41f8883de993e6d10d3c33166a7f9ca64980e3126be751aca1e16845a2b8c31277538c830289dec1a2e6f8ee60c794b127941c7d91714429125e136e83c423b9df774c32ba20da9b752f332119b55f58d2bfad04803a26fa9f944cb6663bf3d0b9e0c5e4198c77aead48d4974af1a669d2a62c89c5947e3e95ba4c7297f1e74e780b1c6cc67d2b64f94c9ec113170139e145e562692f21b55fb12bc8dbe2372dcbfcc952ac0cc5b5bcad6faddd51ccdc1b16c3fe5d37ce643c1a44ab1cda978dfef2e41c30c9c806ef8c12204f2547215b52d80c332670550e54ae0b15799f7afad8eb8a514f6042a83f5dd8cb349790afcab8104daa5413cc75ee5655568a93514e157a59861116a0a968b85cff02dd56110811ad45622f823c8b39afd6c832923987644839a75f6b94131bc9643341424346b0c46c617bad012a8f35e7444608d2030cc968e64d44ead0790aad482a5356a41f80e8e147b4643bae4e8f2ddbaf3ad91b7c0ba093cb63925d8e193fe7d38797d0e159560146b73f717709a249b89ccb14e10c1b76bdddbade41d95c24f96518349b68b34f2dc32f76f4148904c3927a1e90ccb2a02518987940f241e08b64a32eae84580a31d416ec98926ad06483dd140a6666555e8cefdd1944c73e247aa4a2e22bcc282824b329a3cbd7369b704e76c6a41989c44f7d8fcf95d9bf7c366c4adbd41056121a186d463002e6318adcbd996297b98e51241052197ac159df722518b618c1219d49faab7132cb7557af43e176a02ceb63234dbbe3707fe40b34ea2bff181b466dc3fefcc1a23b5365ebf48c7f69b59ce50f9e1db783b4ece9c6ac1c9ada163a7dcfbd5d93788a23db938eb267baef84e87aa52dea35765b924d4502cdb7427533a93516512bb73b5f0b995abf1af9e83fa5a0380bbacaded41a5c8625362ed5d14c3ea264923c9b4697d3547504297f61e5482c546c5bc37196fb59b7c6513471cffeb533c3fac15048bdba26320553056b60de3ffc3d77910da2a888a4fb0fabff86ce01923f4a41e76b1f0e8fc574c6e5c640a404b97b81d2b7a6e75a783af018587207c2a5bc46881856a08acc0481c7f5bf120d1efdf48939f468c7d4d3d2fc40eaeaa779b43dfba2eee1bc074e34bd9920f3938d1d4d64e26a51cbaf809a6f38c65b5e6a58cf96863a8b41c15aa3458f33935152060b76389fe093362a8a3b65f4a84bd50202631f332eb17bbfa2362cbd6071ce9b2bed41d315973c2b0f212a7cf61dc8b0e3f6957fa92c23d7884f729949926efb820fcf06bb3bc7fa12cfda887c52c39ce2e1e4c56d727a18a64a56ebeb8ee692406518bb35bdb98eba0f33d8592f1b969d8c1307fa4a92b5c7cf5d17f51b968258202a17102879bd9377e3698088b5da43a6eeafc4ff62d9c98940602a268ba4627582d4d35dbd89a33ddadac9a9c84bf6a0638458887f91d36a594bb3e84e096074369dafabbba01a6e608829e372a1da08939f5abd2560c2b01684b128cbf358dfdecdbb09e52b015d6064f72a2ffd6cc42b8683db90fefd2a3fcea01bdba0c519715b4ae254db73118cc0357a83dde2c9109b369a21874f9a8e7f6e69a4b575277bd54bf0d218089de19def2be6264a6eceb7744182a04f5ddd0eec7501d4e5cd229497c573909a874b343c84e6d4e6769c4e7070d8ad0ab0ed920c313fac628efd7e9f83adf8e863a8ea6375b2c225cf1880752541a1085f3c1e0ed08baee3e28ee1be3dbfc55efce5af43ad56f58df27bea310910b96233afef244a678af49f2c14e5f3d43325082ca4f367c1d13c36caf8d8fcdc1f6fec692f47256c39e2f2fa1a4baabcf161d11f8d0eaea99e521d2f5dd0b5fec10c7a4d9f85675b03af7db11c4456ccd160497f1816f0720cdbc4ffec5d817dac11c79e0568b1a5b0d0246a13e1fb168017569c469045d72229dd7011e516e6d5a368d09fcd537778661cbd79620a6df4848f857826e71de1b018165c92533e07d6a1bdd5317c49338b2cd8208223c11c108823386d57"]}]}, 0x2894}}, 0x0) (async, rerun: 64) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'wlan1\x00', 0x4000}) 92.774469ms ago: executing program 1 (id=1929): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f00000000c0)="ca1bd14b73cc39d13f5dd780749c2ef7e3911229db278f4bf7c94a4b51480d40c04515a6bdf7869892479ef5d3deca8a7f72e92cc07649d51ae9b9e5b41ac33c", 0x40, 0x34008013, &(0x7f0000000100)={0xa, 0x0, 0x8, @empty, 0xff, 0x3}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b04040000000000280012800b00010065727370616e000018000280040012000600020001ab"], 0x48}}, 0x88890) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1000}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x80) 53.900461ms ago: executing program 3 (id=1930): connect$netrom(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4}, [@default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x40000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000240021000000000000f8ff00000000000600a90000000000e3b18fa8256c4facf12075802af04a66a3f1f52fbbb59883095e9a"], 0x1c}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x1, 'syz1\x00', @null, 0x5, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r4, &(0x7f0000000280)={{0x3, @default, 0x1001}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0xc) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) 0s ago: executing program 1 (id=1931): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r1, 0x5, 0x74bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x40}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) kernel console output (not intermixed with test programs): bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.213106][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.220532][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.246682][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.259512][ T5847] team0: Port device team_slave_0 added [ 77.288185][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.306061][ T5847] team0: Port device team_slave_1 added [ 77.313963][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.325436][ T5852] team0: Port device team_slave_0 added [ 77.358493][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.369773][ T5852] team0: Port device team_slave_1 added [ 77.378505][ T5850] team0: Port device team_slave_0 added [ 77.422959][ T5850] team0: Port device team_slave_1 added [ 77.429300][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.436274][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.462577][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.511259][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.518358][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.544452][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.557258][ T5841] team0: Port device team_slave_0 added [ 77.563725][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.570980][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.588598][ T5846] Bluetooth: hci0: command tx timeout [ 77.598019][ T49] Bluetooth: hci1: command tx timeout [ 77.603286][ T5849] Bluetooth: hci2: command tx timeout [ 77.609332][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.630405][ T5840] hsr_slave_0: entered promiscuous mode [ 77.636676][ T5840] hsr_slave_1: entered promiscuous mode [ 77.662375][ T5841] team0: Port device team_slave_1 added [ 77.668405][ T5846] Bluetooth: hci4: command tx timeout [ 77.668413][ T5849] Bluetooth: hci3: command tx timeout [ 77.682326][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.689370][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.715939][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.728545][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.735535][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.761572][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.773854][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.780967][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.807008][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.857546][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.864700][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.890613][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.926793][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.934015][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.960286][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.025017][ T5847] hsr_slave_0: entered promiscuous mode [ 78.031291][ T5847] hsr_slave_1: entered promiscuous mode [ 78.037272][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 78.043151][ T5847] Cannot create hsr debugfs directory [ 78.076776][ T5852] hsr_slave_0: entered promiscuous mode [ 78.083191][ T5852] hsr_slave_1: entered promiscuous mode [ 78.089605][ T5852] debugfs: 'hsr0' already exists in 'hsr' [ 78.095335][ T5852] Cannot create hsr debugfs directory [ 78.106696][ T5850] hsr_slave_0: entered promiscuous mode [ 78.113346][ T5850] hsr_slave_1: entered promiscuous mode [ 78.120207][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 78.125934][ T5850] Cannot create hsr debugfs directory [ 78.224190][ T5841] hsr_slave_0: entered promiscuous mode [ 78.230733][ T5841] hsr_slave_1: entered promiscuous mode [ 78.236811][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 78.242701][ T5841] Cannot create hsr debugfs directory [ 78.598692][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.611628][ T5840] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.650560][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.660425][ T5840] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.669125][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.679536][ T5840] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.713614][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.722804][ T5840] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.796183][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.806165][ T5852] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.815119][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.825715][ T5852] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.834203][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.843560][ T5852] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.851749][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.861886][ T5852] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.969766][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.981357][ T5850] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.989642][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.999865][ T5850] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.008538][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.018332][ T5850] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.032015][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.042516][ T5850] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.066238][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.136916][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.185251][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.193226][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.203265][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.212536][ T5847] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.231385][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.238564][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.246809][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.260484][ T5847] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.268896][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.279012][ T5847] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.299753][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.309296][ T5847] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.404156][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.431052][ T5841] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.440865][ T5841] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.449766][ T5841] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.460645][ T5841] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.470181][ T5841] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.480704][ T5841] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.496989][ T5841] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.506923][ T5841] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.550106][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.574010][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.621329][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.628535][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.658393][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.671306][ T5846] Bluetooth: hci1: command tx timeout [ 79.671344][ T5849] Bluetooth: hci0: command tx timeout [ 79.677076][ T49] Bluetooth: hci2: command tx timeout [ 79.722567][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.729822][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.749077][ T5846] Bluetooth: hci3: command tx timeout [ 79.760963][ T5846] Bluetooth: hci4: command tx timeout [ 79.787307][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.830351][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.837492][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.860272][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.867423][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.900804][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.922877][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.016862][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.029418][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.055213][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.062442][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.100025][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.134906][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.142120][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.173129][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.180349][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.220224][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.227415][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.496254][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.634874][ T5840] veth0_vlan: entered promiscuous mode [ 80.706688][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.746405][ T5840] veth1_vlan: entered promiscuous mode [ 80.759614][ T5852] veth0_vlan: entered promiscuous mode [ 80.817618][ T5852] veth1_vlan: entered promiscuous mode [ 80.851555][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.864455][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.889279][ T5850] veth0_vlan: entered promiscuous mode [ 80.906961][ T5840] veth0_macvtap: entered promiscuous mode [ 80.925501][ T5850] veth1_vlan: entered promiscuous mode [ 80.933437][ T5840] veth1_macvtap: entered promiscuous mode [ 80.982511][ T5852] veth0_macvtap: entered promiscuous mode [ 81.003241][ T5852] veth1_macvtap: entered promiscuous mode [ 81.021312][ T5847] veth0_vlan: entered promiscuous mode [ 81.033761][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.061969][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.089644][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.097127][ T3539] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.107152][ T3539] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.131490][ T5841] veth0_vlan: entered promiscuous mode [ 81.138558][ T3539] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.148552][ T3539] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.158342][ T5847] veth1_vlan: entered promiscuous mode [ 81.169554][ T5850] veth0_macvtap: entered promiscuous mode [ 81.179853][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.226629][ T63] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.237030][ T5850] veth1_macvtap: entered promiscuous mode [ 81.247468][ T5841] veth1_vlan: entered promiscuous mode [ 81.259668][ T63] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.268592][ T63] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.291592][ T63] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.345131][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.374247][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.402888][ T5847] veth0_macvtap: entered promiscuous mode [ 81.414624][ T3599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.423360][ T3599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.458358][ T3599] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.467130][ T3599] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.490288][ T5847] veth1_macvtap: entered promiscuous mode [ 81.500927][ T3599] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.511649][ T3599] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.542584][ T3599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.552003][ T3599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.563735][ T5841] veth0_macvtap: entered promiscuous mode [ 81.605879][ T5841] veth1_macvtap: entered promiscuous mode [ 81.620472][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.628686][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.654551][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.681393][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.719106][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.733034][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.746110][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.755431][ T5846] Bluetooth: hci0: command tx timeout [ 81.759381][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.761576][ T49] Bluetooth: hci1: command tx timeout [ 81.768152][ T5849] Bluetooth: hci2: command tx timeout [ 81.774238][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.790969][ T3539] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.804331][ T3539] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.823187][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.838822][ T5849] Bluetooth: hci4: command tx timeout [ 81.838933][ T49] Bluetooth: hci3: command tx timeout [ 81.857405][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.865743][ T3539] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.876123][ T3539] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.913455][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.923278][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.944135][ T1152] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.962066][ T1152] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.009016][ T1152] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.027393][ T1152] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.131857][ T5961] batman_adv: batadv0: Adding interface: dummy0 [ 82.138965][ T5961] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.165333][ T5961] batman_adv: batadv0: Interface activated: dummy0 [ 82.246829][ T5966] batadv0: mtu less than device minimum [ 82.254965][ T5966] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.262485][ T5968] x_tables: unsorted entry at hook 2 [ 82.267394][ T5966] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.282564][ T5966] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.294229][ T5966] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.305330][ T5966] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.316425][ T5966] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.327638][ T5966] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.338909][ T5966] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.350302][ T5966] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.393457][ T3539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.414947][ T3539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.478981][ T5963] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 82.498738][ T5963] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 82.531565][ T5963] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 82.553384][ T5963] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 82.574186][ T5963] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 82.585845][ T3539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.607206][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.626128][ T3539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.641355][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.706922][ T5976] h: entered promiscuous mode [ 82.745364][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.769318][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.902256][ T63] smbdirect: ib_dev[syz2] removed [ 83.136076][ T5983] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 83.304581][ T5992] netlink: 'syz.2.11': attribute type 2 has an invalid length. [ 83.659323][ T6006] bond1: option resend_igmp: invalid value (32767) [ 83.666057][ T6006] bond1: option resend_igmp: allowed values 0 - 255 [ 83.679797][ T6006] bond1 (unregistering): Released all slaves [ 83.828744][ T49] Bluetooth: hci1: command tx timeout [ 83.828908][ T5849] Bluetooth: hci0: command tx timeout [ 83.834528][ T5846] Bluetooth: hci2: command tx timeout [ 83.907930][ T5846] Bluetooth: hci3: command tx timeout [ 83.909466][ T6008] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 83.913795][ T49] Bluetooth: hci4: command tx timeout [ 84.090916][ T6036] IPVS: length: 239 != 24 [ 84.664299][ T6061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30'. [ 84.682087][ T6065] syzkaller0: create flow: hash 563969612 index 1 [ 84.763289][ T6061] workqueue: name exceeds WQ_NAME_LEN. Truncating to: .ùAÑH“•šÞÄéºt&R¢ÅZ·Y6‚)‡6§ [ 84.776601][ T6068] netlink: 14 bytes leftover after parsing attributes in process `syz.0.33'. [ 84.833633][ T47] syzkaller0: tun_net_xmit 76 [ 84.846596][ T47] syzkaller0: tun_net_xmit 48 [ 84.869112][ T6046] syzkaller0: tun_net_xmit 76 [ 84.880197][ T6065] syzkaller0: delete flow: hash 563969612 index 1 [ 85.096083][ T6081] netlink: 'syz.0.35': attribute type 21 has an invalid length. [ 86.257005][ T6081] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 86.277213][ T6081] bond1 (unregistering): Released all slaves [ 86.282641][ T6105] Zero length message leads to an empty skb [ 86.294586][ T6099] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 86.459642][ T6110] netlink: 'syz.1.39': attribute type 3 has an invalid length. [ 86.752202][ T24] cfg80211: failed to load regulatory.db [ 87.339077][ T6154] syzkaller0: entered promiscuous mode [ 87.382625][ T6154] syzkaller0: entered allmulticast mode [ 87.403227][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.50'. [ 87.448603][ T6161] netlink: 1204 bytes leftover after parsing attributes in process `syz.1.51'. [ 87.703818][ T6172] netlink: 'syz.1.54': attribute type 1 has an invalid length. [ 87.780610][ T6180] netlink: 20 bytes leftover after parsing attributes in process `syz.3.57'. [ 87.849209][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.56'. [ 87.858174][ T6187] netlink: 24 bytes leftover after parsing attributes in process `syz.4.56'. [ 87.867188][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.56'. [ 87.876682][ T6187] netlink: 24 bytes leftover after parsing attributes in process `syz.4.56'. [ 87.959668][ T6189] syzkaller0: entered promiscuous mode [ 87.983538][ T6189] syzkaller0: entered allmulticast mode [ 88.094191][ T6192] syzkaller0: entered promiscuous mode [ 88.101356][ T6192] syzkaller0: entered allmulticast mode [ 88.286421][ T6203] netlink: 'syz.2.63': attribute type 11 has an invalid length. [ 88.316325][ T6203] netlink: 224 bytes leftover after parsing attributes in process `syz.2.63'. [ 88.373933][ T6204] tipc: Started in network mode [ 88.384547][ T6204] tipc: Node identity 02de803c202c, cluster identity 4711 [ 88.415221][ T6204] tipc: Enabled bearer , priority 0 [ 88.530285][ T6213] syzkaller0: entered promiscuous mode [ 88.539988][ T6213] syzkaller0: entered allmulticast mode [ 88.546897][ T6213] tipc: Resetting bearer [ 88.564715][ T6203] lo speed is unknown, defaulting to 1000 [ 88.582270][ T6227] netlink: 'syz.2.63': attribute type 7 has an invalid length. [ 88.730099][ T3556] tipc: Resetting bearer [ 88.741627][ T6201] tipc: Resetting bearer [ 89.801805][ T6201] tipc: Disabling bearer [ 89.816201][ T6203] lo speed is unknown, defaulting to 1000 [ 89.855496][ T5905] tipc: Node number set to 586317884 [ 89.872629][ T6203] lo speed is unknown, defaulting to 1000 [ 90.042372][ T6245] ieee802154 phy0 wpan0: encryption failed: -22 [ 90.058049][ T6248] ieee802154 phy0 wpan0: encryption failed: -22 [ 90.083253][ T6245] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 90.110005][ T6252] __nla_validate_parse: 5 callbacks suppressed [ 90.110022][ T6252] netlink: 64 bytes leftover after parsing attributes in process `syz.0.73'. [ 90.136690][ T6248] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 90.189667][ T6255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.75'. [ 90.326962][ T6250] bond1 (unregistering): Released all slaves [ 90.356939][ T6264] syz.1.77 uses obsolete (PF_INET,SOCK_PACKET) [ 90.430887][ T6261] netlink: 24 bytes leftover after parsing attributes in process `syz.3.76'. [ 90.431939][ T6262] netlink: 64 bytes leftover after parsing attributes in process `syz.1.77'. [ 90.447961][ T6254] netlink: 24 bytes leftover after parsing attributes in process `syz.3.76'. [ 90.585719][ T5905] lo speed is unknown, defaulting to 1000 [ 90.613217][ T6203] infiniband syz2: set active [ 90.630891][ T6203] infiniband syz2: added lo [ 90.680873][ T6273] netlink: 548 bytes leftover after parsing attributes in process `syz.4.79'. [ 90.713736][ T6203] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 90.766496][ T6203] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 90.825686][ T6203] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 90.900603][ T6203] RDS/IB: syz2: added [ 90.913902][ T6292] Bluetooth: MGMT ver 1.23 [ 90.919342][ T6203] smc: adding ib device syz2 with port count 1 [ 90.933623][ T6203] smc: ib device syz2 port 1 has no pnetid [ 90.948131][ T807] lo speed is unknown, defaulting to 1000 [ 90.968890][ T6203] lo speed is unknown, defaulting to 1000 [ 91.081876][ T6287] syzkaller1: entered promiscuous mode [ 91.102156][ T6287] syzkaller1: entered allmulticast mode [ 91.513793][ T6308] netlink: 28 bytes leftover after parsing attributes in process `syz.3.89'. [ 91.599990][ T6313] netlink: 224 bytes leftover after parsing attributes in process `syz.1.90'. [ 91.701672][ T6315] netlink: 16 bytes leftover after parsing attributes in process `syz.0.91'. [ 91.745156][ T6315] netlink: 6 bytes leftover after parsing attributes in process `syz.0.91'. [ 91.927260][ T6203] lo speed is unknown, defaulting to 1000 [ 91.956986][ T6324] xt_l2tp: invalid flags combination: 0 [ 92.033380][ T6333] IPv6: NLM_F_CREATE should be specified when creating new route [ 92.486613][ T6348] trusted_key: syz.4.100 sent an empty control message without MSG_MORE. [ 92.632330][ T6356] netlink: 'syz.3.101': attribute type 4 has an invalid length. [ 92.671033][ T6356] .`: renamed from bond0 (while UP) [ 92.712581][ T6203] lo speed is unknown, defaulting to 1000 [ 93.020385][ T6367] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.522370][ T6385] syzkaller0: entered promiscuous mode [ 93.548679][ T6385] syzkaller0: entered allmulticast mode [ 93.560479][ T6203] lo speed is unknown, defaulting to 1000 [ 95.010853][ T6203] lo speed is unknown, defaulting to 1000 [ 95.067442][ T6418] tipc: Started in network mode [ 95.077598][ T6418] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 95.100463][ T6418] tipc: Enabled bearer , priority 10 [ 95.285155][ T6427] __nla_validate_parse: 8 callbacks suppressed [ 95.285174][ T6427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.119'. [ 95.381935][ T6432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.121'. [ 95.483215][ T6427] vxcan2: entered promiscuous mode [ 95.519461][ T6434] macvlan1: entered allmulticast mode [ 95.553966][ T6431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.122'. [ 95.982592][ T6460] netlink: 'syz.4.130': attribute type 8 has an invalid length. [ 95.990569][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.130'. [ 96.003933][ T6460] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.013313][ T6460] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.021625][ T6461] netlink: 20 bytes leftover after parsing attributes in process `syz.2.129'. [ 96.227233][ T50] tipc: Node number set to 4269801488 [ 96.345587][ T6483] netlink: 'syz.4.136': attribute type 3 has an invalid length. [ 96.378598][ T6483] netlink: 'syz.4.136': attribute type 1 has an invalid length. [ 96.397803][ T6483] netlink: 204 bytes leftover after parsing attributes in process `syz.4.136'. [ 97.054738][ T6513] net_ratelimit: 10 callbacks suppressed [ 97.054756][ T6513] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 97.102088][ T6513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.141'. [ 97.160328][ T6515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.141'. [ 97.264239][ T6525] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.271490][ T6525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.280999][ T6525] netlink: 12 bytes leftover after parsing attributes in process `syz.3.144'. [ 97.395027][ T6529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.146'. [ 97.997106][ T6551] netlink: 'syz.0.156': attribute type 9 has an invalid length. [ 98.029589][ T6552] netlink: 'syz.1.155': attribute type 12 has an invalid length. [ 98.047401][ T6555] netlink: 'syz.2.157': attribute type 3 has an invalid length. [ 98.280053][ T6566] team0: Port device team_slave_0 removed [ 98.461190][ T6577] bond1: entered promiscuous mode [ 98.468061][ T49] Bluetooth: hci4: command tx timeout [ 99.000422][ T6621] tap0: tun_chr_ioctl cmd 1074025673 [ 99.031576][ T6621] tap0: tun_chr_ioctl cmd 1074025673 [ 99.164716][ T6629] x_tables: duplicate underflow at hook 1 [ 99.319646][ T6638] warning: `syz.4.178' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 99.550162][ T6649] netlink: 'syz.2.181': attribute type 2 has an invalid length. [ 99.879596][ T6664] syzkaller0: entered promiscuous mode [ 99.885111][ T6664] syzkaller0: entered allmulticast mode [ 100.361098][ T6685] __nla_validate_parse: 16 callbacks suppressed [ 100.361116][ T6685] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.193'. [ 100.527552][ T6684] syzkaller0: entered promiscuous mode [ 100.561177][ T6684] syzkaller0: entered allmulticast mode [ 100.703174][ T6702] netlink: 76 bytes leftover after parsing attributes in process `syz.0.198'. [ 100.744781][ T6702] netlink: 'syz.0.198': attribute type 1 has an invalid length. [ 100.885190][ T6717] netlink: 'syz.2.201': attribute type 3 has an invalid length. [ 100.903215][ T6717] netlink: 766 bytes leftover after parsing attributes in process `syz.2.201'. [ 100.963809][ T6719] netlink: 40 bytes leftover after parsing attributes in process `syz.1.202'. [ 101.191481][ T6727] netlink: 1044 bytes leftover after parsing attributes in process `syz.2.203'. [ 101.583155][ T6755] netlink: 'syz.3.211': attribute type 149 has an invalid length. [ 101.593189][ T6754] tipc: Started in network mode [ 101.608270][ T6754] tipc: Node identity bbbbbb, cluster identity 4711 [ 101.616678][ T6755] netlink: 16 bytes leftover after parsing attributes in process `syz.3.211'. [ 101.628930][ T6754] tipc: Enabled bearer , priority 10 [ 101.894767][ T6772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.216'. [ 101.946536][ T6774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.000742][ T6774] netlink: 'syz.2.217': attribute type 2 has an invalid length. [ 102.037629][ T6781] ksmbd: Unknown IPC event: 3, ignore. [ 102.075904][ T6779] netlink: 'syz.3.219': attribute type 2 has an invalid length. [ 102.086596][ T6779] netlink: 100 bytes leftover after parsing attributes in process `syz.3.219'. [ 102.122254][ T6779] netlink: 108 bytes leftover after parsing attributes in process `syz.3.219'. [ 102.178844][ T6788] netlink: 312 bytes leftover after parsing attributes in process `syz.4.222'. [ 102.344856][ T6795] ipt_REJECT: TCP_RESET invalid for non-tcp [ 102.640499][ T6808] netlink: 'syz.4.228': attribute type 5 has an invalid length. [ 102.846331][ T54] tipc: Node number set to 3149642496 [ 104.618599][ T6843] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 104.666328][ T807] lo speed is unknown, defaulting to 1000 [ 104.695854][ T807] syz2: Port: 1 Link DOWN [ 104.763423][ T6046] lo speed is unknown, defaulting to 1000 [ 104.798100][ T6863] netlink: 'syz.4.242': attribute type 1 has an invalid length. [ 105.088816][ T6873] lo speed is unknown, defaulting to 1000 [ 105.166019][ T6885] Bluetooth: MGMT ver 1.23 [ 105.197197][ T6883] syzkaller0: entered promiscuous mode [ 105.207448][ T6883] syzkaller0: entered allmulticast mode [ 105.256421][ T6883] tipc: Started in network mode [ 105.281952][ T6883] tipc: Node identity da109f67c5a8, cluster identity 4711 [ 105.332551][ T6883] tipc: Enabled bearer , priority 0 [ 105.388989][ T6881] tipc: Resetting bearer [ 105.475382][ T6881] tipc: Disabling bearer [ 105.696594][ T6907] xt_CT: You must specify a L4 protocol and not use inversions on it [ 105.763048][ T6907] block nbd0: Unsupported socket: should be TCP or UNIX. [ 105.827181][ T6908] block nbd1: Unsupported socket: should be TCP or UNIX. [ 105.841255][ T6914] __nla_validate_parse: 11 callbacks suppressed [ 105.841275][ T6914] netlink: 36 bytes leftover after parsing attributes in process `syz.4.254'. [ 106.013368][ T6923] Bluetooth: MGMT ver 1.23 [ 106.050929][ T6918] netlink: 64 bytes leftover after parsing attributes in process `syz.0.256'. [ 106.453898][ T6938] netlink: 52 bytes leftover after parsing attributes in process `syz.3.262'. [ 106.510490][ T6942] syzkaller1: entered promiscuous mode [ 106.516581][ T6942] syzkaller1: entered allmulticast mode [ 106.583921][ T6949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.265'. [ 106.654781][ T6949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.265'. [ 106.665880][ T6949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.265'. [ 107.121288][ T6976] netlink: 24 bytes leftover after parsing attributes in process `syz.3.274'. [ 107.191873][ T6983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.274'. [ 107.482237][ T6992] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.278'. [ 107.526824][ T6992] netlink: ct family unspecified [ 107.536858][ T7001] netlink: 28 bytes leftover after parsing attributes in process `syz.1.281'. [ 107.563495][ T6990] IPv6: NLM_F_CREATE should be specified when creating new route [ 108.502657][ T7054] Bluetooth: MGMT ver 1.23 [ 108.665060][ T7059] syzkaller0: entered promiscuous mode [ 108.672343][ T7059] syzkaller0: entered allmulticast mode [ 108.861725][ T7069] pim6reg: entered allmulticast mode [ 108.873135][ T7069] netlink: 'syz.2.300': attribute type 1 has an invalid length. [ 109.877104][ T7136] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 110.435445][ T7171] netlink: 'syz.3.322': attribute type 1 has an invalid length. [ 110.575483][ T7182] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address [ 110.622635][ T7182] bond1: (slave vxcan5): Error -95 calling set_mac_address [ 110.803992][ T7171] bond1: (slave bridge3): Enslaving as an active interface with a down link [ 110.903579][ T7188] bond1: (slave gretap1): making interface the new active one [ 110.933800][ T7188] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 110.996535][ T7198] __nla_validate_parse: 12 callbacks suppressed [ 110.996555][ T7198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.320'. [ 111.148212][ T7222] netlink: 16 bytes leftover after parsing attributes in process `syz.0.331'. [ 111.688235][ T7255] IPVS: set_ctl: invalid protocol: 60 100.1.1.1:20002 [ 111.723862][ T29] audit: type=1107 audit(1777106734.100:2): pid=7254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='*oKÇ—œ—šœÃ_`—Ô'if›`93·§eüÀñB®]þ{–÷öÖ‹ô ü<$ðr-rÐ_þÙè²êYMHsñù[ [ 111.723862][ T29] èÇ[û|¥ €žŸ¢þæÕD»¸¶6zoÕ·twÇ&ÿEVg¬Ï¤9J’HøºézÕî3H3 TCµoðÎÏi×'Ͱû‰¤ÈˆÅ¢‚cööf«UÍÅ-ž]å5­[°j¾¡RÝ ´ó*… nòSÿ|N§zGEŠ ¦Ç?Õo…~²Ž@ë6 º‰dtÉ)D' [ 111.780027][ T7253] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.344'. [ 111.907047][ T7266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.348'. [ 112.040119][ T7270] bridge0: port 3(ipvlan2) entered blocking state [ 112.057296][ T7270] bridge0: port 3(ipvlan2) entered disabled state [ 112.064517][ T7270] ipvlan2: entered allmulticast mode [ 112.078750][ T7270] bridge0: entered allmulticast mode [ 112.095178][ T7270] ipvlan2: left allmulticast mode [ 112.105141][ T7270] bridge0: left allmulticast mode [ 112.561680][ T7297] netlink: 1044 bytes leftover after parsing attributes in process `syz.2.355'. [ 112.640085][ T7304] netlink: 92 bytes leftover after parsing attributes in process `syz.1.358'. [ 112.690066][ T7304] netlink: 52 bytes leftover after parsing attributes in process `syz.1.358'. [ 112.734221][ T7304] netlink: 52 bytes leftover after parsing attributes in process `syz.1.358'. [ 112.767095][ T7304] netlink: 52 bytes leftover after parsing attributes in process `syz.1.358'. [ 113.012759][ T7329] --map-set only usable from mangle table [ 113.170301][ T7341] netlink: 'syz.0.367': attribute type 1 has an invalid length. [ 113.265985][ T7339] netlink: 'syz.3.366': attribute type 9 has an invalid length. [ 113.385984][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.369'. [ 115.732412][ T7310] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 115.751463][ T7337] netlink: 'syz.1.364': attribute type 2 has an invalid length. [ 115.765052][ T7337] netlink: 'syz.1.364': attribute type 2 has an invalid length. [ 116.283359][ T7377] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.291084][ T7377] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.382418][ T7377] bridge_slave_0: left allmulticast mode [ 116.388247][ T7377] bridge_slave_0: left promiscuous mode [ 116.394306][ T7377] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.432163][ T7377] bridge_slave_1: left allmulticast mode [ 116.438319][ T7377] bridge_slave_1: left promiscuous mode [ 116.444193][ T7377] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.461817][ T7377] bond0: (slave bond_slave_0): Releasing backup interface [ 116.480908][ T7377] bond0: (slave bond_slave_1): Releasing backup interface [ 116.506585][ T7377] team0: Port device team_slave_1 removed [ 116.525964][ T7377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.539226][ T7377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.550837][ T7377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.560875][ T7377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.573423][ T7377] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 116.599474][ T7399] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 116.602631][ T7400] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 116.777245][ T7411] __nla_validate_parse: 2 callbacks suppressed [ 116.777266][ T7411] netlink: 56 bytes leftover after parsing attributes in process `syz.2.387'. [ 116.907608][ T7416] erspan0: entered allmulticast mode [ 117.101662][ T7435] openvswitch: netlink: Tunnel attr 16 has unexpected len 20 expected 0 [ 117.121187][ T7431] netlink: 'syz.0.394': attribute type 11 has an invalid length. [ 117.248514][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.397'. [ 117.320995][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.397'. [ 117.376097][ T7444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.397'. [ 117.392250][ T7449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.397'. [ 117.396000][ T7454] netlink: 16 bytes leftover after parsing attributes in process `syz.2.401'. [ 117.405025][ T7442] 8021q: adding VLAN 0 to HW filter on device bond2 [ 117.420293][ T7449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.432574][ T7442] netlink: 'syz.4.397': attribute type 10 has an invalid length. [ 117.466790][ T7444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.397'. [ 117.505828][ T7449] bond2: (slave bond0): making interface the new active one [ 117.554980][ T7449] bond2: (slave bond0): Enslaving as an active interface with an up link [ 117.606910][ T7442] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.614224][ T7442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.621893][ T7442] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.629223][ T7442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.662002][ T7442] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 117.752330][ T1158] bond2: (slave bond0): link status definitely down, disabling slave [ 117.782956][ T1158] bond2: now running without any active interface! [ 117.838699][ T7475] tc_dump_action: action bad kind [ 117.893813][ T7485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.407'. [ 117.919989][ T7486] netlink: 24 bytes leftover after parsing attributes in process `syz.3.405'. [ 117.957400][ T7486] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.405'. [ 118.031099][ T7493] netlink: 'syz.4.408': attribute type 1 has an invalid length. [ 118.195276][ T7493] 8021q: adding VLAN 0 to HW filter on device bond3 [ 118.221510][ T7498] netlink: 'syz.0.410': attribute type 1 has an invalid length. [ 118.261978][ T7498] syzkaller0: entered promiscuous mode [ 118.267559][ T7498] syzkaller0: entered allmulticast mode [ 118.433189][ T7491] bond3: (slave bridge1): making interface the new active one [ 118.474313][ T7491] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 118.728914][ T7528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.781350][ T7533] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.915753][ T7543] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 119.046188][ T7551] bridge: RTM_NEWNEIGH with invalid ether address [ 119.077234][ T7553] bridge: RTM_NEWNEIGH with invalid ether address [ 121.774697][ T7534] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 122.233498][ T7589] netlink: 'syz.0.434': attribute type 10 has an invalid length. [ 122.251267][ T7589] bridge_slave_1: left allmulticast mode [ 122.269468][ T7589] bridge_slave_1: left promiscuous mode [ 122.278278][ T7589] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.364423][ T7589] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 122.720934][ T7621] netlink: 'syz.4.443': attribute type 12 has an invalid length. [ 122.840202][ T7627] IPv6: NLM_F_REPLACE set, but no existing node found! [ 122.923166][ T7632] __nla_validate_parse: 10 callbacks suppressed [ 122.923183][ T7632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.447'. [ 122.951303][ T7630] siw: device registration error -23 [ 123.124905][ T7643] netlink: 72 bytes leftover after parsing attributes in process `syz.0.450'. [ 123.148322][ T7643] netlink: 64 bytes leftover after parsing attributes in process `syz.0.450'. [ 123.282141][ T7647] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 123.307494][ T7647] netlink: 9 bytes leftover after parsing attributes in process `syz.3.452'. [ 123.384683][ T7654] netlink: 'syz.0.455': attribute type 3 has an invalid length. [ 123.578796][ T7668] netlink: 224 bytes leftover after parsing attributes in process `syz.0.460'. [ 123.647191][ T7665] netlink: 148 bytes leftover after parsing attributes in process `syz.4.459'. [ 123.650998][ T7673] netlink: 14 bytes leftover after parsing attributes in process `syz.1.463'. [ 123.706188][ T7673] bond0 (unregistering): Released all slaves [ 123.739134][ T7674] netlink: 'syz.1.463': attribute type 7 has an invalid length. [ 123.790555][ T7676] H: renamed from dummy0 (while UP) [ 123.814302][ T7674] netlink: 140 bytes leftover after parsing attributes in process `syz.1.463'. [ 124.019962][ T7693] netlink: 232 bytes leftover after parsing attributes in process `syz.3.469'. [ 124.021194][ T7694] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 124.225073][ T7707] netlink: 'syz.2.472': attribute type 1 has an invalid length. [ 124.270086][ T7707] netlink: 24 bytes leftover after parsing attributes in process `syz.2.472'. [ 124.573448][ T7724] bond0: entered promiscuous mode [ 124.579108][ T7724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.682365][ T7724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.715476][ T7724] bond0: (slave sit1): The slave device specified does not support setting the MAC address [ 124.741702][ T7724] bond0: (slave sit1): Error -95 calling set_mac_address [ 124.934284][ T7746] team0: Cannot enslave team device to itself [ 125.021697][ T7755] tipc: Can't bind to reserved service type 0 [ 125.268170][ T7766] xt_CT: You must specify a L4 protocol and not use inversions on it [ 125.301922][ T54] IPVS: starting estimator thread 0... [ 125.313113][ T7767] netlink: 'syz.4.491': attribute type 1 has an invalid length. [ 125.337440][ T7762] netlink: 'syz.0.489': attribute type 3 has an invalid length. [ 125.357143][ T7767] netlink: 'syz.4.491': attribute type 1 has an invalid length. [ 125.367157][ T7774] netlink: 'syz.4.491': attribute type 2 has an invalid length. [ 125.372262][ T7767] netlink: 'syz.4.491': attribute type 8 has an invalid length. [ 125.419080][ T7768] IPVS: using max 36 ests per chain, 86400 per kthread [ 125.625853][ T7782] 8021q: adding VLAN 0 to HW filter on device bond4 [ 126.179778][ T7809] tipc: Started in network mode [ 126.185630][ T7809] tipc: Node identity 0eb34887c6e3, cluster identity 4711 [ 126.199536][ T7809] tipc: Enabled bearer , priority 0 [ 126.214047][ T7809] syzkaller0: entered promiscuous mode [ 126.221423][ T7809] syzkaller0: entered allmulticast mode [ 126.249025][ T7809] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 126.348863][ T7809] tipc: Resetting bearer [ 126.561042][ T7831] IPVS: length: 177 != 99848 [ 126.804840][ T7838] IPv6: NLM_F_CREATE should be specified when creating new route [ 126.811921][ T7835] nft_compat: unsupported protocol 0 [ 126.824562][ T7837] nft_compat: unsupported protocol 0 [ 127.051414][ T7851] openvswitch: netlink: IP tunnel dst address not specified [ 127.857422][ T6046] tipc: Node number set to 3360704647 [ 127.865530][ T7808] tipc: Resetting bearer [ 127.910382][ T7808] tipc: Disabling bearer [ 127.949458][ T7851] __nla_validate_parse: 11 callbacks suppressed [ 127.949474][ T7851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.513'. [ 127.983059][ T7871] erspan0: entered promiscuous mode [ 127.992081][ T7871] gretap0: entered promiscuous mode [ 127.992180][ T7869] netlink: 244 bytes leftover after parsing attributes in process `syz.4.514'. [ 128.412655][ T7891] netlink: 12 bytes leftover after parsing attributes in process `syz.2.520'. [ 128.435671][ T7894] netlink: 40 bytes leftover after parsing attributes in process `syz.3.519'. [ 128.452686][ T7897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.520'. [ 128.482995][ T7891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.520'. [ 128.594800][ T7904] netlink: 1 bytes leftover after parsing attributes in process `syz.3.522'. [ 128.706918][ T7911] validate_nla: 2 callbacks suppressed [ 128.706935][ T7911] netlink: 'syz.0.521': attribute type 3 has an invalid length. [ 129.250608][ T7936] netlink: 372 bytes leftover after parsing attributes in process `syz.4.528'. [ 129.301232][ T7947] netlink: 'syz.2.530': attribute type 1 has an invalid length. [ 129.527563][ T3539] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x9 [ 129.627692][ T7947] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.751884][ T7975] netlink: 'syz.1.534': attribute type 1 has an invalid length. [ 129.753640][ T7976] netlink: 56 bytes leftover after parsing attributes in process `syz.1.534'. [ 129.812566][ T7961] macvlan2: entered promiscuous mode [ 129.829471][ T7961] macvlan2: entered allmulticast mode [ 129.882914][ T7984] xt_hl: Unknown Hop Limit match mode: 206 [ 129.914883][ T7947] bond1: (slave ip6gretap1): making interface the new active one [ 129.926990][ T7986] netlink: 'syz.0.537': attribute type 10 has an invalid length. [ 129.935924][ T7947] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 129.954401][ T7981] netlink: 'syz.4.536': attribute type 33 has an invalid length. [ 130.005491][ T7986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.019382][ T7986] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 132.247548][ T7952] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 132.794305][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.807093][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.529195][ T8070] netlink: 24 bytes leftover after parsing attributes in process `syz.4.557'. [ 133.695849][ T8070] netlink: 20 bytes leftover after parsing attributes in process `syz.4.557'. [ 134.103925][ T8092] sit0: entered promiscuous mode [ 134.118180][ T8092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.563'. [ 135.091692][ T8099] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 135.132019][ T8151] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 135.295130][ T8151] team0: Port device gretap2 added [ 135.770125][ T8180] xt_l2tp: wrong L2TP version: 0 [ 136.132122][ T8203] netlink: 204 bytes leftover after parsing attributes in process `syz.1.584'. [ 136.344631][ T8216] netlink: 24 bytes leftover after parsing attributes in process `syz.3.587'. [ 136.369140][ T8219] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 136.384541][ T8219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.588'. [ 137.976723][ T8236] netlink: 'syz.3.593': attribute type 1 has an invalid length. [ 138.036379][ T8243] Cannot find add_set index 46338 as target [ 138.102188][ T8244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.595'. [ 138.151407][ T8245] bond2: (slave gretap3): making interface the new active one [ 138.165851][ T8245] bond2: (slave gretap3): Enslaving as an active interface with an up link [ 138.180062][ T8233] netlink: 20 bytes leftover after parsing attributes in process `syz.1.592'. [ 138.218335][ T8259] netlink: 'syz.4.595': attribute type 33 has an invalid length. [ 138.235011][ T8244] vlan2: entered allmulticast mode [ 138.241070][ T8244] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 138.370088][ T8265] sock: sock_timestamping_bind_phc: sock not bind to device [ 138.377094][ T8259] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 138.406651][ T8259] bond5 (unregistering): Released all slaves [ 138.564791][ T5581] IPVS: starting estimator thread 0... [ 138.581086][ T8279] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20265 [ 138.655974][ T8267] veth3: entered allmulticast mode [ 138.680919][ T8280] IPVS: using max 28 ests per chain, 67200 per kthread [ 138.701237][ T8284] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 138.899344][ T8297] netlink: 128 bytes leftover after parsing attributes in process `syz.1.607'. [ 139.156909][ T8313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.614'. [ 139.180171][ T8313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.614'. [ 139.202970][ T8315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.614'. [ 139.249054][ T8315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.614'. [ 139.345306][ T8329] syzkaller0: entered promiscuous mode [ 139.372131][ T8329] syzkaller0: entered allmulticast mode [ 139.727669][ T8350] xt_hashlimit: max too large, truncated to 1048576 [ 139.860935][ T8363] netlink: 'syz.3.625': attribute type 10 has an invalid length. [ 139.871973][ T8361] xt_hashlimit: size too large, truncated to 1048576 [ 139.891449][ T8356] netlink: 28 bytes leftover after parsing attributes in process `syz.0.622'. [ 139.918237][ T8366] netlink: 'syz.3.625': attribute type 10 has an invalid length. [ 139.954039][ T8363] team0: Port device H added [ 140.015120][ T8366] team0: Port device H removed [ 140.055183][ T8366] .`: (slave H): Enslaving as an active interface with an up link [ 140.138860][ T8369] netlink: 'syz.0.626': attribute type 3 has an invalid length. [ 140.375819][ T8378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.630'. [ 140.962112][ T8407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.639'. [ 141.096547][ T8407] hsr_slave_1 (unregistering): left promiscuous mode [ 141.305295][ T8421] bond2: option min_links: invalid value (18446744073709551614) [ 141.313247][ T8421] bond2: option min_links: allowed values 0 - 2147483647 [ 141.323943][ T8421] bond2 (unregistering): Released all slaves [ 141.327528][ T8431] netlink: 'syz.0.647': attribute type 1 has an invalid length. [ 141.347830][ T8431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.647'. [ 141.361705][ T8411] syzkaller0: entered promiscuous mode [ 141.367349][ T8411] syzkaller0: entered allmulticast mode [ 141.408031][ T8429] lo speed is unknown, defaulting to 1000 [ 141.425687][ T8429] lo speed is unknown, defaulting to 1000 [ 141.516856][ T8429] lo speed is unknown, defaulting to 1000 [ 141.553061][ T8429] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 141.640339][ T8429] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 141.663462][ T8457] netlink: 16 bytes leftover after parsing attributes in process `syz.3.651'. [ 141.705814][ T8429] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 141.801281][ T8429] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 141.894114][ T8429] lo speed is unknown, defaulting to 1000 [ 141.921382][ T8429] lo speed is unknown, defaulting to 1000 [ 141.939850][ T8429] lo speed is unknown, defaulting to 1000 [ 141.959036][ T8429] lo speed is unknown, defaulting to 1000 [ 141.981067][ T8429] lo speed is unknown, defaulting to 1000 [ 142.491726][ T8493] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 142.522455][ T6046] lo speed is unknown, defaulting to 1000 [ 144.453692][ T8436] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 144.474214][ T8468] netlink: 'syz.3.653': attribute type 11 has an invalid length. [ 144.482601][ T8468] netlink: 224 bytes leftover after parsing attributes in process `syz.3.653'. [ 144.494589][ T8484] netlink: 256 bytes leftover after parsing attributes in process `syz.3.653'. [ 144.882511][ T8539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.671'. [ 144.908823][ T8536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.671'. [ 145.001469][ T8536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.671'. [ 145.091524][ T8536] gtp2: entered promiscuous mode [ 145.118535][ T8536] gtp2: entered allmulticast mode [ 145.224290][ T8566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.677'. [ 145.262339][ T8566] netlink: 12 bytes leftover after parsing attributes in process `syz.0.677'. [ 145.350753][ T7114] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.373176][ T7114] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.412571][ T8578] : renamed from hsr0 (while UP) [ 145.421032][ T7114] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.430863][ T7114] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.488845][ T8583] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.682'. [ 145.673113][ T8589] netlink: 32 bytes leftover after parsing attributes in process `syz.1.685'. [ 145.696209][ T8595] netlink: 28 bytes leftover after parsing attributes in process `syz.3.687'. [ 145.749165][ T8597] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 145.764012][ T8595] netlink: 'syz.3.687': attribute type 7 has an invalid length. [ 145.796119][ T8601] netlink: ct family unspecified [ 145.812716][ T8602] netlink: 'syz.4.689': attribute type 7 has an invalid length. [ 145.837200][ T8595] gretap0: entered promiscuous mode [ 145.841434][ T8603] netlink: 'syz.4.689': attribute type 2 has an invalid length. [ 145.868254][ T8595] gretap0: left promiscuous mode [ 146.049902][ T8610] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 146.451667][ T8639] netlink: 'syz.4.702': attribute type 16 has an invalid length. [ 146.466886][ T8639] netlink: 'syz.4.702': attribute type 17 has an invalid length. [ 146.499137][ T8639] erspan0: left allmulticast mode [ 146.602378][ T8639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.632712][ T8639] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 146.702838][ T7114] bond2: (slave bond0): link status definitely up, 20000 Mbps full duplex [ 146.735326][ T7114] bond2: (slave bond0): making interface the new active one [ 146.796561][ T7114] bond2: active interface up! [ 146.837293][ T8653] veth1_mac: renamed from veth0_vlan (while UP) [ 147.418798][ T8683] x_tables: duplicate underflow at hook 1 [ 147.464083][ T8683] GUP no longer grows the stack in syz.2.712 (8683): 200000003000-20000000a000 (200000001000) [ 147.513145][ T8683] CPU: 0 UID: 0 PID: 8683 Comm: syz.2.712 Not tainted syzkaller #0 PREEMPT(full) [ 147.513197][ T8683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 147.513227][ T8683] Call Trace: [ 147.513235][ T8683] [ 147.513244][ T8683] dump_stack_lvl+0xe8/0x150 [ 147.513288][ T8683] __get_user_pages+0x2378/0x2720 [ 147.513327][ T8683] ? __gup_longterm_locked+0xc4e/0x1630 [ 147.513364][ T8683] ? __gup_longterm_locked+0xc4e/0x1630 [ 147.513384][ T8683] ? down_read_killable+0x1bb/0x340 [ 147.513409][ T8683] __gup_longterm_locked+0xdcf/0x1630 [ 147.513436][ T8683] ? lock_acquire+0x106/0x350 [ 147.513486][ T8683] gup_fast_fallback+0x1d84/0x20d0 [ 147.513541][ T8683] ? __pfx_gup_fast_fallback+0x10/0x10 [ 147.513565][ T8683] ? is_valid_gup_args+0x11f/0x200 [ 147.513587][ T8683] ? get_user_pages_fast+0x4d/0xb0 [ 147.513610][ T8683] __iov_iter_get_pages_alloc+0x370/0xa10 [ 147.513642][ T8683] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 147.513673][ T8683] iov_iter_get_pages2+0x5e/0xa0 [ 147.513700][ T8683] __se_sys_vmsplice+0x7c7/0x1620 [ 147.513743][ T8683] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 147.513767][ T8683] ? __pfx_futex_wait+0x10/0x10 [ 147.513803][ T8683] ? lockdep_hardirqs_on+0x7a/0x110 [ 147.513885][ T8683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.513906][ T8683] do_syscall_64+0x15f/0xf80 [ 147.513935][ T8683] ? clear_bhb_loop+0x40/0x90 [ 147.513960][ T8683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.513980][ T8683] RIP: 0033:0x7f1bef79cdd9 [ 147.514004][ T8683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.514021][ T8683] RSP: 002b:00007f1bf0703028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 147.514048][ T8683] RAX: ffffffffffffffda RBX: 00007f1befa15fa0 RCX: 00007f1bef79cdd9 [ 147.514063][ T8683] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a [ 147.514076][ T8683] RBP: 00007f1bef832d69 R08: 0000000000000000 R09: 0000000000000000 [ 147.514089][ T8683] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 147.514099][ T8683] R13: 00007f1befa16038 R14: 00007f1befa15fa0 R15: 00007ffdedee2848 [ 147.514130][ T8683] [ 147.788650][ T8692] netlink: 'syz.0.714': attribute type 1 has an invalid length. [ 147.942490][ T8705] macsec1: entered promiscuous mode [ 148.053491][ T8711] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 148.230056][ T8712] bond3 (unregistering): Released all slaves [ 148.762988][ T8748] tipc: Invalid UDP bearer configuration [ 148.763050][ T8748] tipc: Enabling of bearer rejected, failed to enable media [ 149.678540][ T8801] tipc: Resetting bearer [ 149.796865][ T8807] netlink: 'syz.0.742': attribute type 13 has an invalid length. [ 149.826817][ T8807] __nla_validate_parse: 23 callbacks suppressed [ 149.826836][ T8807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.742'. [ 149.832459][ T8812] netlink: 28 bytes leftover after parsing attributes in process `syz.1.745'. [ 149.834975][ T8811] netlink: 48 bytes leftover after parsing attributes in process `syz.3.746'. [ 149.917947][ T8807] netlink: 'syz.0.742': attribute type 13 has an invalid length. [ 149.926428][ T8807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.742'. [ 150.194079][ T8834] openvswitch: netlink: IP tunnel dst address not specified [ 150.411700][ T8847] sctp: [Deprecated]: syz.0.756 (pid 8847) Use of int in max_burst socket option. [ 150.411700][ T8847] Use struct sctp_assoc_value instead [ 150.570053][ T8857] netlink: 16 bytes leftover after parsing attributes in process `syz.2.757'. [ 150.680414][ T8859] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 150.687414][ T5581] IPVS: starting estimator thread 0... [ 150.768045][ T8874] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 150.782589][ T8874] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 150.803897][ T8869] IPVS: using max 32 ests per chain, 76800 per kthread [ 151.273286][ T8886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.765'. [ 151.284585][ T8886] veth0_macvtap: left promiscuous mode [ 151.979587][ T8919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.774'. [ 153.466793][ T8849] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 153.598016][ T8927] netlink: 40 bytes leftover after parsing attributes in process `syz.3.780'. [ 153.607049][ T8927] netlink: 40 bytes leftover after parsing attributes in process `syz.3.780'. [ 153.640765][ T8927] netlink: 40 bytes leftover after parsing attributes in process `syz.3.780'. [ 153.988036][ T8949] bond2: option packets_per_slave: invalid value (18446744073709551615) [ 154.005449][ T8949] bond2: option packets_per_slave: allowed values 0 - 65535 [ 154.067441][ T8949] bond2 (unregistering): Released all slaves [ 154.697502][ T8999] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.706499][ T8999] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.960089][ T9015] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 155.011841][ T9015] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 155.242199][ T9041] __nla_validate_parse: 4 callbacks suppressed [ 155.242215][ T9041] netlink: 68 bytes leftover after parsing attributes in process `syz.2.807'. [ 155.248495][ T807] IPVS: starting estimator thread 0... [ 155.263394][ T9043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.808'. [ 155.277683][ T9041] netlink: 68 bytes leftover after parsing attributes in process `syz.2.807'. [ 155.341082][ T9041] netlink: 68 bytes leftover after parsing attributes in process `syz.2.807'. [ 155.357825][ T9042] IPVS: using max 31 ests per chain, 74400 per kthread [ 155.371679][ T9047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.808'. [ 155.468457][ T9047] ip6erspan0: entered promiscuous mode [ 155.507021][ T9043] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.516772][ T9043] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.725728][ T9071] netlink: 'syz.4.814': attribute type 21 has an invalid length. [ 155.806197][ T9074] netlink: 36 bytes leftover after parsing attributes in process `syz.3.815'. [ 155.930305][ T9077] tap0: tun_chr_ioctl cmd 1074025678 [ 155.935687][ T9077] tap0: group set to 0 [ 155.944302][ T9080] netlink: 'syz.1.817': attribute type 1 has an invalid length. [ 155.970637][ T9080] netlink: 224 bytes leftover after parsing attributes in process `syz.1.817'. [ 156.007978][ T9085] netlink: 'syz.0.819': attribute type 1 has an invalid length. [ 156.166707][ T9085] bond3: entered promiscuous mode [ 156.172791][ T9085] 8021q: adding VLAN 0 to HW filter on device bond3 [ 156.216998][ T9089] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 156.231106][ T9089] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 156.254531][ T9089] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 156.342831][ T9107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.824'. [ 156.502433][ T9120] netlink: 'syz.1.827': attribute type 10 has an invalid length. [ 156.781819][ T9131] openvswitch: netlink: Actions may not be safe on all matching packets [ 156.865314][ T9142] syzkaller0: entered promiscuous mode [ 156.876937][ T9142] syzkaller0: entered allmulticast mode [ 156.891991][ T9141] netlink: 20 bytes leftover after parsing attributes in process `syz.0.831'. [ 156.964567][ T9137] nbd0: detected capacity change from 0 to 127 [ 156.980218][ T49] block nbd0: Receive control failed (result -32) [ 156.996922][ T5854] block nbd0: Send control failed (result -32) [ 157.007139][ T5854] block nbd0: Request send failed, requeueing [ 157.022263][ T1688] block nbd0: Dead connection, failed to find a fallback [ 157.029861][ T1688] block nbd0: shutting down sockets [ 157.042164][ T1688] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 157.053660][ T1688] Buffer I/O error on dev nbd0, logical block 0, async page read [ 157.065958][ T5854] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 157.076666][ T5854] Buffer I/O error on dev nbd0, logical block 1, async page read [ 157.085781][ T5854] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 157.095111][ T5854] Buffer I/O error on dev nbd0, logical block 2, async page read [ 157.104743][ T5854] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 157.114509][ T5854] Buffer I/O error on dev nbd0, logical block 3, async page read [ 157.122534][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 157.132600][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read [ 157.141070][ T5854] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 157.151948][ T5854] Buffer I/O error on dev nbd0, logical block 1, async page read [ 157.160013][ T5854] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 157.169457][ T5854] Buffer I/O error on dev nbd0, logical block 2, async page read [ 157.178673][ T5854] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 157.196852][ T5854] Buffer I/O error on dev nbd0, logical block 3, async page read [ 157.211798][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 157.238913][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read [ 157.258714][ T5854] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 157.297645][ T5854] Buffer I/O error on dev nbd0, logical block 1, async page read [ 157.371656][ T5854] ldm_validate_partition_table(): Disk read failed. [ 157.429846][ T5854] Dev nbd0: unable to read RDB block 0 [ 157.482718][ T5854] nbd0: unable to read partition table [ 157.534202][ T5854] ldm_validate_partition_table(): Disk read failed. [ 157.548594][ T5854] Dev nbd0: unable to read RDB block 0 [ 157.563678][ T5854] nbd0: unable to read partition table [ 157.597984][ T9175] netlink: 16 bytes leftover after parsing attributes in process `syz.3.841'. [ 157.882111][ T9193] netlink: 'syz.4.846': attribute type 1 has an invalid length. [ 158.031833][ T9193] Cannot find map_set index 135 as target [ 158.053683][ T9197] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 158.378849][ T9217] x_tables: duplicate underflow at hook 2 [ 158.992172][ T9254] netlink: 'syz.3.865': attribute type 1 has an invalid length. [ 159.424186][ T9283] netlink: 'syz.2.870': attribute type 3 has an invalid length. [ 159.434642][ T9283] netlink: 'syz.2.870': attribute type 3 has an invalid length. [ 159.497645][ T9288] netlink: 'syz.1.872': attribute type 1 has an invalid length. [ 159.535911][ T9292] bond7: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 159.548318][ T9292] bond7 (unregistering): Released all slaves [ 159.643865][ T9288] bond3: entered promiscuous mode [ 159.650755][ T9288] 8021q: adding VLAN 0 to HW filter on device bond3 [ 159.714183][ T9298] 8021q: adding VLAN 0 to HW filter on device bond3 [ 159.739450][ T9298] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 159.740203][ T9305] IPVS: set_ctl: invalid protocol: 8 100.1.1.0:20004 [ 159.770587][ T9298] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 159.774749][ T9305] nbd: illegal input index -8454144 [ 159.808494][ T9298] bond3: (slave ip6gre1): making interface the new active one [ 159.817181][ T9298] ip6gre1: entered promiscuous mode [ 159.825272][ T9298] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 159.836481][ T9301] netlink: 'syz.3.874': attribute type 10 has an invalid length. [ 159.865828][ T9308] vlan2: entered allmulticast mode [ 159.871495][ T9308] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 159.946141][ T9311] nft_compat: unsupported protocol 0 [ 160.420885][ T9336] __nla_validate_parse: 13 callbacks suppressed [ 160.420904][ T9336] netlink: 28 bytes leftover after parsing attributes in process `syz.2.885'. [ 160.448905][ T9336] netlink: 16 bytes leftover after parsing attributes in process `syz.2.885'. [ 160.492126][ T9335] netlink: 20 bytes leftover after parsing attributes in process `syz.2.885'. [ 160.503029][ T9335] netlink: 20 bytes leftover after parsing attributes in process `syz.2.885'. [ 160.524669][ T9335] netlink: 20 bytes leftover after parsing attributes in process `syz.2.885'. [ 160.542678][ T9335] netlink: 20 bytes leftover after parsing attributes in process `syz.2.885'. [ 160.557617][ T9335] netlink: 20 bytes leftover after parsing attributes in process `syz.2.885'. [ 160.589829][ T9335] netlink: 20 bytes leftover after parsing attributes in process `syz.2.885'. [ 160.618507][ T9335] netlink: 20 bytes leftover after parsing attributes in process `syz.2.885'. [ 160.644005][ T9335] netlink: 20 bytes leftover after parsing attributes in process `syz.2.885'. [ 161.132212][ T9360] validate_nla: 4 callbacks suppressed [ 161.132232][ T9360] netlink: 'syz.0.892': attribute type 1 has an invalid length. [ 161.259488][ T9374] netlink: 'syz.3.897': attribute type 32 has an invalid length. [ 161.353882][ T9374] bond3: Setting coupled_control to off (0) [ 161.510665][ T49] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 161.519930][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 161.686903][ T9405] ipt_REJECT: ECHOREPLY no longer supported. [ 161.720071][ T9394] ipt_REJECT: ECHOREPLY no longer supported. [ 161.755886][ T9393] xt_CT: No such helper "syz1" [ 162.010051][ T9421] bridge_slave_0 (unregistering): left allmulticast mode [ 162.017514][ T9421] bridge_slave_0 (unregistering): left promiscuous mode [ 162.025671][ T9421] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.098994][ T9422] bridge_slave_0 (unregistering): left allmulticast mode [ 162.106147][ T9422] bridge_slave_0 (unregistering): left promiscuous mode [ 162.114452][ T9422] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.248906][ T9434] openvswitch: netlink: IP tunnel dst address not specified [ 162.792481][ T9469] netlink: 'syz.4.926': attribute type 21 has an invalid length. [ 162.813449][ T9469] pim6reg1: entered promiscuous mode [ 162.822001][ T9469] pim6reg1: entered allmulticast mode [ 163.316424][ T9489] batman_adv: batadv0: Interface deactivated: dummy0 [ 163.323730][ T9496] x_tables: duplicate underflow at hook 1 [ 163.475777][ T9489] batman_adv: batadv0: Removing interface: dummy0 [ 163.566235][ T9513] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 163.785602][ T9522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.139380][ T9548] xt_hashlimit: size too large, truncated to 1048576 [ 164.358768][ T9558] tipc: Enabling of bearer rejected, failed to enable media [ 164.917571][ T9595] netem: change failed [ 165.021685][ T9601] pim6reg527: entered allmulticast mode [ 165.568323][ T9634] __nla_validate_parse: 71 callbacks suppressed [ 165.568342][ T9634] netlink: 32 bytes leftover after parsing attributes in process `syz.0.969'. [ 165.876057][ T9650] xt_hashlimit: invalid interval [ 166.095032][ T9664] bridge3: entered promiscuous mode [ 166.123799][ T9664] bridge3: entered allmulticast mode [ 166.133991][ T9669] netlink: 'syz.1.982': attribute type 15 has an invalid length. [ 166.158177][ T9669] netlink: 24 bytes leftover after parsing attributes in process `syz.1.982'. [ 166.196533][ T9675] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.982'. [ 166.212101][ T9666] bridge4: entered promiscuous mode [ 166.238347][ T9675] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.982'. [ 166.247542][ T9666] bridge4: entered allmulticast mode [ 166.256292][ T9668] netlink: 'syz.3.979': attribute type 29 has an invalid length. [ 166.267327][ T9672] netlink: 'syz.3.979': attribute type 29 has an invalid length. [ 166.276914][ T9679] netlink: 'syz.3.979': attribute type 29 has an invalid length. [ 166.297392][ T9679] netlink: 'syz.3.979': attribute type 29 has an invalid length. [ 166.308767][ T9677] netlink: 28 bytes leftover after parsing attributes in process `syz.0.984'. [ 166.328965][ T9679] netlink: 'syz.3.979': attribute type 29 has an invalid length. [ 166.342471][ T9679] netlink: 'syz.3.979': attribute type 29 has an invalid length. [ 166.369995][ T9679] netlink: 'syz.3.979': attribute type 29 has an invalid length. [ 166.416825][ T9679] netlink: 'syz.3.979': attribute type 29 has an invalid length. [ 166.553342][ T9689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.987'. [ 166.882694][ T9702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.992'. [ 166.997640][ T9709] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 167.208783][ T9718] openvswitch: netlink: Message has 51 unknown bytes. [ 167.224045][ T9719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.997'. [ 167.242886][ T9718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.996'. [ 167.890134][ T9748] netlink: 464 bytes leftover after parsing attributes in process `syz.4.1004'. [ 168.502505][ T9780] netlink: 'syz.2.1016': attribute type 10 has an invalid length. [ 168.546585][ T9777] macvtap1: entered promiscuous mode [ 168.553455][ T9777] vlan0: entered promiscuous mode [ 168.559496][ T9777] macvtap1: entered allmulticast mode [ 168.565287][ T9777] vlan0: entered allmulticast mode [ 168.572035][ T9777] veth1_mac: entered allmulticast mode [ 168.588109][ T9780] team0: Device vxcan1 is of different type [ 168.764125][ T9786] syzkaller1: entered promiscuous mode [ 168.786687][ T9786] syzkaller1: entered allmulticast mode [ 169.147269][ T9795] bond4: invalid ARP target 0.0.0.0 specified for addition [ 169.168240][ T9795] bond4: option arp_ip_target: invalid value (0) [ 169.207016][ T9795] bond4 (unregistering): Released all slaves [ 169.519448][ T9821] netlink: 'syz.4.1028': attribute type 2 has an invalid length. [ 169.874977][ T9836] x_tables: duplicate underflow at hook 1 [ 169.917615][ T9841] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.952035][ T9845] sctp: [Deprecated]: syz.2.1033 (pid 9845) Use of int in max_burst socket option. [ 169.952035][ T9845] Use struct sctp_assoc_value instead [ 170.083534][ T9849] IPv6: NLM_F_CREATE should be specified when creating new route [ 170.691097][ T9872] __nla_validate_parse: 12 callbacks suppressed [ 170.691116][ T9872] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1044'. [ 170.739121][ T9872] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1044'. [ 170.949908][ T9886] nbd: socks must be embedded in a SOCK_ITEM attr [ 171.010577][ T9886] nbd: socks must be embedded in a SOCK_ITEM attr [ 171.050255][ T9886] nbd: socks must be embedded in a SOCK_ITEM attr [ 171.082141][ T9886] nbd: socks must be embedded in a SOCK_ITEM attr [ 171.115711][ T9886] nbd: socks must be embedded in a SOCK_ITEM attr [ 171.160876][ T9886] nbd: socks must be embedded in a SOCK_ITEM attr [ 171.215899][ T9886] nbd: socks must be embedded in a SOCK_ITEM attr [ 171.235816][ T9886] nbd: socks must be embedded in a SOCK_ITEM attr [ 171.254712][ T9886] nbd: socks must be embedded in a SOCK_ITEM attr [ 171.266131][ T9886] nbd: socks must be embedded in a SOCK_ITEM attr [ 171.290043][ T9893] validate_nla: 7 callbacks suppressed [ 171.290060][ T9893] netlink: 'syz.0.1050': attribute type 32 has an invalid length. [ 171.304676][ T9886] nbd: socks must be embedded in a SOCK_ITEM attr [ 171.326885][ T9886] nbd: socks must be embedded in a SOCK_ITEM attr [ 171.346041][ T9893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1050'. [ 171.363215][ T9886] nbd: socks must be embedded in a SOCK_ITEM attr [ 171.411792][ T9886] nbd: socks must be embedded in a SOCK_ITEM attr [ 171.433449][ T9893] bond4: Setting coupled_control to off (0) [ 171.454525][ T9886] nbd: socks must be embedded in a SOCK_ITEM attr [ 171.505843][ T9886] nbd: socks must be embedded in a SOCK_ITEM attr [ 171.546541][ T9886] nbd: socks must be embedded in a SOCK_ITEM attr [ 171.585420][ T9886] nbd: socks must be embedded in a SOCK_ITEM attr [ 171.634583][ T9886] nbd: socks must be embedded in a SOCK_ITEM attr [ 171.671686][ T9886] nbd: socks must be embedded in a SOCK_ITEM attr [ 171.718247][ T9886] nbd: socks must be embedded in a SOCK_ITEM attr [ 171.751564][ T9886] nbd: socks must be embedded in a SOCK_ITEM attr [ 171.892420][ T9936] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 172.210737][ T9957] netlink: 'syz.3.1065': attribute type 1 has an invalid length. [ 172.709427][ T9969] syzkaller0: entered promiscuous mode [ 172.735600][ T9969] syzkaller0: entered allmulticast mode [ 172.946182][ T9984] netlink: 'syz.4.1073': attribute type 1 has an invalid length. [ 172.979717][ T9984] netlink: 'syz.4.1073': attribute type 3 has an invalid length. [ 173.005494][ T9984] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1073'. [ 173.039476][ T9984] NCSI netlink: No device for ifindex 813332851 [ 173.115282][ T9995] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1077'. [ 173.125123][ T9995] netlink: 'syz.2.1077': attribute type 2 has an invalid length. [ 173.231820][ T9998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1079'. [ 173.494911][T10013] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 173.537604][T10013] team0: entered promiscuous mode [ 173.557657][T10013] team_slave_0: entered promiscuous mode [ 173.589631][T10013] team_slave_1: entered promiscuous mode [ 173.612725][T10012] team0: left promiscuous mode [ 173.618473][T10012] team_slave_0: left promiscuous mode [ 173.625676][T10012] team_slave_1: left promiscuous mode [ 173.781911][ T7114] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.799806][ T7114] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.816665][ T7114] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.827009][ T7114] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.921708][T10044] netlink: 'syz.3.1090': attribute type 1 has an invalid length. [ 173.923167][T10041] syzkaller0: entered promiscuous mode [ 173.952349][T10041] syzkaller0: entered allmulticast mode [ 174.026337][T10047] netlink: 'syz.2.1091': attribute type 1 has an invalid length. [ 174.688769][T10070] netlink: 'syz.0.1099': attribute type 1 has an invalid length. [ 174.709832][T10068] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1098'. [ 174.751060][T10070] bond5: entered promiscuous mode [ 174.758159][T10070] 8021q: adding VLAN 0 to HW filter on device bond5 [ 174.846545][T10070] bond5: (slave bridge3): making interface the new active one [ 174.861366][T10070] bridge3: entered promiscuous mode [ 174.884720][T10070] bridge3: left promiscuous mode [ 174.934630][T10080] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1100'. [ 175.023180][T10084] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1101'. [ 175.235289][T10097] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 175.310525][T10100] lo speed is unknown, defaulting to 1000 [ 175.539524][T10108] atomic_op ffff88805539e998 conn xmit_atomic 0000000000000000 [ 175.628405][T10123] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 175.663052][T10123] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1113'. [ 175.791429][T10100] lo speed is unknown, defaulting to 1000 [ 176.019937][T10137] netlink: 'syz.0.1118': attribute type 1 has an invalid length. [ 176.055718][T10137] 8021q: adding VLAN 0 to HW filter on device bond6 [ 176.168656][T10137] bond6: (slave veth5): Enslaving as an active interface with a down link [ 176.222036][T10139] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 176.239712][T10139] bond6: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 176.317855][T10004] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 176.450526][T10148] netlink: 'syz.1.1120': attribute type 29 has an invalid length. [ 176.482376][T10148] __nla_validate_parse: 1 callbacks suppressed [ 176.482394][T10148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1120'. [ 176.504994][T10146] netlink: 'syz.4.1121': attribute type 1 has an invalid length. [ 176.526859][T10155] netlink: 'syz.1.1120': attribute type 29 has an invalid length. [ 176.544727][T10155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1120'. [ 176.624052][T10159] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1122'. [ 176.651696][T10162] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1124'. [ 176.714557][T10154] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 176.740497][T10154] bond7 (unregistering): Released all slaves [ 176.936345][T10159] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 176.956139][T10159] bond7 (unregistering): Released all slaves [ 176.991703][T10172] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.113798][T10182] Cannot find set identified by id 0 to match [ 177.158589][T10187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1128'. [ 177.222694][T10187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1128'. [ 177.327553][T10200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1131'. [ 177.344105][T10196] bridge5: port 1(vlan1) entered blocking state [ 177.351552][T10196] bridge5: port 1(vlan1) entered disabled state [ 177.358594][T10196] vlan1: entered allmulticast mode [ 177.363826][T10196] bridge5: entered allmulticast mode [ 177.396842][T10196] vlan1: left allmulticast mode [ 177.411656][T10196] bridge5: left allmulticast mode [ 177.460299][T10207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1134'. [ 177.461564][T10202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1132'. [ 177.478802][T10207] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1134'. [ 177.656955][T10213] bond0: option ad_select: unable to set because the bond device is up [ 177.715305][T10217] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 177.932679][T10234] sctp: [Deprecated]: syz.4.1141 (pid 10234) Use of int in maxseg socket option. [ 177.932679][T10234] Use struct sctp_assoc_value instead [ 178.176398][T10246] netlink: 'syz.2.1145': attribute type 1 has an invalid length. [ 178.296370][T10246] 8021q: adding VLAN 0 to HW filter on device bond2 [ 178.397043][T10253] macvlan3: entered promiscuous mode [ 178.415619][T10253] macvlan3: entered allmulticast mode [ 178.524373][T10253] syzkaller0: entered promiscuous mode [ 178.537644][T10253] syzkaller0: entered allmulticast mode [ 180.331798][T10266] tipc: Enabling of bearer rejected, already enabled [ 180.404299][T10274] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 180.757163][T10294] syzkaller1: entered promiscuous mode [ 180.779189][T10294] syzkaller1: entered allmulticast mode [ 180.792736][T10308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.336106][T10337] veth1_mac: renamed from veth0_vlan [ 181.357016][T10345] netlink: 'syz.0.1169': attribute type 1 has an invalid length. [ 181.450391][T10345] 8021q: adding VLAN 0 to HW filter on device bond7 [ 182.177224][T10387] netlink: 'syz.4.1180': attribute type 4 has an invalid length. [ 182.231012][T10387] ieee802154 phy0 wpan0: encryption failed: -22 [ 182.252060][T10392] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.449482][T10403] netlink: 'syz.3.1184': attribute type 8 has an invalid length. [ 182.478967][T10403] __nla_validate_parse: 7 callbacks suppressed [ 182.478984][T10403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1184'. [ 182.590981][T10403] bond0: entered promiscuous mode [ 182.618106][T10403] gretap0: entered promiscuous mode [ 182.637485][T10403] ip6gretap0: entered promiscuous mode [ 182.651336][T10403] debugfs: 'hsr1' already exists in 'hsr' [ 182.667337][T10403] Cannot create hsr debugfs directory [ 182.676004][T10403] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 182.696964][T10403] hsr1: entered promiscuous mode [ 182.758600][ T5510] veth1_mac: left promiscuous mode [ 182.844166][ T5510] veth1_mac: entered promiscuous mode [ 183.107675][T10426] : entered promiscuous mode [ 183.383718][T10452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1196'. [ 183.799607][T10473] openvswitch: netlink: Multiple metadata blocks provided [ 183.901777][T10482] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1203'. [ 184.214557][T10500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1205'. [ 184.432656][T10506] netlink: 788 bytes leftover after parsing attributes in process `syz.4.1206'. [ 184.724129][T10523] netlink: 'syz.0.1211': attribute type 11 has an invalid length. [ 184.854292][T10537] openvswitch: netlink: Flow key attr not present in new flow. [ 184.889251][T10540] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 184.908748][T10540] tipc: Enabled bearer , priority 10 [ 184.918916][T10530] syzkaller0: entered promiscuous mode [ 184.928722][T10530] syzkaller0: entered allmulticast mode [ 185.071505][T10549] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1217'. [ 185.096055][T10545] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1217'. [ 185.106003][T10550] sctp: [Deprecated]: syz.3.1218 (pid 10550) Use of int in max_burst socket option. [ 185.106003][T10550] Use struct sctp_assoc_value instead [ 185.280251][T10554] delete_channel: no stack [ 185.416595][T10571] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1222'. [ 185.444944][T10570] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 185.555074][T10577] xt_hashlimit: size too large, truncated to 1048576 [ 186.023917][T10607] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 186.036022][ T24] tipc: Node number set to 532193127 [ 186.055688][T10605] netlink: 'syz.2.1235': attribute type 28 has an invalid length. [ 186.085706][T10605] netlink: 'syz.2.1235': attribute type 3 has an invalid length. [ 186.101389][T10612] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.1236'. [ 186.105579][T10605] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1235'. [ 186.141490][T10605] netlink: 'syz.2.1235': attribute type 62 has an invalid length. [ 186.353605][T10627] netlink: 'syz.4.1239': attribute type 1 has an invalid length. [ 186.440932][T10627] bond7: entered promiscuous mode [ 186.446561][T10627] 8021q: adding VLAN 0 to HW filter on device bond7 [ 186.551155][T10627] macvtap1: entered allmulticast mode [ 186.589719][T10640] bond7: (slave bridge5): making interface the new active one [ 186.620355][T10640] bridge5: entered promiscuous mode [ 186.645160][T10640] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 186.893797][T10659] tipc: Enabled bearer , priority 0 [ 186.914746][T10659] syzkaller0: entered promiscuous mode [ 186.940735][T10659] syzkaller0: entered allmulticast mode [ 186.992600][T10659] tipc: Resetting bearer [ 187.034627][T10657] tipc: Resetting bearer [ 187.081157][T10674] ieee802154 phy0 wpan0: encryption failed: -90 [ 187.091046][T10657] tipc: Disabling bearer [ 187.388140][T10696] netlink: 'syz.0.1258': attribute type 1 has an invalid length. [ 187.396180][T10696] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.658975][T10711] netlink: 'syz.3.1260': attribute type 1 has an invalid length. [ 187.695073][T10711] __nla_validate_parse: 3 callbacks suppressed [ 187.695089][T10711] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1260'. [ 187.767436][T10711] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.1260'. [ 187.976289][T10729] nbd: must specify an index to disconnect [ 188.357055][T10756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1271'. [ 188.384804][T10757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1271'. [ 188.404239][T10756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1271'. [ 188.417392][T10756] netlink: 'syz.0.1271': attribute type 1 has an invalid length. [ 188.798950][T10780] erspan0: entered promiscuous mode [ 188.926847][T10789] syzkaller1: entered allmulticast mode [ 188.970352][T10791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1280'. [ 189.066615][T10797] Cannot find add_set index 0 as target [ 189.593532][T10830] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1294'. [ 189.655014][T10833] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1295'. [ 189.695897][T10833] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 189.743643][T10838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1297'. [ 189.761234][T10838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1297'. [ 189.924637][T10850] x_tables: ip_tables: osf match: only valid for protocol 6 [ 189.953439][T10851] x_tables: ip_tables: osf match: only valid for protocol 6 [ 189.975357][ T5846] block nbd1: Receive control failed (result -32) [ 190.028098][T10850] openvswitch: netlink: Missing key (keys=40, expected=100) [ 190.077496][T10863] openvswitch: netlink: Missing key (keys=40, expected=100) [ 190.206728][T10867] netlink: 'syz.2.1305': attribute type 9 has an invalid length. [ 190.269852][T10867] netlink: 'syz.2.1305': attribute type 9 has an invalid length. [ 190.335634][T10873] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 190.363021][T10873] netlink: 'syz.0.1308': attribute type 1 has an invalid length. [ 190.655997][T10890] netlink: 'syz.3.1313': attribute type 7 has an invalid length. [ 190.690117][T10890] netlink: 'syz.3.1313': attribute type 8 has an invalid length. [ 190.796201][T10902] netlink: 'syz.2.1316': attribute type 21 has an invalid length. [ 190.813847][T10903] netlink: 'syz.2.1316': attribute type 21 has an invalid length. [ 192.026974][T10969] geneve2: entered promiscuous mode [ 192.034730][T10969] geneve2: entered allmulticast mode [ 192.562021][T11004] validate_nla: 7 callbacks suppressed [ 192.562038][T11004] netlink: 'syz.1.1348': attribute type 1 has an invalid length. [ 192.845457][T11007] bond4: Invalid ad_actor_system MAC address. [ 192.860384][T11007] bond4: option ad_actor_system: invalid value (1) [ 192.869396][T11019] __nla_validate_parse: 18 callbacks suppressed [ 192.869414][T11019] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1351'. [ 192.916309][T11007] bond4 (unregistering): Released all slaves [ 193.129290][T11040] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.168768][T11039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.186101][T11045] netlink: 'syz.4.1359': attribute type 1 has an invalid length. [ 193.205329][T11045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1359'. [ 193.236596][T11045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1359'. [ 193.276187][T11050] x_tables: ip6_tables: DNAT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 193.319219][T11056] netlink: 'syz.2.1361': attribute type 11 has an invalid length. [ 193.357244][T11056] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1361'. [ 193.392633][T11058] sock: sock_timestamping_bind_phc: sock not bind to device [ 193.600882][T11069] netlink: 'syz.1.1366': attribute type 1 has an invalid length. [ 193.831362][T11088] netlink: 'syz.3.1371': attribute type 1 has an invalid length. [ 193.977392][T11094] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address [ 193.990689][T11094] bond4: (slave vxcan5): Setting fail_over_mac to active for active-backup mode [ 194.013852][T11094] bond4: (slave vxcan5): making interface the new active one [ 194.023139][T11094] bond4: (slave vxcan5): Enslaving as an active interface with an up link [ 194.069387][T11100] bond4: (slave vxcan7): The slave device specified does not support setting the MAC address [ 194.083253][T11100] bond4: (slave vxcan7): Enslaving as a backup interface with an up link [ 194.234884][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.251714][T11116] netlink: 'syz.3.1377': attribute type 39 has an invalid length. [ 194.607979][T11129] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1381'. [ 194.643251][T11129] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1381'. [ 194.663274][T11131] netlink: 'syz.4.1383': attribute type 10 has an invalid length. [ 194.672072][T11131] bond0: (slave wlan1): Opening slave failed [ 194.825899][T11136] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1385'. [ 195.022617][T11144] netlink: 'syz.1.1388': attribute type 178 has an invalid length. [ 195.259754][T11165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1393'. [ 195.414246][T11184] netlink: 'syz.3.1398': attribute type 4 has an invalid length. [ 195.580198][T11194] netlink: 'syz.1.1400': attribute type 1 has an invalid length. [ 195.656407][T11200] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1399'. [ 195.670442][T11194] 8021q: adding VLAN 0 to HW filter on device bond5 [ 195.691069][T11199] vlan0: entered allmulticast mode [ 195.696328][T11199] bond5: entered allmulticast mode [ 195.705997][T11193] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1399'. [ 195.753149][T11194] bond5: (slave geneve2): making interface the new active one [ 195.770237][T11194] geneve2: entered allmulticast mode [ 195.802975][T11194] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 196.544440][T11224] syzkaller0: entered promiscuous mode [ 196.579164][T11224] syzkaller0: entered allmulticast mode [ 196.823662][T11252] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 197.588936][T11294] validate_nla: 1 callbacks suppressed [ 197.588955][T11294] netlink: 'syz.3.1420': attribute type 25 has an invalid length. [ 197.697414][T11294] netlink: 'syz.3.1420': attribute type 25 has an invalid length. [ 197.714764][T11307] IPVS: set_ctl: invalid protocol: 103 100.1.1.2:20004 [ 197.737537][ T7116] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.770225][ T7116] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.809878][ T7116] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.842386][ T7116] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.126124][T11326] x_tables: duplicate underflow at hook 4 [ 198.225531][ T9] IPVS: starting estimator thread 0... [ 198.239837][T11315] xt_socket: unknown flags 0x8 [ 198.278452][T11341] __nla_validate_parse: 7 callbacks suppressed [ 198.278471][T11341] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1426'. [ 198.319275][T11338] IPVS: using max 27 ests per chain, 64800 per kthread [ 198.329518][T11342] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 198.493141][T11347] netlink: 'syz.1.1432': attribute type 1 has an invalid length. [ 198.525238][T11347] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1432'. [ 198.556941][T11354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1433'. [ 198.646784][T11360] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1436'. [ 198.756949][T11360] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1436'. [ 198.895497][T11356] 8021q: adding VLAN 0 to HW filter on device bond5 [ 198.959446][T11356] bond4: (slave bond5): Enslaving as an active interface with an up link [ 199.007298][T11376] netlink: 'syz.1.1442': attribute type 83 has an invalid length. [ 199.017991][T11369] ±ÿ: renamed from team_slave_1 (while UP) [ 199.258616][T11393] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1445'. [ 199.266961][T11395] vlan3: entered promiscuous mode [ 199.280583][T11395] geneve1: entered promiscuous mode [ 199.286534][T11395] vlan3: entered allmulticast mode [ 199.292726][T11395] geneve1: entered allmulticast mode [ 199.423935][T11402] xt_hashlimit: size too large, truncated to 1048576 [ 199.477662][T11405] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1448'. [ 199.557544][T11407] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1450'. [ 199.595761][T11412] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1452'. [ 199.623707][T11407] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 199.711698][T11407] gretap1: entered promiscuous mode [ 199.725220][T11407] gretap1: entered allmulticast mode [ 199.788450][T11421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1452'. [ 199.986949][T11424] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 200.039419][T11423] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 200.083000][T11434] bond5: entered promiscuous mode [ 200.107559][T11434] 8021q: adding VLAN 0 to HW filter on device bond5 [ 200.163892][T11442] ipvlan2: entered allmulticast mode [ 200.180903][T11442] bond5: entered allmulticast mode [ 200.241309][T11448] ipvlan3: entered allmulticast mode [ 200.427530][T11455] netdevsim netdevsim0 : renamed from netdevsim0 [ 200.736221][T11478] pim6reg: entered allmulticast mode [ 200.749925][T11478] pim6reg: left allmulticast mode [ 201.211424][T11516] netlink: 'syz.2.1475': attribute type 1 has an invalid length. [ 201.432703][ T5859] Bluetooth: hci1: command 0x0406 tx timeout [ 201.439123][ T5851] Bluetooth: hci2: command 0x0406 tx timeout [ 201.439585][ T5855] Bluetooth: hci3: command 0x0406 tx timeout [ 201.452112][ T5851] Bluetooth: hci0: command 0x0c1a tx timeout [ 201.505293][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.515180][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.753170][T11540] netlink: 'syz.1.1480': attribute type 1 has an invalid length. [ 201.835934][T11548] rdma_rxe: rxe_newlink: failed to add lo [ 201.929029][T11550] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 201.973413][T11550] bond6: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 201.991054][T11550] bond6: (slave vxcan3): making interface the new active one [ 202.000072][T11550] bond6: (slave vxcan3): Enslaving as an active interface with an up link [ 202.032249][T11556] veth1_to_bond: entered allmulticast mode [ 202.052976][T11556] veth1_to_bond: left allmulticast mode [ 202.248324][T11573] netlink: 'syz.3.1490': attribute type 1 has an invalid length. [ 202.427136][T11580] IPVS: set_ctl: invalid protocol: 223 255.255.255.255:20004 [ 202.548305][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.566993][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.628156][ T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.828048][T11605] macvlan0: entered promiscuous mode [ 202.992865][T11620] x_tables: unsorted underflow at hook 3 [ 203.023370][T11620] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 203.084099][T11620] xt_hashlimit: size too large, truncated to 1048576 [ 203.164895][T11631] Cannot find add_set index 65532 as target [ 203.455624][T11646] __nla_validate_parse: 14 callbacks suppressed [ 203.455641][T11646] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1512'. [ 203.470868][ T29] audit: type=1804 audit(1777106825.840:3): pid=11647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1510" name="/newroot/315/cgroup.controllers" dev="tmpfs" ino=1617 res=1 errno=0 [ 203.524678][ T29] audit: type=1800 audit(1777106825.880:4): pid=11647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1510" name="cgroup.controllers" dev="tmpfs" ino=1617 res=0 errno=0 [ 203.588145][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.604892][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.732625][T11664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1515'. [ 203.896624][T11671] openvswitch: netlink: IP tunnel TTL not specified. [ 203.910069][T11670] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1518'. [ 204.299362][T11689] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1525'. [ 204.339184][T11691] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1523'. [ 204.376021][T11691] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1523'. [ 204.502219][T11702] x_tables: duplicate underflow at hook 1 [ 204.567047][T11705] netlink: 'syz.4.1526': attribute type 3 has an invalid length. [ 204.629302][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.638134][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.891481][T11723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1533'. [ 204.922317][T11723] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1533'. [ 204.945242][T11723] netlink: 'syz.4.1533': attribute type 7 has an invalid length. [ 204.973548][T11723] netlink: 'syz.4.1533': attribute type 8 has an invalid length. [ 204.988385][T11723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1533'. [ 205.001102][T11726] netlink: 'syz.3.1534': attribute type 1 has an invalid length. [ 205.116835][T11734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1536'. [ 205.655826][T11768] xt_TPROXY: Can be used only with -p tcp or -p udp [ 206.195940][T11800] syz_tun: entered allmulticast mode [ 206.451664][T11814] xt_l2tp: v2 doesn't support IP mode [ 206.535868][T11819] net_ratelimit: 4 callbacks suppressed [ 206.535885][T11819] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 206.550087][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.708028][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.732143][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.122175][T11849] netem: change failed [ 207.313905][T11862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.369137][T11864] netlink: 'syz.3.1572': attribute type 2 has an invalid length. [ 207.383635][T11868] netlink: 'syz.1.1573': attribute type 61 has an invalid length. [ 207.414614][T11864] netlink: 'syz.3.1572': attribute type 2 has an invalid length. [ 207.587816][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.631679][T11876] block nbd0: reconnected socket [ 207.649428][T11876] block nbd0: Unsupported socket: should be TCP or UNIX. [ 207.684724][ T5846] block nbd0: Receive control failed (result -32) [ 207.758023][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.767686][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.068092][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 208.210868][T11914] netlink: 'syz.1.1586': attribute type 8 has an invalid length. [ 208.320100][T11914] bond0: entered promiscuous mode [ 208.340311][T11932] netlink: 'syz.2.1588': attribute type 11 has an invalid length. [ 208.361601][T11914] gretap0: entered promiscuous mode [ 208.398714][T11914] ip6gretap0: entered promiscuous mode [ 208.418918][T11914] debugfs: 'hsr1' already exists in 'hsr' [ 208.461257][T11914] Cannot create hsr debugfs directory [ 208.490205][T11914] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 208.503953][T11914] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 208.515466][T11940] openvswitch: netlink: Tunnel attr 16 has unexpected len 20 expected 0 [ 208.523977][T11914] hsr1: Interlink (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 208.536353][T11914] hsr1: entered promiscuous mode [ 208.681750][T11948] __nla_validate_parse: 15 callbacks suppressed [ 208.681768][T11948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1596'. [ 208.696519][T11925] lo speed is unknown, defaulting to 1000 [ 208.720757][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.722943][T11947] x_tables: duplicate entry at hook 3 [ 208.767288][T11950] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1595'. [ 208.885949][T11952] batman_adv: batadv0: Adding interface: dummy0 [ 208.898379][T11952] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.931351][T11952] batman_adv: batadv0: Interface activated: dummy0 [ 208.952901][T11958] xt_SECMARK: invalid mode: 9 [ 209.200853][T11925] lo speed is unknown, defaulting to 1000 [ 209.222819][T11953] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 209.256747][T11953] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 209.329684][T11953] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 209.376869][T11953] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 209.626482][T11979] bond7: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 209.642815][T11979] bond7 (unregistering): Released all slaves [ 209.915686][T11996] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1606'. [ 210.121672][T12001] 8021q: VLANs not supported on ip6gre0 [ 210.504383][T12015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1614'. [ 210.876685][T12033] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1620'. [ 211.073034][T12041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1623'. [ 211.151821][T12045] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1624'. [ 211.354325][T12044] delete_channel: no stack [ 211.500961][T12065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1629'. [ 211.511944][T12067] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.1630'. [ 211.520488][T12061] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1627'. [ 211.548271][T12065] pim6reg: entered allmulticast mode [ 211.554692][T12064] syzkaller0: entered promiscuous mode [ 211.561745][T12064] syzkaller0: entered allmulticast mode [ 211.574796][T12061] net_ratelimit: 33 callbacks suppressed [ 211.574814][T12061] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 211.713940][T12072] netlink: 'syz.3.1631': attribute type 21 has an invalid length. [ 211.751306][T12072] netlink: 'syz.3.1631': attribute type 6 has an invalid length. [ 211.769013][T12074] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 211.920016][T12080] netlink: 'syz.3.1635': attribute type 1 has an invalid length. [ 212.092691][T12080] 8021q: adding VLAN 0 to HW filter on device bond6 [ 212.546172][T12119] nbd: must specify a device to reconfigure [ 212.588142][T12122] syzkaller0: entered promiscuous mode [ 212.603646][T12122] syzkaller0: entered allmulticast mode [ 212.691403][T12128] netlink: 'syz.1.1652': attribute type 13 has an invalid length. [ 212.700894][T12128] netlink: 'syz.1.1652': attribute type 1 has an invalid length. [ 212.997283][T12142] syzkaller0: entered promiscuous mode [ 213.005740][T12142] syzkaller0: entered allmulticast mode [ 213.637615][T12159] netlink: 'syz.2.1661': attribute type 83 has an invalid length. [ 215.020973][T12157] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 215.162372][T12162] veth1_macvtap: left promiscuous mode [ 215.395043][T12177] openvswitch: netlink: Missing key (keys=40, expected=80) [ 215.678954][T12194] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 215.733281][T12188] __nla_validate_parse: 7 callbacks suppressed [ 215.733298][T12188] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1673'. [ 215.769775][T12197] netlink: 'syz.4.1676': attribute type 29 has an invalid length. [ 215.803472][T12199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1677'. [ 215.814443][T12199] netlink: 'syz.1.1677': attribute type 5 has an invalid length. [ 215.823793][T12199] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1677'. [ 216.104465][T12220] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1684'. [ 216.211998][T12226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1686'. [ 216.341798][T12233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1688'. [ 216.352758][T12236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.576738][T12245] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1690'. [ 216.682820][T12247] netlink: 'syz.2.1691': attribute type 12 has an invalid length. [ 216.842189][T12251] netlink: 'syz.2.1692': attribute type 21 has an invalid length. [ 216.859610][T12251] IPv6: NLM_F_CREATE should be specified when creating new route [ 216.892228][T12251] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 216.899557][T12251] IPv6: NLM_F_CREATE should be set when creating new route [ 216.906945][T12251] IPv6: NLM_F_CREATE should be set when creating new route [ 216.914256][T12251] IPv6: NLM_F_CREATE should be set when creating new route [ 216.940779][T12253] netlink: 'syz.3.1694': attribute type 3 has an invalid length. [ 216.958181][T12253] netlink: 'syz.3.1694': attribute type 1 has an invalid length. [ 216.976413][T12253] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1694'. [ 217.001940][T12257] netlink: get zone limit has 4 unknown bytes [ 217.363139][T12268] netlink: 'syz.4.1701': attribute type 3 has an invalid length. [ 217.391059][T12268] netlink: 766 bytes leftover after parsing attributes in process `syz.4.1701'. [ 217.432998][T12270] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.1702'. [ 217.604364][T12279] netlink: 'syz.1.1699': attribute type 13 has an invalid length. [ 217.645146][T12279] veth0_macvtap: left promiscuous mode [ 217.686778][T12279] macvtap0: entered allmulticast mode [ 217.701513][T12279] macvtap0: refused to change device tx_queue_len [ 217.853802][T12294] netlink: 'syz.1.1707': attribute type 21 has an invalid length. [ 217.872224][T12297] openvswitch: netlink: Missing key (keys=40, expected=100) [ 217.933305][T12296] netlink: 'syz.3.1708': attribute type 1 has an invalid length. [ 217.994902][T12304] Cannot find add_set index 2 as target [ 217.997378][T12294] ieee802154 phy0 wpan0: encryption failed: -22 [ 218.077218][T12302] bond7 (unregistering): Released all slaves [ 218.109090][T12296] netlink: 'syz.3.1708': attribute type 1 has an invalid length. [ 241.437351][T12320] __nla_validate_parse: 8 callbacks suppressed [ 241.437368][T12320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1712'. [ 241.580088][T12332] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1717'. [ 241.877079][T12355] x_tables: ip6_tables: REDIRECT target: only valid in nat table, not  [ 242.065682][T12369] netlink: 'syz.4.1727': attribute type 1 has an invalid length. [ 242.080620][T12363] ±ÿ: renamed from team_slave_1 [ 242.234829][T12380] nbd: must specify an index to disconnect [ 242.247608][T12381] nbd: must specify an index to disconnect [ 242.624117][T12413] netlink: 'syz.3.1735': attribute type 1 has an invalid length. [ 242.646717][T12388] syzkaller0: entered promiscuous mode [ 242.664085][T12388] syzkaller0: entered allmulticast mode [ 243.032809][T12426] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 243.042943][T12426] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 243.050762][T12434] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1744'. [ 243.074434][T12427] bond9: (slave bond_slave_1): Device is not our slave [ 243.087278][T12427] bond9: option active_slave: invalid value (bond_slave_1) [ 243.129073][T12427] bond9 (unregistering): Released all slaves [ 243.328489][T12447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1748'. [ 243.387675][T12451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1748'. [ 243.454045][T12460] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1751'. [ 243.723902][T12471] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1753'. [ 243.795222][T12451] syz.1.1748 (12451) used greatest stack depth: 17408 bytes left [ 244.046314][T12494] netlink: 'syz.4.1762': attribute type 29 has an invalid length. [ 244.063399][T12491] xt_hashlimit: size too large, truncated to 1048576 [ 244.073880][T12494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1762'. [ 244.199294][T12488] bond7: entered promiscuous mode [ 244.230117][T12488] 8021q: adding VLAN 0 to HW filter on device bond7 [ 244.283094][T12494] netlink: 'syz.4.1762': attribute type 29 has an invalid length. [ 244.321955][T12494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1762'. [ 244.753829][T12539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1771'. [ 246.114536][T12589] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 246.575516][T12609] xt_TPROXY: Can be used only with -p tcp or -p udp [ 246.586664][T12615] __nla_validate_parse: 5 callbacks suppressed [ 246.586682][T12615] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1789'. [ 246.716113][T12620] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1791'. [ 246.756651][T12620] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1791'. [ 246.778224][T12627] netlink: 'syz.1.1793': attribute type 39 has an invalid length. [ 246.786770][T12625] nft_compat: unsupported protocol 0 [ 246.807897][T12620] netlink: 'syz.0.1791': attribute type 6 has an invalid length. [ 246.839640][T12620] netlink: 'syz.0.1791': attribute type 5 has an invalid length. [ 246.864479][T12620] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1791'. [ 247.198031][T12640] netlink: 'syz.3.1797': attribute type 3 has an invalid length. [ 247.593717][T12664] sctp: [Deprecated]: syz.1.1802 (pid 12664) Use of int in max_burst socket option. [ 247.593717][T12664] Use struct sctp_assoc_value instead [ 247.652365][T12666] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 247.839347][T12674] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 248.013994][T12681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1807'. [ 250.233878][T12649] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 250.450821][T12696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1810'. [ 250.533097][T12708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1810'. [ 250.600803][T12696] can: request_module (can-proto-3) failed. [ 250.627120][T12699] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.693023][T12713] : renamed from veth0 (while UP) [ 250.958918][T12724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1817'. [ 250.990043][T12731] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1819'. [ 251.238873][T12742] netlink: 'syz.3.1822': attribute type 5 has an invalid length. [ 251.390471][T12752] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1826'. [ 251.686269][T12763] syzkaller1: entered promiscuous mode [ 251.693974][T12763] syzkaller1: entered allmulticast mode [ 251.737435][T12770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1831'. [ 252.355315][T12778] bond7: entered promiscuous mode [ 252.386928][T12778] bond7: entered allmulticast mode [ 252.484772][T12799] netlink: 'syz.4.1834': attribute type 6 has an invalid length. [ 252.569136][T12786] syzkaller0: entered promiscuous mode [ 252.575679][T12786] syzkaller0: entered allmulticast mode [ 252.597025][T12802] IPVS: Error connecting to the multicast addr [ 252.845229][T12820] netlink: 'syz.3.1840': attribute type 3 has an invalid length. [ 252.873103][T12820] netlink: 'syz.3.1840': attribute type 1 has an invalid length. [ 252.892207][T12820] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1840'. [ 252.973467][T12829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1843'. [ 254.715693][T12839] netlink: 'syz.4.1846': attribute type 1 has an invalid length. [ 254.964607][T12856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1851'. [ 255.058206][T12860] netlink: 'syz.4.1851': attribute type 1 has an invalid length. [ 255.195412][T12872] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1855'. [ 255.329680][T12879] macsec0: entered promiscuous mode [ 255.354503][T12879] macsec0: entered allmulticast mode [ 255.382270][T12879] veth1_macvtap: entered promiscuous mode [ 255.389975][T12879] veth1_macvtap: entered allmulticast mode [ 255.400259][T12879] macsec0: left promiscuous mode [ 255.408390][T12879] macsec0: left allmulticast mode [ 255.423674][T12879] veth1_macvtap: left allmulticast mode [ 255.597626][T12893] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1861'. [ 255.661119][T12844] delete_channel: no stack [ 255.673651][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.840616][T12907] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1864'. [ 256.077314][T12920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1868'. [ 256.120252][T12920] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1868'. [ 256.234375][T12932] netlink: 'syz.2.1868': attribute type 3 has an invalid length. [ 256.260782][T12932] netlink: 'syz.2.1868': attribute type 3 has an invalid length. [ 256.291537][T12932] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1868'. [ 256.293871][T12935] netlink: 'syz.0.1873': attribute type 23 has an invalid length. [ 256.825996][T12974] ipt_REJECT: TCP_RESET invalid for non-tcp [ 257.016643][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032875400: rx timeout, send abort [ 257.030008][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032877800: rx timeout, send abort [ 257.185316][T12989] __nla_validate_parse: 1 callbacks suppressed [ 257.185334][T12989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1887'. [ 257.239895][T12996] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1890'. [ 257.267231][T12996] netlink: 'syz.2.1890': attribute type 1 has an invalid length. [ 257.279440][T12996] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1890'. [ 257.310407][T13000] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1891'. [ 257.492405][T13012] netlink: 'syz.2.1893': attribute type 1 has an invalid length. [ 257.500096][T13014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1894'. [ 257.527387][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032875400: abort rx timeout. Force session deactivation [ 257.539105][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032877800: abort rx timeout. Force session deactivation [ 257.855037][T13029] delete_channel: no stack [ 257.864123][T13039] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1901'. [ 257.874816][T13025] bond8: option resend_igmp: invalid value (32767) [ 257.874842][T13025] bond8: option resend_igmp: allowed values 0 - 255 [ 257.891603][T13039] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1901'. [ 257.892939][T13025] bond8 (unregistering): Released all slaves [ 257.927026][T13039] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1901'. [ 257.928506][T13041] netlink: 'syz.1.1899': attribute type 1 has an invalid length. [ 257.959310][T13040] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1901'. [ 257.978098][T13040] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1901'. [ 257.995412][T13046] netlink: 'syz.4.1903': attribute type 30 has an invalid length. [ 258.055583][T13037] pim6reg: left allmulticast mode [ 258.358377][T13063] netlink: 'syz.1.1908': attribute type 4 has an invalid length. [ 258.397297][T13063] netlink: 'syz.1.1908': attribute type 32 has an invalid length. [ 258.505314][T13083] syzkaller1: entered promiscuous mode [ 258.528446][T13083] syzkaller1: entered allmulticast mode [ 258.575230][T13083] syzkaller1: left promiscuous mode [ 258.595213][T13083] syzkaller1: left allmulticast mode [ 258.844948][T13099] xt_hashlimit: size too large, truncated to 1048576 [ 258.956329][T13107] xt_hashlimit: size too large, truncated to 1048576 [ 259.469752][T13129] veth5: entered promiscuous mode [ 259.545783][T13132] netlink: 'syz.4.1926': attribute type 51 has an invalid length. [ 259.936762][T13146] bpq0: entered promiscuous mode [ 259.962710][T13146] [ 259.965082][T13146] ====================================================== [ 259.972160][T13146] WARNING: possible circular locking dependency detected [ 259.979212][T13146] syzkaller #0 Not tainted [ 259.983640][T13146] ------------------------------------------------------ [ 259.990816][T13146] syz.3.1930/13146 is trying to acquire lock: [ 259.996877][T13146] ffffffff8ff61938 (nr_node_list_lock){+.-.}-{3:3}, at: nr_rt_device_down+0xbe/0x860 [ 260.006364][T13146] [ 260.006364][T13146] but task is already holding lock: [ 260.013718][T13146] ffffffff8ff618d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 260.023285][T13146] [ 260.023285][T13146] which lock already depends on the new lock. [ 260.023285][T13146] [ 260.033674][T13146] [ 260.033674][T13146] the existing dependency chain (in reverse order) is: [ 260.042672][T13146] [ 260.042672][T13146] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 260.050571][T13146] _raw_spin_lock_bh+0x36/0x50 [ 260.055869][T13146] nr_rt_ioctl+0x40c/0xf90 [ 260.060803][T13146] sock_do_ioctl+0x101/0x320 [ 260.065912][T13146] sock_ioctl+0x5c6/0x7f0 [ 260.070765][T13146] __se_sys_ioctl+0xfc/0x170 [ 260.075872][T13146] do_syscall_64+0x15f/0xf80 [ 260.081067][T13146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.087556][T13146] [ 260.087556][T13146] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 260.095637][T13146] _raw_spin_lock_bh+0x36/0x50 [ 260.100931][T13146] nr_rt_ioctl+0x215/0xf90 [ 260.105860][T13146] sock_do_ioctl+0x101/0x320 [ 260.110997][T13146] sock_ioctl+0x5c6/0x7f0 [ 260.115840][T13146] __se_sys_ioctl+0xfc/0x170 [ 260.121128][T13146] do_syscall_64+0x15f/0xf80 [ 260.126239][T13146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.132644][T13146] [ 260.132644][T13146] -> #0 (nr_node_list_lock){+.-.}-{3:3}: [ 260.140649][T13146] __lock_acquire+0x15a5/0x2cf0 [ 260.146026][T13146] lock_acquire+0x106/0x350 [ 260.151059][T13146] _raw_spin_lock_bh+0x36/0x50 [ 260.156341][T13146] nr_rt_device_down+0xbe/0x860 [ 260.161700][T13146] nr_device_event+0x137/0x150 [ 260.167068][T13146] notifier_call_chain+0x1ad/0x3d0 [ 260.172690][T13146] __dev_notify_flags+0x16d/0x310 [ 260.178224][T13146] netif_change_flags+0xe8/0x1a0 [ 260.183673][T13146] dev_change_flags+0x130/0x270 [ 260.189041][T13146] dev_ioctl+0x7b4/0x1150 [ 260.193888][T13146] sock_do_ioctl+0x23e/0x320 [ 260.198991][T13146] sock_ioctl+0x5c6/0x7f0 [ 260.203840][T13146] __se_sys_ioctl+0xfc/0x170 [ 260.208943][T13146] do_syscall_64+0x15f/0xf80 [ 260.214056][T13146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.220458][T13146] [ 260.220458][T13146] other info that might help us debug this: [ 260.220458][T13146] [ 260.230671][T13146] Chain exists of: [ 260.230671][T13146] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 260.230671][T13146] [ 260.244494][T13146] Possible unsafe locking scenario: [ 260.244494][T13146] [ 260.251943][T13146] CPU0 CPU1 [ 260.257317][T13146] ---- ---- [ 260.262682][T13146] lock(nr_neigh_list_lock); [ 260.267359][T13146] lock(&nr_node->node_lock); [ 260.274647][T13146] lock(nr_neigh_list_lock); [ 260.281851][T13146] lock(nr_node_list_lock); [ 260.286434][T13146] [ 260.286434][T13146] *** DEADLOCK *** [ 260.286434][T13146] [ 260.294560][T13146] 2 locks held by syz.3.1930/13146: [ 260.299749][T13146] #0: ffffffff8fde4240 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 260.308553][T13146] #1: ffffffff8ff618d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 260.318640][T13146] [ 260.318640][T13146] stack backtrace: [ 260.324527][T13146] CPU: 0 UID: 0 PID: 13146 Comm: syz.3.1930 Not tainted syzkaller #0 PREEMPT(full) [ 260.324546][T13146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 260.324561][T13146] Call Trace: [ 260.324570][T13146] [ 260.324578][T13146] dump_stack_lvl+0xe8/0x150 [ 260.324605][T13146] print_circular_bug+0x2e1/0x300 [ 260.324625][T13146] check_noncircular+0x12e/0x150 [ 260.324645][T13146] __lock_acquire+0x15a5/0x2cf0 [ 260.324672][T13146] ? __lock_acquire+0x6b5/0x2cf0 [ 260.324697][T13146] ? dsa_user_netdevice_event+0x495/0x2850 [ 260.324716][T13146] ? packet_notifier+0x121/0xf70 [ 260.324737][T13146] ? nr_rt_device_down+0xbe/0x860 [ 260.324751][T13146] lock_acquire+0x106/0x350 [ 260.324774][T13146] ? nr_rt_device_down+0xbe/0x860 [ 260.324789][T13146] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 260.324817][T13146] ? nr_rt_device_down+0xbe/0x860 [ 260.324830][T13146] _raw_spin_lock_bh+0x36/0x50 [ 260.324850][T13146] ? nr_rt_device_down+0xbe/0x860 [ 260.324864][T13146] nr_rt_device_down+0xbe/0x860 [ 260.324877][T13146] ? nr_device_event+0x12f/0x150 [ 260.324903][T13146] nr_device_event+0x137/0x150 [ 260.324927][T13146] notifier_call_chain+0x1ad/0x3d0 [ 260.324947][T13146] __dev_notify_flags+0x16d/0x310 [ 260.324965][T13146] ? __pfx___dev_notify_flags+0x10/0x10 [ 260.324979][T13146] ? __dev_change_flags+0x5a0/0x7e0 [ 260.324997][T13146] ? __pfx___dev_change_flags+0x10/0x10 [ 260.325013][T13146] ? full_name_hash+0x92/0xe0 [ 260.325030][T13146] netif_change_flags+0xe8/0x1a0 [ 260.325048][T13146] dev_change_flags+0x130/0x270 [ 260.325065][T13146] dev_ioctl+0x7b4/0x1150 [ 260.325089][T13146] sock_do_ioctl+0x23e/0x320 [ 260.325111][T13146] ? __pfx_sock_do_ioctl+0x10/0x10 [ 260.325130][T13146] ? do_futex+0x395/0x420 [ 260.325151][T13146] sock_ioctl+0x5c6/0x7f0 [ 260.325171][T13146] ? __pfx_sock_ioctl+0x10/0x10 [ 260.325190][T13146] ? __fget_files+0x2a/0x420 [ 260.325206][T13146] ? __fget_files+0x3a0/0x420 [ 260.325220][T13146] ? __fget_files+0x2a/0x420 [ 260.325237][T13146] ? bpf_lsm_file_ioctl+0x9/0x20 [ 260.325257][T13146] ? __pfx_sock_ioctl+0x10/0x10 [ 260.325277][T13146] __se_sys_ioctl+0xfc/0x170 [ 260.325297][T13146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.325313][T13146] do_syscall_64+0x15f/0xf80 [ 260.325335][T13146] ? trace_irq_disable+0x3b/0x140 [ 260.325355][T13146] ? clear_bhb_loop+0x40/0x90 [ 260.325373][T13146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.325389][T13146] RIP: 0033:0x7f397d79cdd9 [ 260.325404][T13146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.325419][T13146] RSP: 002b:00007f397e6e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 260.325437][T13146] RAX: ffffffffffffffda RBX: 00007f397da15fa0 RCX: 00007f397d79cdd9 [ 260.325449][T13146] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000008 [ 260.325460][T13146] RBP: 00007f397d832d69 R08: 0000000000000000 R09: 0000000000000000 [ 260.325470][T13146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.325479][T13146] R13: 00007f397da16038 R14: 00007f397da15fa0 R15: 00007fff747b9f28 [ 260.325498][T13146] [ 260.670281][T13158] caif:caif_disconnect_client(): nothing to disconnect