last executing test programs: 58.422007073s ago: executing program 2 (id=967): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-pclmul\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003f80)=[{{0x0, 0x0, 0x0}, 0xfffffffe}], 0x1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x4, 0x0, 0x10, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x4e, &(0x7f0000000380)={@remote, @remote, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000005", 0x14, 0x6, 0x0, @private0, @mcast1={0xff, 0x10}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 56.08016531s ago: executing program 2 (id=998): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="c0000000190001000000000000000000e0000002000000000000000000000000fc01000000000000000000000000000004000000000000000a000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xc0}}, 0x0) 39.131979356s ago: executing program 2 (id=998): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="c0000000190001000000000000000000e0000002000000000000000000000000fc01000000000000000000000000000004000000000000000a000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xc0}}, 0x0) 26.038634563s ago: executing program 2 (id=998): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="c0000000190001000000000000000000e0000002000000000000000000000000fc01000000000000000000000000000004000000000000000a000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xc0}}, 0x0) 20.02253189s ago: executing program 4 (id=1373): socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711221000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="80fd", @ANYRES64=r0], 0x9) r2 = socket$inet_smc(0x2b, 0x1, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x4}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x6, 0x5a94, 0x7]}, @CTA_NAT_SRC={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x2a, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r5) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x34004000) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000000080), 0x4) sendmsg$IEEE802154_LLSEC_LIST_DEV(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r6, 0x321}, 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x200}, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) listen(r2, 0x0) close(r2) 19.472118289s ago: executing program 4 (id=1378): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000100000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 19.344020985s ago: executing program 4 (id=1380): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@snprintf={{}, {0x3, 0x3, 0x6, 0x2, 0xa, 0xfff8, 0x41}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x24, r1, 0x503, 0x70bd29, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}]}, 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='rpc_buf_alloc\x00', r0}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@snprintf={{}, {0x3, 0x3, 0x6, 0x2, 0xa, 0xfff8, 0x41}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x24, r1, 0x503, 0x70bd29, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}]}, 0x24}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='rpc_buf_alloc\x00', r0}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (async) 13.192175537s ago: executing program 2 (id=998): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="c0000000190001000000000000000000e0000002000000000000000000000000fc01000000000000000000000000000004000000000000000a000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xc0}}, 0x0) 11.931252802s ago: executing program 1 (id=1460): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a8008000280fe0f0500080000003e"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x1}]}}}]}, 0x44}}, 0x0) 11.683366799s ago: executing program 1 (id=1463): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000240), 0x0}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newaddrlabel={0x38, 0x48, 0x3, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_LABEL={0x8, 0x2, 0xffffffff}]}, 0x38}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2c, 0x3a, 0xb, 0x0, 0x0, {0x2}, [@nested={0xfffffffffffffec1, 0x0, 0x0, 0x1, [@typed={0x13, 0x3, 0x0, 0x0, @str='\r4\xd8\x02j,'}]}]}, 0x2c}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000040), 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x78}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x5}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="8c000000070667d057e67fa0f87b1205546bc5c44569c6d4354ace6cbd531e2ac0a9f6eb727dc4de2377c70b4cb80dd5c1d4d690db70fb066319e865e2744864703f8d44b67eb33386370c673ee40f31c4c035fd6698bd614876d467e1b47b195b55e1c063859425278768f80d2f2d3f7612467fde70f699ebdc1b9a860e53efc0f50632dd55f5a4eedea3d243bfb11847690a02f29615763b216928244df38d6bba7302e619f699ba0193acb9f84720c47d95e9ca11cc420c48408b686f", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000640008806000028024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce851400040005000000ac1414aa00000000000000001400020077673000"/134], 0x8c}, 0x1, 0x600}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1c, 0x0, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xe, &(0x7f0000000400)=@framed={{}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x5, 0x4) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000002c0)='vegas\x00', 0x6) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000120009090000000000000000070000000000000000000000000000002e00e800000000000000b77b9d954bc6f5035e720000000020001000000000000000cf6603"], 0x50}}, 0x0) 11.472275114s ago: executing program 1 (id=1466): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a802b8c7494f90224fc600b00000004000400070082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e623950c4f67581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r1) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000a80)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a"], 0x190) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r4) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00889f", @ANYRES16=r5, @ANYBLOB="020029bd7000fcdbdf2503000000080004000900000008000200010000000800040001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8040) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0xe8, r2, 0x1, 0x70bd29, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0xa4, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x259a8540}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3614}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a2c0136}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x26c56cf2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7f5b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe361}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8ea0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb218}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6ed8}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd7d8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x22942e48}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfd29}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x25cf04a5}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x75c7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x25c81298}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d1a2286}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79a07fdc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb18c}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0xe8}}, 0x20000) 11.226154819s ago: executing program 1 (id=1468): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000006800010000000000000000000a000000000000000c0008800800030000000000060007000200000008000500", @ANYRES32, @ANYBLOB="140006"], 0x48}}, 0x0) (rerun: 64) r2 = socket$inet(0x2, 0x3, 0x5) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001880)={{{@in6=@loopback, @in6=@mcast2}}, {{}, 0x0, @in=@empty}}, &(0x7f0000001980)=0xe8) (async) setsockopt$inet_int(r2, 0x0, 0x19, &(0x7f0000000080)=0x3, 0x2) (async, rerun: 64) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000240)={{0x2, 0x0, @rand_addr=0x64010102}, {0x20000010304, @dev}, 0x4, {0x2, 0x40, @multicast2}}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000030800000000000000000000000000000900010073797a31000000001c000480080003400000000008000540080000000800084000000000"], 0x3c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x1, 0x2, 0x3, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_ZONE={0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040080}, 0x4040000) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f00000019c0), r5) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r6, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8011}, 0x4004080) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f00000004c0)={@val={0x4}, @void, @eth={@broadcast, @broadcast, @val, {@ipv6={0x86dd, @udp={0x0, 0x6, "953e3e", 0x48, 0x11, 0x0, @empty, @private1, {[], {0x224e, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "b1999aa9423b268179eefdf90af2d0830911d82922987142", "2e06c3896092ad1ba7a53ead892b29c7fe864884dc26055074b851cad1a15ec6"}}}}}}}}, 0x8a) (async, rerun: 32) r10 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32) ioctl$sock_inet_SIOCSARP(r10, 0x8955, &(0x7f0000000240)={{0x2, 0x0, @empty}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x81764109abc7f596, {0x2, 0x0, @loopback}, 'lo\x00'}) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f000000000001000000040000000c000180cafc080005470000080002"], 0x78}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x44}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001840)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000300)="4b7c49ae28cd022201e604ef306f5dab33adf6ff36cea7d3908fe6ed", 0x1c}, {&(0x7f0000000340)="92c62806e2afc90db73e934fbaca82ee05210855711f351595fd3c9c65d607f4a2c94667130b675fff641d119e4305d03e4cd246374a11dcdbaebe416a00c5193fde475e9b19ed7b2d10de50f6451c1ec0824a752db12a403fd2f556b899bedc90b8d0d25834a5a04d9dc0810d7de6b3db3721d9ae001e01c79c9f2bc7af510a8d30e3234647370f12303aa347affb28e981314409e440f2b992bc29b6d4c870d731b65c89cadb342e3129b85c1ae50afc96c36810d99c69", 0xb8}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="43767de59d63780f84911c27c441743704218b09d5b8f3252a6c861c9e9308e06d00f52b6f5fcf050bd0476560b11cecf28d66febb24ebab81ff6fa776b23bd5d7f1a0654e90f7bfa0b19cfa8a5aedf385d0457ca2c2e252e9af63d9421d9a200dffc7249fbd44b4c3cbb4afe70ca9c63ca6e199b2099f36d51655d818e08b74da7b5f748ec900d9c4a063cd19ce511d2681624abbef6e18aba9661b65d587ea3691533d0ebde5bb3582d29b4242734355cb7d3f3d783fde091f6b370b387bda2acb0f4bfdf78ecb7690bc064819ff4c886f336e9a7494a42ad768", 0xdb}, {&(0x7f0000001500)="eb0efde65c458345b79c1ed3aa0e972d24ca73139619c802db9d0a83109bab1e769177ddbf0a840e641afd02e363b8609ec875fae7171f0fb0d95df31e97f7acbbb2843060daa4bc43e8d691ca866e98cc6e30ed759bfb91f16a8032e7", 0x5d}, {&(0x7f0000001580)="493df7287c5940072dc88fd9c7fd2b693d7c7c9be7dd8bb8e4a8a39d16918ccf125c80644cbe9bb7a2f77351b0d12db820cfabdd06545c87a1d9b2a1f1a83c647fe8a44ba10f48f4661c41a7757a664cf250f94eac337033c9005f0ba83f30e0123525c960abbd85a73da7cb035170d3a1be9761e95bd979ed2a7b329eb81193186302b2103a5d", 0x87}], 0x6, &(0x7f00000016c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_retopts={{0x94, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0xcd, 0x0, 0xf, [0xfff, 0x7fff, 0x7f, 0x7ff, 0x4, 0x9]}, @timestamp_addr={0x44, 0x3c, 0xe1, 0x1, 0x6, [{@multicast2, 0x3}, {@rand_addr=0x64010101, 0xb038}, {@private=0xa010101, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xff}, {@loopback, 0x9}, {@remote, 0x8}, {@empty, 0x200}]}, @generic={0x88, 0x10, "4003c7683ac0c4dbd30106177e0c"}, @lsrr={0x83, 0xf, 0xb6, [@broadcast, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0xc, 0x77, 0x0, 0x4, [0x3, 0x7ff]}]}}}, @ip_retopts={{0xa0, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x9b, [@broadcast, @broadcast]}, @timestamp_prespec={0x44, 0x1c, 0xd8, 0x3, 0x0, [{@multicast1, 0x4f3d25a8}, {@local, 0x3}, {@rand_addr=0x64010102, 0x5}]}, @timestamp_addr={0x44, 0x1c, 0xf, 0x1, 0x3, [{@loopback, 0x440f4fd6}, {@multicast2, 0x8}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x82, 0xc, "d38fc18d1e04314186c7"}, @generic={0x7, 0x7, "5bdeac678f"}, @timestamp_addr={0x44, 0x1c, 0xd2, 0x1, 0x7, [{@rand_addr=0x64010102}, {@multicast1, 0x7}, {@loopback, 0x3}]}, @rr={0x7, 0x1b, 0xd1, [@broadcast, @local, @empty, @empty, @multicast2, @remote]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}], 0x180}}], 0x1, 0x80) 10.428179121s ago: executing program 1 (id=1471): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000004000000020000000000001103000000ffffffff000000000100000d010000000000000001000000020000000000000802000000000061"], 0x0, 0x4c, 0x0, 0xfffffffc, 0x0, 0x0, @void, @value}, 0x28) 10.339665962s ago: executing program 1 (id=1473): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) (async) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500000008000100", @ANYRES16=r0], 0x1c}}, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_dccp_buf(r3, 0x21, 0xd, &(0x7f0000000200)="7378b44d0930205ec5eb2ed5b7344beca9aa841433c0f89016a92fbedae4191045653ddc53657c7bc7248de2d6378d582bf6023e0d962fb1a368f769612f7bda5b43481f94d8861e09e25002a77158a6ce953105c4fb621671aad642b505a2ad3337649e13e5c4d419fa8796bea5bbcf876cf341a464867a8cace25e1cc9c0cdee81", 0x82) 2.029021405s ago: executing program 0 (id=1524): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000001070101000000000000000002000008"], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x20000010) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_crypto(0x10, 0x3, 0x15) splice(r1, &(0x7f00000000c0)=0xdb7, r2, &(0x7f0000000100)=0x3, 0x0, 0x8) socket$kcm(0x10, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000140), 0x2) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000006c0001"], 0x18}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x600}]}, 0x24}}, 0x0) getsockopt$ax25_int(r4, 0x101, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200e5ffffffffffffff00000000000000000000000000000000000000000000000000000200000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008401050000000000000000000000000000000000000000006c00000000000000640101020000000000000000000000000000000000000000000000000000000000000000fc020000000000000000000000000000000000003200000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001000000000000000000000000000000e0000002000000000000000000000000000000003300000002000000fe800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003300000002000000ff020000000000000000000000000001000000000000000000000000000000000000000020010000000000000000000000000002000000003200000002"], 0x23c}}, 0x0) ioctl$sock_ax25_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={@default, @default, 0x1, [@default, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @default, @null]}) syz_emit_ethernet(0x3e, &(0x7f00000006c0)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd601210080008cd0fec9d42d942a15f923d25253a00fe8000000000000000000000851bea90000000bbfe800000000000"], 0x0) 1.776296684s ago: executing program 0 (id=1525): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) (async) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000180)={0x7, 0x7, 0xfffc}, &(0x7f00000001c0)=0x28) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0xa, 0x5, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000003c0), 0x3f, r1}, 0x38) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, &(0x7f0000000040)=')', &(0x7f0000000080)=""/59}, 0x20) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000003fc0)={'filter\x00', 0x4}, 0x68) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e78}, [@printk={@lu, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffe}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3252}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.634519637s ago: executing program 4 (id=1477): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000800)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x2}]}}]}, 0x50}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r6, 0x1, 0x53, &(0x7f0000000040)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000080)=0x2c) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r7, 0x5421, &(0x7f00000003c0)=0x1ff) setsockopt$inet_tcp_int(r7, 0x6, 0x7, &(0x7f0000000000)=0x2, 0x4) getsockopt$ARPT_SO_GET_INFO(r7, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x0, [0x4779, 0x3, 0xbbd4]}, &(0x7f0000000200)=0x44) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x30}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x10001, 0x7fff, 0x82, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000240)={0x0, 0x2, 0x4}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) socket$key(0xf, 0x3, 0x2) setsockopt$inet_int(r9, 0x0, 0x17, &(0x7f00000000c0)=0x5, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@gettclass={0x24, 0x2a, 0x10d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) socket(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}}, 0x0) 1.620936326s ago: executing program 3 (id=1527): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffff52, &(0x7f0000000240)='cgroup\x00\x02\x12.\x92a\xf8\x1e\xef}\x19\xe7\\\xb1=\x00\xed^i@`\xef\xc0s[\x06{\n\x89*i\x8b\x87\x04\xc6}?r\xc8V\x93UBk\xf6\xfazl\x15\xeb1wTn\xad\xeeB\aU?(\x18~\"\xb9\xe6a%;!O\x7f\x02\x04\x13\xe2\xed'}, 0x30) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x12, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000000)=0xfffffffd, 0x4) setsockopt$inet_int(r3, 0x0, 0x17, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x28}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) 1.567701712s ago: executing program 0 (id=1528): r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.stat\x00', 0x275a, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="1800004eba0000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b60000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) r4 = accept4(0xffffffffffffffff, &(0x7f0000000940)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x0, 0x800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x48000) getsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a0, 0x118, 0x0, 0x330, 0x298, 0x330, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@multicast1, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'pimreg0\x00'}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}, {{@ip={@multicast2, @dev, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'vlan0\x00', 'veth1_to_bridge\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_int(r6, 0x1, 0x12, 0x0, &(0x7f0000000140)=0x5104) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000001140)=ANY=[@ANYBLOB="18020000000000000000b4e8130000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004081) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000000c0)=r8, 0x4) close(r7) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}]}, 0x3c}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 1.418766474s ago: executing program 3 (id=1529): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pipe(0x0) socket$inet6(0xa, 0x1, 0x84) r0 = socket$isdn_base(0x22, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x7, &(0x7f0000000180)="a8", 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000004c0)=0x6b9161611c72829c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140ffffffff0c0001800800014000000000050014001f00080005000500020000000500010006"], 0x6c}}, 0x0) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b000000000000000000000007fc7f0000000000006a170e94ebbfb32c3cc411b8b0604edd82ad5d2f89ffc00a46c4d7fb1e03ebe6d6c6acfc973024bad4db84e3070efb5a656a56f37f1cc7d7ddf3950bc0449ecc4aaf73903d92deb1ef0111f1df9e736198de7d767e9742be5c35c1c49c1ddb680915423efb649c3161566ca02537e112a120c8ca7606187fd380e5158d14295d6bf652ef71f7fe23d23098b430", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000840)=ANY=[@ANYRES16=r4, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002100000850000008200000085000000d000000095", @ANYRES16=0x0, @ANYRES32=r4, @ANYRESDEC], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r7) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001940)=ANY=[@ANYBLOB="14010000210001000000000000000000020100800c0002"], 0x114}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r3, @ANYRESHEX=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000008489c89c0000000008500e8f4c5f2aef9d42c6bac00018600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xf, 0x9, &(0x7f0000000440)="0007898d3c4eaaea6c861d02ffffff", &(0x7f0000000480)=""/9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffff8}, 0x50) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="000825bd7000fbdbdf2505000000050006008a0000000800050003000000"], 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x48004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) 1.270351743s ago: executing program 3 (id=1530): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003880)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_DATA={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc0}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_DATA={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc0}}, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000055000000080001006300000008000300", @ANYRES32=r7, @ANYBLOB="5df7f689503bfdb3ad5cf3c8e0f71b94221081cfc4d4d0d340be7454c6a33c5ce0d88d856f20fb4d9bc58cc7ea39b56cd3b7c9cdb5afc58f20e2069899ff1cf780327f147720dc67803ef9223196cad4d9d4cff4674e5658482be2f09546d4b2060573f90cd90990729c8e24c6ccedbe33b80ea1948bee335a28a5"], 0x24}}, 0x0) r8 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x5, 0x100000}, 0x80, 0x0}, 0x20048800) sendmsg$kcm(r8, &(0x7f0000002ec0)={&(0x7f0000001b00)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x1002}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x86a9}, 0x20000000) 1.151683248s ago: executing program 0 (id=1531): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x3, 0x0, 0xfffffffd}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DPORT={0x6}, @RTA_SPORT={0x6}]}, 0x2c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[]}, 0x78) write$binfmt_script(r2, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x7001, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="030700000000000000000800000068000480"], 0x7c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000540)='mmap_lock_acquire_returned\x00', r4}, 0x10) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000e80)={0x5, 0xfffffc00}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r7, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3, 0x0, 0x0, 0xfffffdef}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x0, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00ee0000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c000c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05af3a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e4e4e29d8b33fbdd02e86a6432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3ce8f530ffff19a6471bf5abc742d9cbcfb964b13831034694a6aad84cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df871a8e782339bc424d1bafe5725c8a404724f8a4f1cda7997b65954f74097579b91da309b887af2485c2d9ab09b506000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb78183e7e68de9dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbefd9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d85618ba2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009de2323f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e75fa39643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2df636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978addf2f2a29a387c6f0576b36038f819286eea99a6a434811cf2a117d775fe986a49fb82cf5f15972d55185ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e671d305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a540f64000000000000fbb4c256409e54daefbb107c381fa729ff5fe607d93430da178d685d7730f5e129438a5214f722096d2986334c25e454474f92e65828b018174a9f4738b8c71fbdead06ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a379ed4c6267965af78b861bd335312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68ffce8d141e8960ef790fb0078215d65f96eb55db8cbcb060000000d988374e45451a694ffe38a1d03912b31c98d42e1a1bda1290de1a499a5d6849914c1788a7aca37177cc34102f44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553ecece78d4c1541c70f5d81e0725d5b273755c0000000000000000aa4234e282182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a7d72fcdb0a11993d54d97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a9236558fea2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574ea68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24a8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa1ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8edc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a41b315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f24bb68f486e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e8d5bc5642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f0cf74f845d1cc9ec4eee79c290fb0ba939b13707004e2e9cc0d350538c1c8c6bb9a38c6ac5ca07df32601240ea3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4055f05558ab31f339f6a4caf2ee2fd01f34dca330000000000000000000000000000000000000000000000000000000000000000000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c5954d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd6f7fd7f8898c70b5c65f2e28f22e983892c383882809f557affbda5e1850d66a4a1ee73b2084681f880a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae9052be8eec1e95f6ad8d41dd34829504ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b06a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd31091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a474bd16b8f7e6aed12a305366599f5f029a7b24558c02750500002f1c19d16a6f391906000000cc03bbfb8c698ecc137d96711100e01031aa74fad86b99eebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc86784c9f940d9fb0464a72ce635e14b80dc5c1c64e8f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f938ad16eeb8342278f1c1cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706e587f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2cc0e7c207b8942fafd70530a0fc4622ecf132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af999dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2be0d1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bff348229fa84034faf8421a22c4b4c17a3d24a4aeee0d0850371feefd77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2b59654d49a11c6736ac63e8eb383760fc2b5c976dacf3dda7191c757f28e44f6a5f95db7055f7ed983f5665210f20a494fabb0dbcd335700000000000000000000000000000086666201251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a5826fdbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193ad0438cdef7a98a1671a1918df310dc4bfd61c3db3c22673884dca370558936b85737e14819ab1c57b348a8ff16d36364a20fe846d11d045de81f069bac8425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb251ab9eefc8e400191f0f0f8c679b0000000000000000000000b41b0ae67d9351c49e1ff285d05a3cc39a5b0cd20afe0a00086650f8fad20c0e1e7131836c85b2cbacd41593928207312189fdd66abc45a139f0c9dbcc58237cec5bd56ffe0c6de23254a7951a298501ca04ab30b5723df6dd01d0b1a87c197b83b286374ba9a9dd1bd09ea1b71b24a1f527bf59d9633e3d15ed3757acc494f464482e49884c13780cc392bfe67b5d91e5b513daea48cac7645db35f07ba41aa187f65c5344717d7a0ee353a7e36b14fdce5898a613cef224d3addb3d2de74cef73f7520dc8cc8ffaa62cbd25e691ef4c45fdd25675b32c129a8464f08c4da9c08713b54416f3b56a04086dab1d196884e062287ad4758e883d2f99833d8aaf0c56718f6b0434740900faf4ab824662a719bf370fd0b2de04c1455ec14908ce5cbec79466f2f2cc337c53437d626254e00000000000000000000000000000000c34646f8ae68c095e7298300feab8a3dfe2c43fc971385b13b4f3b61ddbf5044ff572defcc67930f0e715774e1e970751534398faf79350255cfa9021378f10c2043e7ecd5649c9720530da7ea227b792f31cb5d688b5f1eba9ff5f85c97b35e00ecf76282912b483e31c76e303e527e98a9ca14f718d495ad45db16c4500011de506f0ca35f7ea96ed1831e3c1219f985b26cb8a70e7c8efcb287984871e0fed3f1985cf63f00289292b378188ad0dfae12c265b88961a9223b48cf7055d641595e0cb926d63c1f8a207f48bd482290b79867285c2155e655e017bca6cbba43f9b49042fb2fb390c436b3306e8a0800000090d159004da838a50235b91f5273c1fe083067ce1e2d8011c9e2b6d3ea69dfc3712e5ce440432fbd29ffd004000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9d, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) 1.149543774s ago: executing program 4 (id=1532): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000015c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x60004050}, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000ffffffffffff080211d5b801"], 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000000280)) setsockopt$MRT6_PIM(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0x1, 0xffffff71) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x46, &(0x7f0000000380), 0x4) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x800443d3, 0x20000002) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000001c0)={0x80, 0x0, 0x2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4c000}, 0x80c4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)={0x424, 0x13, 0x200, 0x70bd2d, 0x25dfdbfe, {0x1d, 0x4, 0x5, 0x9, {0x4e24, 0x4e24, [0x80000000, 0x5, 0x8, 0x1], [0x0, 0xe4036f0, 0x10001, 0xd3a], 0x0, [0x3, 0xd]}, 0x5, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xb4, 0x1, "3493947769fa033b06e0454e5fff43ebe2d7b02e8a8c7e9966a0b0da8d05276533d92fd8f2890b51ef53b7fee63e8ded429f913c73375a0f298357f7106697aca53f8a1202750a29a2de30f9dbaddf56e825be128c4a8c11ed729d88abac361e50872451d773a56ec83b919cab9a3b37e59a9c6970196e38216795aa61860285a02306e514e6a4d6023aa1a61ceda4a812a919328c054dfc517f23ca58191c41efd8bbeb6fc5b34071ece09a5623f1f5"}, @INET_DIAG_REQ_BYTECODE={0x43, 0x1, "dd4ad15efe4c0c4bfcb6d06023410a94b7fad64adeda634ffc702122ab16838872096e50b13023cbc6f0880f8d8ce535326f230935d8dde13126bc4ddacbed"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x84, 0x1, "424c93a24af9a7b89c576bf76fcbedf5ccd3e1ca155aa89fb2661ad0d5dec70a73cece48572d416f31615c7e8d3429b144bbc4679cefca2b18fb2d339a760c07fcef9aaa5d1f0ab7340c243ea77ad2dc1bd4988971f971e14e1f65652bab3dbec2590bb9c955737169375b5398c57f10d54132a9cb619a1924a7ed3726beac7d"}, @INET_DIAG_REQ_BYTECODE={0x98, 0x1, "8ae4b964ea23fe5c6640d1e57db50036ff8f121fcab9bee1a8f997920f3324e3e56ebe0a73a0358084494beaf6aa7fcf38c4475c9065b3fcb745e48ca63c80c00158b7a4789a23ac3f383a10c5f8fd40db737f5f732115d80efb9aa3faabfac130c3caad95ad7755568cf8cc5a1468dbf401363d9c072eebbf8796aaa1a5f9ad6947d878821e03abe8d78967493790cbebc03603"}, @INET_DIAG_REQ_BYTECODE={0xba, 0x1, "cd2573ed143ab01aada72b2884ed45064b66a64beb48f41fc83c9b5894d35803b095e28b0cd405fbbfda3629161754551cdcde086cc1f6744d35e4977758ae6670933d928dac0051279d7f64a9168e156ef0e4973863bb142244c4607bfef8593fae33bcb41d51edd1238e2cc413014b0f2549e8f38ebe0d3cb17550bbab01a5cae3e7f3bf29d8ddbf0cfb779914c9ceb7aa1f59bf35d0580b47b61fd653d10b6d9cc16a50ee987355e3082aa1ebe151e24efdbfaab8"}, @INET_DIAG_REQ_BYTECODE={0x102, 0x1, "9ca84c623f2025ac9dd3421514267b60c6beebb714cc3000f9f713afe69406aecab9442f47e33b20c7a84de1e1d093c0f924fe8cc8f312e083447ec7462485cd1ab97c49faca71deee8aa2369f1067e4f7e9284462e3a8fb5f1ea801ccdecaf6ef75765494d84bdc7d5a6bfd55a1197d8aba90a6dd7c82b2f8740edbc91bf83838969896a2af7f2901137993ccb82d5362654e7b39525d53ed354cb3b8416d5543712101e33c393cc479d3ed767ec25295a5b03d140415d0ab7f486ae8ff5729a2d11bfd3aaacfa608fe45f31960ef1dca8d871d7a626d58ed300b27fd25712623d6d28b27c263e8ae33a73a8f679a4fe55664a74ca0458dccea08bc1b43"}]}, 0x424}, 0x1, 0x0, 0x0, 0x20004804}, 0x801) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008108040f9becdb4cb92e0a28b137140000004abd6efb2503eaff0d000100020072bf050005001201", 0x2e}], 0x1}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="68050000", @ANYRES16=0x0, @ANYBLOB="04002cbd7000fcdbdf25010000000000000009410000004c001880000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x2000c004}, 0x40880) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r8, 0x0) listen(r8, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x0, 0xfffffffe, 0x0, @mcast1, @mcast1, 0x0, 0x0, 0x0, 0x1006}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x11, 0x40}}) listen(r2, 0x20000005) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 1.065678906s ago: executing program 3 (id=1533): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="c888f5c689404a9abb4eaa0a8ffa8b5c7dc744a909ddfb65dd52eea1b507d450d97e56e65548eb55b5cd4b99a98940e8e9dafa", 0x33) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000002c0)) getsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 996.217947ms ago: executing program 2 (id=998): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="c0000000190001000000000000000000e0000002000000000000000000000000fc01000000000000000000000000000004000000000000000a000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xc0}}, 0x0) 207.421569ms ago: executing program 0 (id=1534): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000019c0)=0x40, 0x4) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180), 0x4) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="408e11ca95731849e28f00000010000906000000000000000000800000", @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800a000100ffffffffffff0000"], 0x40}}, 0x0) (async) syz_emit_ethernet(0x72, &(0x7f00000000c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x10}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x3c, 0x6, 0x0, @mcast1, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xf, 0xc2, 0x0, 0x0, 0x8, {[@exp_fastopen={0xfe, 0x9, 0xf989, "c0406e9a97"}, @generic={0x2, 0x2}, @eol, @generic={0x0, 0xa, "00f2daa800000000"}, @sack={0x5, 0x12, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}}, 0x0) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000008000"], 0x8) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@loopback, 0x0, 0x1, 0x1, 0x2, 0x3, 0x4}, 0x20) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0xe20, 0x0, @local}, 0x1c) 115.948089ms ago: executing program 3 (id=1536): r0 = socket$inet(0x2, 0x3, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000000c0)=0x7, 0x4) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4, 0x10}}]}, 0x30}}, 0x0) 114.439541ms ago: executing program 4 (id=1537): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f00000000c0)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x3f}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x76, 0x709, 0x0, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x3}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000540)={0x2c, 0x217, '\x00', [@pad1, @generic={0x3, 0xb4, "217b550d82d9cd621660c9fd787af23500c121ea2255ef6fed00de31dc413afaa111c35dcb8c8e80b35888cb01cfbc33b2f04250625cd19b2c0d4532d3497e4d35610140ebd2b9c77d64c0400f683ff38dfb22cdc44a756b83db07991f7210c3c672ccdbf5df34a809b76e1a08088b5018845e9a90f97b19ba531d857ff16ecb1554f3198fdc2cd4b2f0d005174e8057004070d8d60d83bdc814df3c862c0ac5b993eae06dfc030a99b3019e207f56ee234e8321"}, @generic={0x8, 0x1000, "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"}]}, 0x10c8) 51.09889ms ago: executing program 0 (id=1538): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020004000000008dcc00000001000000c0", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b8004", 0xd}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120010001600020000000600180040000000050017"], 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {0x6}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x5b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@newtaction={0x9c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ctinfo={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0xd, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r8, &(0x7f00000001c0), 0xe) listen(r8, 0x0) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x40, &(0x7f0000000080)=0x400, 0x4) bind$inet(r9, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1}, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) recvmmsg(r9, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x3c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x3c}}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 0s ago: executing program 3 (id=1539): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x30044040}, 0x20004000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x124, r2, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffa4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc50}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x978}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xb, @loopback, 0x7fffffff}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x1}, 0x20000801) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r3, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r4, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000500)={0x20c, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x124, 0xc, 0x0, 0x1, [{0x4}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x291bd97c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6edb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27b027a9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2df82bd4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x240bf66f}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17f978d1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe5d3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6db2788c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78594387}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17ddfe51}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xee13}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4fe68ceb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3109499e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ba88bc2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x58ff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2bbddfd5}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeb8e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9995}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29ce14b3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65b80347}]}, {0x4}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a1dfda3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d4d5c4f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xda1c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xde3d7bf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x967dac9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39e47ff0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3061}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x440543ec}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x76b5b426}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x535eac9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x318eac43}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x78, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x15ac}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbe46}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x16d7467e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b11552a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66cf598f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ec73137}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6b37}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5827}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a91f032}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb9c22ac}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x99895df}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9d2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b0e8dd2}]}]}]}, 0x20c}}, 0x10) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000800)={[{0x2d, 'pids'}, {0x2b, 'blkio'}]}, 0xd) r6 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000840)={@ipv4={""/10, ""/2, @remote}, 0x0}, &(0x7f0000000880)=0x14) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000008c0)={{{@in=@remote, @in6=@local, 0x4e20, 0x4, 0x4e22, 0x0, 0xa, 0x0, 0xa0, 0x33, r7}, {0x2, 0xf50, 0xffffffffffffffff, 0x9, 0x9, 0xffff, 0x2af, 0xb}, {0x6, 0x5, 0x8, 0x7f}, 0x3, 0x6e6bb2, 0x2, 0x0, 0x0, 0x2}, {{@in=@broadcast, 0x4d3, 0xff}, 0x2, @in=@private=0xa010102, 0x3504, 0x4, 0x2, 0xac, 0x6, 0x1, 0x4}}, 0xe8) pipe(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000a00)=0x7) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r10, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0x94, 0x1, 0x9, 0x5, 0x0, 0x0, {0x4, 0x0, 0xa}, [@NFCTH_TUPLE={0x38, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x20, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x13}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(r11, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x20, r3, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044080}, 0x80) r12 = openat$cgroup_ro(r8, &(0x7f0000000cc0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r5, 0xc0389423, &(0x7f0000000d40)={0x1, 0x10, [0xeae, 0x967, 0xfffffffffffffffb, 0x7], &(0x7f0000000d00)=[0x0, 0x0]}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), r4) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000e00)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r9, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x48, r3, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0xe, 0x20}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x21}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r14}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x74}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1b}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000001100)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000fc0)={0xfc, r3, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1e}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "481613ba10d886ce7de07e2829c4278288629bb25ec4bae1"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "be96423996de21125c3960706c2f9352e2cb8c72d8460dea"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8fe4d9cca8aca3c2b7e747d1f74c1766a12f8408a52cb628"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fade15f31f8912207ff7887a48176113e165060d44abe851"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1c0280b4d528cc21c10725d446ed3421439cea58a466af51"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_MESH_ID={0xa}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4004000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r9, 0x28, 0x0, &(0x7f0000001140)=0x3, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x3c, 0x0, 0x22a, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xab}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x30000040) kernel console output (not intermixed with test programs): after parsing attributes in process `syz.4.14'. [ 87.626231][ T5361] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14'. [ 87.645514][ T5364] dccp_invalid_packet: P.Data Offset(172) too large [ 87.660098][ T5362] netlink: 'syz.4.14': attribute type 2 has an invalid length. [ 87.697620][ T5362] netlink: 244 bytes leftover after parsing attributes in process `syz.4.14'. [ 87.707378][ T5366] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.764139][ T5361] sit0: entered promiscuous mode [ 87.816825][ T5361] netlink: 'syz.4.14': attribute type 1 has an invalid length. [ 87.845666][ T5361] netlink: 1 bytes leftover after parsing attributes in process `syz.4.14'. [ 87.998733][ T5369] bond0: entered promiscuous mode [ 88.011348][ T5369] bond_slave_0: entered promiscuous mode [ 88.017356][ T5369] bond_slave_1: entered promiscuous mode [ 88.087412][ T5357] --map-set only usable from mangle table [ 88.149730][ T5374] warning: `syz.0.16' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 88.199943][ T5379] netlink: 256 bytes leftover after parsing attributes in process `syz.0.16'. [ 88.814543][ T5393] netlink: 'syz.1.23': attribute type 2 has an invalid length. [ 88.912588][ T5395] syz.3.24 uses obsolete (PF_INET,SOCK_PACKET) [ 89.111870][ T5405] sctp: [Deprecated]: syz.1.26 (pid 5405) Use of int in max_burst socket option deprecated. [ 89.111870][ T5405] Use struct sctp_assoc_value instead [ 89.598265][ T5419] xt_connbytes: Forcing CT accounting to be enabled [ 89.631249][ T5419] Cannot find add_set index 0 as target [ 90.005947][ T5436] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 90.025442][ T5436] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 90.116649][ T5402] Driver unsupported XDP return value 0 on prog (id 15) dev N/A, expect packet loss! [ 90.171157][ T5444] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 90.211229][ T5444] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 90.505684][ T5457] sctp: [Deprecated]: syz.3.39 (pid 5457) Use of struct sctp_assoc_value in delayed_ack socket option. [ 90.505684][ T5457] Use struct sctp_sack_info instead [ 91.011521][ T5468] __nla_validate_parse: 2 callbacks suppressed [ 91.011547][ T5468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41'. [ 91.059109][ T5468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41'. [ 91.089853][ T5482] Zero length message leads to an empty skb [ 91.265664][ T5358] IPVS: starting estimator thread 0... [ 91.277751][ T5491] netlink: 'syz.3.47': attribute type 4 has an invalid length. [ 91.390620][ T5492] IPVS: using max 19 ests per chain, 45600 per kthread [ 91.436441][ T5498] netlink: 28 bytes leftover after parsing attributes in process `syz.4.50'. [ 91.557891][ T5500] bridge0: port 3(macvlan2) entered blocking state [ 91.581002][ T5495] netlink: 117 bytes leftover after parsing attributes in process `syz.0.48'. [ 91.617462][ T5500] bridge0: port 3(macvlan2) entered disabled state [ 91.626889][ T5495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.48'. [ 91.672380][ T5500] macvlan2: entered allmulticast mode [ 91.686024][ T5500] macvlan2: entered promiscuous mode [ 92.581755][ T5551] pim6reg1: entered promiscuous mode [ 92.594375][ T5551] pim6reg1: entered allmulticast mode [ 93.376283][ T5584] netlink: 'syz.3.72': attribute type 2 has an invalid length. [ 94.821471][ T5603] netlink: 'syz.4.76': attribute type 62 has an invalid length. [ 95.451662][ T5582] netlink: 60 bytes leftover after parsing attributes in process `syz.2.69'. [ 95.463371][ T5582] netlink: 60 bytes leftover after parsing attributes in process `syz.2.69'. [ 95.641766][ T5613] SET target dimension over the limit! [ 95.751852][ T5615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.79'. [ 95.761124][ T5616] can: request_module (can-proto-3) failed. [ 95.801479][ T5622] netlink: 288 bytes leftover after parsing attributes in process `syz.1.80'. [ 95.801699][ T5615] netlink: 'syz.2.79': attribute type 10 has an invalid length. [ 95.964386][ T5615] team0: Port device dummy0 added [ 96.190950][ T5638] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.815372][ T5665] netlink: 'syz.2.94': attribute type 3 has an invalid length. [ 96.830646][ T5665] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.94'. [ 96.896365][ T5668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.96'. [ 97.056626][ T5669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.95'. [ 97.271794][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 97.278973][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 97.286997][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 97.294902][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 97.302975][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 97.310883][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 97.318836][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 97.326740][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 97.334756][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 97.342659][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 97.350912][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 97.358775][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 97.366889][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 97.374871][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 97.382896][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 97.390996][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 97.399026][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 97.406995][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 97.415002][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 97.422912][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 97.430892][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 97.438750][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 97.446728][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 97.454758][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 97.462828][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 97.470719][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 97.478663][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 97.486540][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 97.494536][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 97.502426][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 97.510465][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 97.518320][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 97.526295][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 97.534199][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 97.542221][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 97.550084][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 97.558145][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 97.566038][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 97.574027][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 97.581996][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 97.589992][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 97.597909][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 97.605913][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 97.613833][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 97.621822][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 97.629663][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 97.637645][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 97.645571][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 97.653563][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 97.661462][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 97.669381][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 97.677272][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 97.685227][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 97.693128][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 97.701110][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 97.708983][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 98.229357][ T5696] netlink: 84 bytes leftover after parsing attributes in process `syz.2.106'. [ 98.326444][ T5704] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 98.554858][ T5714] netlink: 'syz.4.109': attribute type 1 has an invalid length. [ 98.582630][ T5706] team0: Device veth1_macvtap failed to register rx_handler [ 98.611884][ T5714] netlink: 9344 bytes leftover after parsing attributes in process `syz.4.109'. [ 98.654124][ T5714] netlink: 'syz.4.109': attribute type 1 has an invalid length. [ 99.562567][ T5760] netlink: 28 bytes leftover after parsing attributes in process `syz.3.122'. [ 99.788532][ T5766] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.798002][ T5766] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.807460][ T5766] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.816399][ T5766] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.997836][ T5776] netlink: 'syz.2.124': attribute type 10 has an invalid length. [ 100.067735][ T5776] veth1_macvtap: left promiscuous mode [ 100.258174][ T5781] netlink: 24 bytes leftover after parsing attributes in process `syz.3.128'. [ 100.374322][ T5783] Bluetooth: MGMT ver 1.23 [ 100.810315][ T5797] Cannot find set identified by id 0 to match [ 100.863658][ T5802] Cannot find set identified by id 0 to match [ 101.047476][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.186230][ T5814] netlink: 40 bytes leftover after parsing attributes in process `syz.0.139'. [ 101.647384][ T5843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.147'. [ 102.166610][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 102.479071][ T5877] Bluetooth: hci3: expected 2 bytes, got 7 bytes [ 102.547649][ T5879] IPVS: sync thread started: state = MASTER, mcast_ifn = macvtap0, syncid = 1, id = 0 [ 102.581488][ T5877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.156'. [ 102.727212][ T5888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.160'. [ 102.878055][ T5896] pimreg: entered allmulticast mode [ 102.885684][ T5895] netlink: 'syz.3.162': attribute type 3 has an invalid length. [ 102.925972][ T5895] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.162'. [ 102.981129][ T5895] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 103.015857][ T5895] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 103.105601][ T5904] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 103.161215][ T5904] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 103.185211][ T5907] pim6reg: entered allmulticast mode [ 103.206743][ T5907] pim6reg: left allmulticast mode [ 103.299595][ T5910] pim6reg: entered allmulticast mode [ 103.668553][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.174'. [ 104.198606][ T5959] xt_hashlimit: size too large, truncated to 1048576 [ 104.216783][ T5959] xt_hashlimit: max too large, truncated to 1048576 [ 104.252013][ T5959] xt_hashlimit: overflow, try lower: 0/0 [ 104.291362][ T5966] netlink: 16 bytes leftover after parsing attributes in process `syz.1.181'. [ 104.366743][ T5969] x_tables: duplicate underflow at hook 1 [ 104.595074][ T5980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.185'. [ 104.779765][ T5983] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.188'. [ 104.802084][ T5986] netlink: 'syz.4.189': attribute type 10 has an invalid length. [ 104.804462][ T5990] xt_policy: neither incoming nor outgoing policy selected [ 104.810044][ T5983] openvswitch: netlink: VXLAN extension 5 out of range max 1 [ 105.591153][ T5358] IPVS: starting estimator thread 0... [ 105.700641][ T6014] IPVS: using max 15 ests per chain, 36000 per kthread [ 106.130013][ T6028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.198'. [ 106.163982][ T6027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.199'. [ 106.441578][ T6037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.203'. [ 106.465754][ T6038] netlink: 'syz.4.202': attribute type 29 has an invalid length. [ 106.531010][ T6038] netlink: 'syz.4.202': attribute type 29 has an invalid length. [ 106.576086][ T6038] netlink: 'syz.4.202': attribute type 29 has an invalid length. [ 106.639023][ T6038] netlink: 'syz.4.202': attribute type 12 has an invalid length. [ 107.181399][ T6072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.974181][ T6107] __nla_validate_parse: 3 callbacks suppressed [ 107.974206][ T6107] netlink: 158528 bytes leftover after parsing attributes in process `syz.3.219'. [ 108.400856][ T6124] pim6reg: left allmulticast mode [ 108.649840][ T6134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.228'. [ 108.681997][ T6136] tls_set_device_offload_rx: netdev not found [ 108.697629][ T6136] netlink: 'syz.2.229': attribute type 8 has an invalid length. [ 108.751566][ T6136] netlink: 'syz.2.229': attribute type 8 has an invalid length. [ 109.202641][ T6156] netlink: 248 bytes leftover after parsing attributes in process `syz.3.234'. [ 109.239762][ T6156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.289410][ T6156] batadv_slave_0: entered promiscuous mode [ 109.435638][ T6161] Bluetooth: hci3: invalid length 0, exp 2 for type 9 [ 109.475865][ T6166] netlink: 'syz.1.236': attribute type 11 has an invalid length. [ 109.479037][ T6161] netlink: 'syz.1.236': attribute type 11 has an invalid length. [ 109.535688][ T6161] netlink: 'syz.1.236': attribute type 11 has an invalid length. [ 109.578276][ T6166] netlink: 'syz.1.236': attribute type 11 has an invalid length. [ 109.681160][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.240'. [ 109.965624][ T6188] netlink: 104 bytes leftover after parsing attributes in process `syz.4.244'. [ 110.279831][ T6201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.249'. [ 110.426135][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.251'. [ 110.620477][ T6211] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 110.738508][ T6213] bond1: entered promiscuous mode [ 110.745626][ T6213] bond1: entered allmulticast mode [ 110.753447][ T6213] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.352293][ T6243] Cannot find del_set index 4 as target [ 111.385854][ T6243] Cannot find del_set index 4 as target [ 111.426633][ T6243] Cannot find del_set index 4 as target [ 111.458049][ T6243] Cannot find del_set index 4 as target [ 111.478819][ T6243] Cannot find del_set index 4 as target [ 111.498131][ T6243] Cannot find del_set index 4 as target [ 111.510972][ T6243] Cannot find del_set index 4 as target [ 111.530803][ T6243] Cannot find del_set index 4 as target [ 111.543484][ T6243] Cannot find del_set index 4 as target [ 111.557636][ T6243] Cannot find del_set index 4 as target [ 111.697777][ T6255] tipc: Enabling of bearer rejected, media not registered [ 111.752913][ T6257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.268'. [ 111.815454][ T6257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.268'. [ 112.095555][ T6272] netlink: 56 bytes leftover after parsing attributes in process `syz.1.270'. [ 112.139354][ T6282] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 112.485923][ T6297] netlink: 'syz.3.277': attribute type 11 has an invalid length. [ 112.655125][ T6301] xt_l2tp: invalid flags combination: 4 [ 112.712707][ T6313] bridge_slave_1: left allmulticast mode [ 112.718434][ T6313] bridge_slave_1: left promiscuous mode [ 112.749338][ T6313] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.785215][ T6307] IPVS: Scheduler module ip_vs_sip not found [ 113.510786][ T6346] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 113.984882][ T6383] syz.1.299: vmalloc error: size 17179873280, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 114.053495][ T6384] __nla_validate_parse: 2 callbacks suppressed [ 114.053515][ T6384] netlink: 16 bytes leftover after parsing attributes in process `syz.2.300'. [ 114.077247][ T6384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.300'. [ 114.090190][ T6383] CPU: 1 UID: 0 PID: 6383 Comm: syz.1.299 Not tainted 6.11.0-rc6-syzkaller-00219-g3e705251d998 #0 [ 114.100874][ T6383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 114.110987][ T6383] Call Trace: [ 114.114284][ T6383] [ 114.117223][ T6383] dump_stack_lvl+0x241/0x360 [ 114.121942][ T6383] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.127166][ T6383] ? __pfx__printk+0x10/0x10 [ 114.131779][ T6383] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 114.138207][ T6383] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 114.144733][ T6383] warn_alloc+0x278/0x410 [ 114.149085][ T6383] ? stack_depot_save_flags+0x29/0x830 [ 114.154561][ T6383] ? __vmalloc_node_range_noprof+0x106/0x1400 [ 114.160645][ T6383] ? __pfx_warn_alloc+0x10/0x10 [ 114.165520][ T6383] ? kasan_save_track+0x3f/0x80 [ 114.170397][ T6383] ? __kasan_kmalloc+0x98/0xb0 [ 114.175196][ T6383] ? xsk_setsockopt+0x598/0x950 [ 114.180065][ T6383] ? do_sock_setsockopt+0x3af/0x720 [ 114.185279][ T6383] ? __sys_setsockopt+0x1ae/0x250 [ 114.190322][ T6383] ? __x64_sys_setsockopt+0xb5/0xd0 [ 114.195549][ T6383] ? do_syscall_64+0xf3/0x230 [ 114.200241][ T6383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.206345][ T6383] __vmalloc_node_range_noprof+0x126/0x1400 [ 114.212379][ T6383] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 114.218727][ T6383] ? __kasan_kmalloc+0x98/0xb0 [ 114.223515][ T6383] ? xskq_create+0x54/0x170 [ 114.228039][ T6383] vmalloc_user_noprof+0x74/0x80 [ 114.232989][ T6383] ? xskq_create+0xb6/0x170 [ 114.237505][ T6383] xskq_create+0xb6/0x170 [ 114.241851][ T6383] xsk_init_queue+0xa1/0x100 [ 114.246556][ T6383] xsk_setsockopt+0x598/0x950 [ 114.251261][ T6383] ? __pfx_xsk_setsockopt+0x10/0x10 [ 114.256491][ T6383] ? __pfx_lock_acquire+0x10/0x10 [ 114.261544][ T6383] ? aa_sock_opt_perm+0x79/0x120 [ 114.266703][ T6383] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 114.272290][ T6383] ? security_socket_setsockopt+0x87/0xb0 [ 114.278047][ T6383] ? __pfx_xsk_setsockopt+0x10/0x10 [ 114.283271][ T6383] do_sock_setsockopt+0x3af/0x720 [ 114.288343][ T6383] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 114.293937][ T6383] ? __fget_files+0x29/0x470 [ 114.298563][ T6383] ? __fget_files+0x3f6/0x470 [ 114.303276][ T6383] __sys_setsockopt+0x1ae/0x250 [ 114.308159][ T6383] __x64_sys_setsockopt+0xb5/0xd0 [ 114.313301][ T6383] do_syscall_64+0xf3/0x230 [ 114.317820][ T6383] ? clear_bhb_loop+0x35/0x90 [ 114.322548][ T6383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.328514][ T6383] RIP: 0033:0x7f2b95d7def9 [ 114.332960][ T6383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.352684][ T6383] RSP: 002b:00007f2b957ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 114.361116][ T6383] RAX: ffffffffffffffda RBX: 00007f2b95f36058 RCX: 00007f2b95d7def9 [ 114.369098][ T6383] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000003 [ 114.377080][ T6383] RBP: 00007f2b95df0b76 R08: 0000000000000004 R09: 0000000000000000 [ 114.385062][ T6383] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.393044][ T6383] R13: 0000000000000000 R14: 00007f2b95f36058 R15: 00007ffce9525498 [ 114.401058][ T6383] [ 114.410114][ T6383] Mem-Info: [ 114.413550][ T6383] active_anon:3355 inactive_anon:0 isolated_anon:0 [ 114.413550][ T6383] active_file:1094 inactive_file:38199 isolated_file:0 [ 114.413550][ T6383] unevictable:768 dirty:58 writeback:0 [ 114.413550][ T6383] slab_reclaimable:8819 slab_unreclaimable:93946 [ 114.413550][ T6383] mapped:20953 shmem:1249 pagetables:712 [ 114.413550][ T6383] sec_pagetables:0 bounce:0 [ 114.413550][ T6383] kernel_misc_reclaimable:0 [ 114.413550][ T6383] free:1373137 free_pcp:653 free_cma:0 [ 114.461911][ T6383] Node 0 active_anon:13352kB inactive_anon:0kB active_file:4376kB inactive_file:152720kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:85572kB dirty:228kB writeback:0kB shmem:3460kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10636kB pagetables:2784kB sec_pagetables:0kB all_unreclaimable? no [ 114.533568][ T6387] netlink: 'syz.0.302': attribute type 21 has an invalid length. [ 114.540913][ T6383] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 114.545323][ T6387] netlink: 128 bytes leftover after parsing attributes in process `syz.0.302'. [ 114.585303][ T6383] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 114.591770][ T6381] netlink: 'syz.0.302': attribute type 1 has an invalid length. [ 114.639901][ T6387] netlink: 'syz.0.302': attribute type 5 has an invalid length. [ 114.640477][ T6381] netlink: 'syz.0.302': attribute type 1 has an invalid length. [ 114.666320][ T6387] netlink: 3 bytes leftover after parsing attributes in process `syz.0.302'. [ 114.697720][ T6383] lowmem_reserve[]: 0 2467 2468 0 0 [ 114.703396][ T6383] Node 0 DMA32 free:1523768kB boost:0kB min:34228kB low:42784kB high:51340kB reserved_highatomic:0KB active_anon:13416kB inactive_anon:0kB active_file:4376kB inactive_file:151900kB unevictable:1536kB writepending:228kB present:3129332kB managed:2554984kB mlocked:0kB bounce:0kB free_pcp:2856kB local_pcp:928kB free_cma:0kB [ 114.737945][ T6381] netlink: 'syz.0.302': attribute type 1 has an invalid length. [ 114.746627][ T6381] netlink: 'syz.0.302': attribute type 2 has an invalid length. [ 114.754538][ T6383] lowmem_reserve[]: 0 0 0 0 0 [ 114.795555][ T6383] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 114.826475][ T6381] netlink: 36 bytes leftover after parsing attributes in process `syz.0.302'. [ 114.827989][ T6383] lowmem_reserve[]: 0 0 0 0 0 [ 114.844548][ T6383] Node 1 Normal free:3953344kB boost:0kB min:55660kB low:69572kB high:83484kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 114.936014][ T6383] lowmem_reserve[]: 0 0 0 0 0 [ 114.956077][ T6383] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 114.984768][ T6383] Node 0 DMA32: 438*4kB (UM) 452*8kB (UME) 353*16kB (UME) 153*32kB (UME) 88*64kB (UME) 89*128kB (UM) 42*256kB (UME) 24*512kB (UME) 19*1024kB (UM) 10*2048kB (UM) 349*4096kB (UM) = 1525416kB [ 115.036393][ T6383] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 115.068904][ T6383] Node 1 Normal: 2*4kB (UM) 7*8kB (UM) 8*16kB (UM) 8*32kB (UM) 4*64kB (U) 2*128kB (U) 1*256kB (M) 5*512kB (UM) 3*1024kB (U) 1*2048kB (U) 963*4096kB (M) = 3953344kB [ 115.137497][ T6383] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 115.150433][ T6383] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 115.180453][ T6383] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 115.209447][ T6383] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 115.242625][ T6383] 40541 total pagecache pages [ 115.259498][ T6383] 0 pages in swap cache [ 115.270629][ T6383] Free swap = 124996kB [ 115.285260][ T6383] Total swap = 124996kB [ 115.289500][ T6383] 2097051 pages RAM [ 115.314861][ T6383] 0 pages HighMem/MovableOnly [ 115.358097][ T6383] 426967 pages reserved [ 115.376786][ T6383] 0 pages cma reserved [ 115.892358][ T6434] xt_TCPMSS: Only works on TCP SYN packets [ 115.927347][ T6435] netlink: 16 bytes leftover after parsing attributes in process `syz.0.314'. [ 116.183977][ T6446] netlink: 20 bytes leftover after parsing attributes in process `syz.1.317'. [ 116.262605][ T6446] netlink: 20 bytes leftover after parsing attributes in process `syz.1.317'. [ 116.354463][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.318'. [ 116.562177][ T6466] netlink: 'syz.1.324': attribute type 1 has an invalid length. [ 116.637831][ T6468] netlink: 'syz.2.325': attribute type 10 has an invalid length. [ 116.686904][ T6468] team0: Cannot enslave team device to itself [ 116.709913][ T6472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.326'. [ 116.886480][ T6480] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 117.017450][ T6488] netlink: 'syz.4.333': attribute type 34 has an invalid length. [ 117.112371][ T6493] netlink: 'syz.1.332': attribute type 3 has an invalid length. [ 117.153370][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807b05f800: rx timeout, send abort [ 117.164318][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807b7f4800: rx timeout, send abort [ 117.173801][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88807b7f4800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 117.663203][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807b05f800: abort rx timeout. Force session deactivation [ 117.720030][ T6520] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 117.766060][ T6527] tipc: Started in network mode [ 117.771514][ T6527] tipc: Node identity 6e000000000000000b, cluster identity 4711 [ 118.980761][ T6584] pim6reg527: entered allmulticast mode [ 119.114428][ T6598] __nla_validate_parse: 20 callbacks suppressed [ 119.114449][ T6598] netlink: 48 bytes leftover after parsing attributes in process `syz.3.370'. [ 119.309806][ T6602] gtp0: entered promiscuous mode [ 119.325198][ T6602] gtp0: entered allmulticast mode [ 119.429690][ T6606] netlink: 'syz.3.373': attribute type 11 has an invalid length. [ 119.438049][ T6610] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.374'. [ 119.452244][ T6610] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 119.480131][ T6607] macvtap0: entered promiscuous mode [ 119.510911][ T6607] macvtap0: entered allmulticast mode [ 119.517045][ T6612] netlink: 'syz.0.375': attribute type 11 has an invalid length. [ 119.524258][ T6607] veth0_macvtap: entered allmulticast mode [ 119.536622][ T6613] netlink: 'syz.0.375': attribute type 11 has an invalid length. [ 119.559394][ T6614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.374'. [ 119.742387][ T6617] Bluetooth: MGMT ver 1.23 [ 119.987340][ T6637] netlink: 16 bytes leftover after parsing attributes in process `syz.3.382'. [ 120.030071][ T6638] netlink: 16 bytes leftover after parsing attributes in process `syz.3.382'. [ 120.118024][ T6640] validate_nla: 2 callbacks suppressed [ 120.118046][ T6640] netlink: 'syz.0.384': attribute type 32 has an invalid length. [ 120.148572][ T6640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.384'. [ 120.167792][ T6640] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 120.220277][ T6643] netlink: 24 bytes leftover after parsing attributes in process `syz.2.385'. [ 120.244193][ T6643] tipc: Started in network mode [ 120.249645][ T6643] tipc: Node identity , cluster identity 4711 [ 120.256439][ T6643] tipc: Failed to set node id, please configure manually [ 120.270116][ T6643] tipc: Enabling of bearer rejected, failed to enable media [ 120.388775][ T6655] netlink: 'syz.2.389': attribute type 1 has an invalid length. [ 120.412939][ T6655] netlink: 9352 bytes leftover after parsing attributes in process `syz.2.389'. [ 120.424362][ T6655] netlink: 'syz.2.389': attribute type 1 has an invalid length. [ 120.433723][ T6655] netlink: 'syz.2.389': attribute type 2 has an invalid length. [ 120.667370][ T6668] netlink: 'syz.1.392': attribute type 1 has an invalid length. [ 120.968072][ T6692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.398'. [ 120.979852][ T6692] netlink: 'syz.1.398': attribute type 18 has an invalid length. [ 121.007221][ T6692] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.016687][ T6692] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.025557][ T6692] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.034429][ T6692] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.059098][ T6692] vxlan0: entered promiscuous mode [ 121.613820][ T6733] netlink: 56 bytes leftover after parsing attributes in process `syz.4.410'. [ 122.143181][ T6764] netlink: 'syz.1.418': attribute type 1 has an invalid length. [ 122.678753][ T6786] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.214740][ T6888] __nla_validate_parse: 9 callbacks suppressed [ 124.214762][ T6888] netlink: 596 bytes leftover after parsing attributes in process `syz.3.456'. [ 124.321438][ T6886] netlink: 19 bytes leftover after parsing attributes in process `syz.1.455'. [ 124.349917][ T6895] netlink: 20 bytes leftover after parsing attributes in process `syz.4.457'. [ 124.390666][ T6895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.457'. [ 124.428629][ T6895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.457'. [ 124.502655][ T6904] netlink: 2 bytes leftover after parsing attributes in process `syz.2.461'. [ 124.540773][ T6905] netlink: 24 bytes leftover after parsing attributes in process `syz.2.461'. [ 124.991793][ T6931] netlink: 'syz.4.466': attribute type 11 has an invalid length. [ 125.034128][ T6902] netlink: 'syz.3.460': attribute type 7 has an invalid length. [ 125.051226][ T6926] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 125.437695][ T6950] netlink: 'syz.4.473': attribute type 21 has an invalid length. [ 125.463830][ T6950] netlink: 128 bytes leftover after parsing attributes in process `syz.4.473'. [ 125.505131][ T6950] netlink: 3 bytes leftover after parsing attributes in process `syz.4.473'. [ 125.539834][ T6959] ipt_rpfilter: unknown options [ 125.577350][ T6960] netlink: 'syz.1.474': attribute type 10 has an invalid length. [ 125.795283][ T6970] x_tables: ip_tables: ah match: only valid for protocol 51 [ 126.356864][ T6960] team0: Device veth0_macvtap failed to register rx_handler [ 126.506144][ T6976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.478'. [ 126.622370][ T6987] netlink: 'syz.0.482': attribute type 3 has an invalid length. [ 126.648224][ T6987] netlink: 'syz.0.482': attribute type 3 has an invalid length. [ 127.194529][ T7012] syz.3.491 uses old SIOCAX25GETINFO [ 127.332383][ T5240] Bluetooth: hci4: command 0x0405 tx timeout [ 127.544024][ T7023] netlink: 'syz.4.495': attribute type 10 has an invalid length. [ 127.593930][ T7023] batman_adv: batadv0: Adding interface: team0 [ 127.610756][ T7023] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.669384][ T7023] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 127.833100][ T7006] geneve0: entered promiscuous mode [ 127.838408][ T7006] geneve0: entered allmulticast mode [ 127.926529][ T7036] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 128.279978][ T7050] netlink: 'syz.0.504': attribute type 1 has an invalid length. [ 128.457146][ T7050] bond2: entered promiscuous mode [ 128.688560][ T7058] lo: entered promiscuous mode [ 128.713850][ T7079] Bluetooth: MGMT ver 1.23 [ 128.738344][ T7058] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 128.875451][ T7058] bond2: (slave lo): making interface the new active one [ 128.922869][ T7058] bond2: (slave lo): Enslaving as an active interface with an up link [ 129.013566][ T7065] netlink: 'syz.1.509': attribute type 4 has an invalid length. [ 129.190737][ T7076] netlink: 'syz.1.509': attribute type 4 has an invalid length. [ 129.233365][ T7061] __nla_validate_parse: 5 callbacks suppressed [ 129.233390][ T7061] netlink: 20 bytes leftover after parsing attributes in process `syz.2.507'. [ 129.589148][ T7094] netlink: 32 bytes leftover after parsing attributes in process `syz.0.512'. [ 129.766162][ T7096] netlink: 'syz.3.514': attribute type 10 has an invalid length. [ 129.851764][ T7096] bond0: (slave wlan1): Opening slave failed [ 130.404089][ T7111] netlink: 'syz.3.518': attribute type 9 has an invalid length. [ 130.441405][ T7111] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.518'. [ 130.652856][ T7114] netlink: 'syz.3.518': attribute type 9 has an invalid length. [ 130.753895][ T7114] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.518'. [ 130.818996][ T7122] netlink: 'syz.0.520': attribute type 4 has an invalid length. [ 131.155513][ T7133] netlink: 912 bytes leftover after parsing attributes in process `syz.4.524'. [ 131.319205][ T7141] xt_CT: You must specify a L4 protocol and not use inversions on it [ 131.528730][ T7154] wg2: entered promiscuous mode [ 131.535403][ T7156] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 131.540774][ T7154] wg2: entered allmulticast mode [ 131.577300][ T7157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.532'. [ 131.702916][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.534'. [ 131.738842][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 131.751587][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.534'. [ 131.760635][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e469400: rx timeout, send abort [ 131.898368][ T7171] netlink: 78 bytes leftover after parsing attributes in process `syz.2.536'. [ 132.016831][ T7173] netlink: 28 bytes leftover after parsing attributes in process `syz.4.535'. [ 132.226739][ T7182] nbd: illegal input index 61504 [ 132.260859][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e469400: abort rx timeout. Force session deactivation [ 132.300633][ T7190] netlink: 'syz.0.539': attribute type 30 has an invalid length. [ 132.364485][ T7193] tipc: Started in network mode [ 132.369433][ T7193] tipc: Node identity , cluster identity 4711 [ 132.381654][ T7193] tipc: Failed to set node id, please configure manually [ 132.388820][ T7193] tipc: Enabling of bearer rejected, failed to enable media [ 132.622946][ T7204] netlink: 'syz.1.546': attribute type 15 has an invalid length. [ 132.643351][ T7207] netlink: zone id is out of range [ 132.671462][ T7207] netlink: 'syz.3.548': attribute type 11 has an invalid length. [ 133.115557][ T7233] netlink: 'syz.2.557': attribute type 2 has an invalid length. [ 133.245880][ T7241] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 133.247678][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.262067][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.380318][ T7246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.814190][ T7270] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 133.860769][ T7272] tipc: Started in network mode [ 133.874468][ T7272] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 133.897933][ T7272] tipc: Enabled bearer , priority 10 [ 133.929669][ T7278] netlink: 'syz.2.570': attribute type 1 has an invalid length. [ 134.175713][ T7286] tap0: tun_chr_ioctl cmd 1074025677 [ 134.192121][ T7286] tap0: linktype set to 1 [ 134.245350][ T7292] xt_time: unknown flags 0x4 [ 134.525363][ T7303] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 134.546401][ T7304] raw_sendmsg: syz.4.580 forgot to set AF_INET. Fix it! [ 134.921517][ T46] tipc: Node number set to 4269801491 [ 135.046431][ T7323] __nla_validate_parse: 12 callbacks suppressed [ 135.046456][ T7323] netlink: 32 bytes leftover after parsing attributes in process `syz.3.587'. [ 135.276869][ T7332] syz.2.589[7332] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.277044][ T7332] syz.2.589[7332] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.323371][ T7332] netlink: 'syz.2.589': attribute type 1 has an invalid length. [ 135.375112][ T7341] netlink: 'syz.4.592': attribute type 3 has an invalid length. [ 135.425017][ T7343] bond2: (slave gretap2): making interface the new active one [ 135.459114][ T7343] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 135.793612][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.596'. [ 135.809478][ T7357] IPv6: sit1: Disabled Multicast RS [ 135.873515][ T7360] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.594'. [ 135.884086][ T7360] openvswitch: netlink: Tunnel attr 0 has unexpected len 20 expected 8 [ 136.237225][ T7374] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.600'. [ 136.277849][ T7374] netlink: 'syz.2.600': attribute type 1 has an invalid length. [ 136.507533][ T7380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.603'. [ 136.561510][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.605'. [ 136.789756][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'. [ 136.809779][ T7396] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 137.254371][ T7424] openvswitch: netlink: Missing key (keys=100000040, expected=2000) [ 137.327126][ T7429] xt_bpf: check failed: parse error [ 137.393307][ T7430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.620'. [ 138.087414][ T7471] xt_connbytes: Forcing CT accounting to be enabled [ 138.095523][ T7471] xt_bpf: check failed: parse error [ 138.166731][ T7473] netlink: 'syz.1.632': attribute type 10 has an invalid length. [ 138.181879][ T7473] hsr0: entered promiscuous mode [ 138.182076][ T7475] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 138.211068][ T7473] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 138.266489][ T7473] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 138.278438][ T7473] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 138.299122][ T7473] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 138.324455][ T7477] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.487852][ T7490] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.637'. [ 138.552532][ T7493] netlink: 20 bytes leftover after parsing attributes in process `syz.0.638'. [ 138.677975][ T7493] IPVS: length: 157 != 24 [ 138.717933][ T7498] netlink: 'syz.2.640': attribute type 12 has an invalid length. [ 139.015624][ T7515] xt_bpf: check failed: parse error [ 139.317124][ T5242] block nbd0: Receive control failed (result -107) [ 139.386763][ T7534] netlink: 'syz.1.652': attribute type 4 has an invalid length. [ 139.469046][ T7536] dccp_invalid_packet: P.Data Offset(0) too small [ 139.841173][ T7560] xt_bpf: check failed: parse error [ 139.878293][ T7561] netlink: 'syz.2.661': attribute type 1 has an invalid length. [ 140.496420][ T7600] __nla_validate_parse: 6 callbacks suppressed [ 140.496443][ T7600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.673'. [ 140.584413][ T7602] xt_connbytes: Forcing CT accounting to be enabled [ 140.593150][ T7602] xt_bpf: check failed: parse error [ 140.779431][ T7615] hsr0: entered promiscuous mode [ 140.797523][ T7615] macsec1: entered allmulticast mode [ 140.808972][ T7615] hsr0: entered allmulticast mode [ 140.829765][ T7615] hsr_slave_0: entered allmulticast mode [ 140.862386][ T7615] hsr_slave_1: entered allmulticast mode [ 140.875775][ T7615] hsr0: left allmulticast mode [ 140.880926][ T7615] hsr_slave_0: left allmulticast mode [ 140.886377][ T7615] hsr_slave_1: left allmulticast mode [ 141.282449][ T7639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.684'. [ 141.357540][ T7642] macvtap0: entered promiscuous mode [ 141.378694][ T7648] xt_connbytes: Forcing CT accounting to be enabled [ 141.404630][ T7648] xt_bpf: check failed: parse error [ 141.407859][ T7642] macvtap0: left promiscuous mode [ 141.451617][ T7653] netlink: 'syz.2.685': attribute type 10 has an invalid length. [ 141.515532][ T7657] veth0_macvtap: left allmulticast mode [ 141.531564][ T7656] netlink: 16 bytes leftover after parsing attributes in process `syz.0.690'. [ 141.546170][ T7657] veth0_macvtap: left promiscuous mode [ 141.562311][ T7657] macvtap0: left promiscuous mode [ 141.569939][ T7657] macvtap0: left allmulticast mode [ 141.613943][ T7650] netlink: 64 bytes leftover after parsing attributes in process `syz.1.688'. [ 141.631356][ T7650] netlink: 64 bytes leftover after parsing attributes in process `syz.1.688'. [ 141.785625][ T7673] vxcan1: tx address claim with dlc 90 [ 141.819890][ T7672] vxcan1: tx address claim with dlc 90 [ 142.027320][ T7680] A link change request failed with some changes committed already. Interface bM may have been left with an inconsistent configuration, please check. [ 142.084774][ T7683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.698'. [ 142.101818][ T7683] netlink: 'syz.0.698': attribute type 14 has an invalid length. [ 142.110331][ T7685] ieee802154 phy0 wpan0: encryption failed: -126 [ 142.134067][ T7683] vxlan1: entered promiscuous mode [ 142.322169][ T7699] xt_bpf: check failed: parse error [ 142.492449][ T7706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.706'. [ 142.627002][ T7716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.708'. [ 142.722501][ T7713] netlink: 28 bytes leftover after parsing attributes in process `syz.4.707'. [ 142.740780][ T7713] netlink: 28 bytes leftover after parsing attributes in process `syz.4.707'. [ 143.189244][ T7746] xt_bpf: check failed: parse error [ 144.022506][ T7792] netlink: 'syz.1.727': attribute type 15 has an invalid length. [ 144.085154][ T7789] team1: Mode changed to "activebackup" [ 144.276490][ T7803] bM: left allmulticast mode [ 144.358453][ T7796] xt_CT: No such helper "pptp" [ 144.977018][ T7828] vxcan0: tx drop: invalid da for name 0x0000000002000000 [ 145.514877][ T7855] __nla_validate_parse: 9 callbacks suppressed [ 145.514901][ T7855] netlink: 24 bytes leftover after parsing attributes in process `syz.1.752'. [ 145.549339][ T7854] netlink: 228 bytes leftover after parsing attributes in process `syz.3.751'. [ 145.558552][ T7854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.751'. [ 145.576228][ T7860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.753'. [ 145.597502][ T7860] netlink: 'syz.0.753': attribute type 18 has an invalid length. [ 145.739214][ T7867] netlink: 48 bytes leftover after parsing attributes in process `syz.3.754'. [ 145.837466][ T7871] netlink: 'syz.1.756': attribute type 6 has an invalid length. [ 145.858527][ T7872] netlink: 'syz.3.757': attribute type 2 has an invalid length. [ 146.107321][ T7880] tipc: Enabling of bearer rejected, media not registered [ 146.221541][ T7889] netlink: 4900 bytes leftover after parsing attributes in process `syz.1.764'. [ 146.234034][ T7889] netlink: 6812 bytes leftover after parsing attributes in process `syz.1.764'. [ 146.854853][ T7922] netlink: 16 bytes leftover after parsing attributes in process `syz.0.774'. [ 146.865038][ T7922] netlink: 32 bytes leftover after parsing attributes in process `syz.0.774'. [ 146.883967][ T7922] gretap2: entered promiscuous mode [ 146.889516][ T7922] gretap2: entered allmulticast mode [ 146.902171][ T7922] netlink: 16 bytes leftover after parsing attributes in process `syz.0.774'. [ 147.257751][ T7941] xt_TCPMSS: Only works on TCP SYN packets [ 147.447039][ T7945] dccp_v6_rcv: dropped packet with invalid checksum [ 147.715701][ T7956] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 147.844569][ T7964] netlink: 'syz.0.788': attribute type 3 has an invalid length. [ 147.877709][ T7964] netlink: 'syz.0.788': attribute type 2 has an invalid length. [ 148.518259][ T7996] tipc: Enabled bearer , priority 10 [ 148.756223][ T8003] netlink: 'syz.0.800': attribute type 3 has an invalid length. [ 148.772208][ T8003] netlink: 'syz.0.800': attribute type 3 has an invalid length. [ 149.920694][ T8062] syzkaller0: entered promiscuous mode [ 149.929003][ T8062] syzkaller0: entered allmulticast mode [ 152.360032][ T8088] __nla_validate_parse: 9 callbacks suppressed [ 152.360053][ T8088] netlink: 16 bytes leftover after parsing attributes in process `syz.0.823'. [ 152.410115][ T8090] wg2: entered promiscuous mode [ 152.418663][ T8090] wg2: entered allmulticast mode [ 152.486329][ T8094] netlink: 68 bytes leftover after parsing attributes in process `syz.3.826'. [ 152.673169][ T8102] netlink: 'syz.1.829': attribute type 5 has an invalid length. [ 152.750024][ T8102] : entered promiscuous mode [ 152.806964][ T8111] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 152.827689][ T8111] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 152.844029][ T8111] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 152.857251][ T8111] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 152.868984][ T8111] geneve3: entered allmulticast mode [ 153.092584][ T8128] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 153.290995][ T8136] netlink: 16 bytes leftover after parsing attributes in process `syz.1.840'. [ 153.341758][ T8140] x_tables: unsorted underflow at hook 4 [ 153.351935][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.840'. [ 153.599331][ T8157] geneve3: entered promiscuous mode [ 153.621063][ T8157] geneve3: entered allmulticast mode [ 153.897046][ T8174] Bluetooth: MGMT ver 1.23 [ 153.928953][ T8176] netlink: 'syz.0.851': attribute type 1 has an invalid length. [ 154.222750][ T5240] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 154.235625][ T5240] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 154.249779][ T5240] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 154.270223][ T5240] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 154.285998][ T5240] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 154.294088][ T5240] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 154.651478][ T8210] netlink: 'syz.3.859': attribute type 4 has an invalid length. [ 154.799574][ T8216] netlink: 252 bytes leftover after parsing attributes in process `syz.1.860'. [ 154.819828][ T8216] netlink: 252 bytes leftover after parsing attributes in process `syz.1.860'. [ 154.861022][ T8222] netlink: 28 bytes leftover after parsing attributes in process `syz.0.861'. [ 154.910581][ T8222] netlink: 28 bytes leftover after parsing attributes in process `syz.0.861'. [ 155.059624][ T8191] chnl_net:caif_netlink_parms(): no params data found [ 155.544673][ T8191] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.563070][ T8191] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.573169][ T8191] bridge_slave_0: entered allmulticast mode [ 155.581058][ T8191] bridge_slave_0: entered promiscuous mode [ 155.592707][ T8191] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.600040][ T8191] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.611063][ T8191] bridge_slave_1: entered allmulticast mode [ 155.618323][ T8191] bridge_slave_1: entered promiscuous mode [ 155.719771][ T8191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.770735][ T8191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.878884][ T8191] team0: Port device team_slave_0 added [ 155.905740][ T8191] team0: Port device team_slave_1 added [ 155.985345][ T8191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.997516][ T8292] netlink: 'syz.4.878': attribute type 11 has an invalid length. [ 156.015899][ T8191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.058565][ T8191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.110744][ T8191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.117759][ T8191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.152495][ T8302] xt_connbytes: Forcing CT accounting to be enabled [ 156.159544][ T8302] xt_bpf: check failed: parse error [ 156.190554][ T8191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.360653][ T5242] Bluetooth: hci5: command tx timeout [ 156.406118][ T8310] netlink: 56 bytes leftover after parsing attributes in process `syz.0.885'. [ 156.416525][ T8310] netlink: 48 bytes leftover after parsing attributes in process `syz.0.885'. [ 156.422641][ T8191] hsr_slave_0: entered promiscuous mode [ 156.460921][ T8191] hsr_slave_1: entered promiscuous mode [ 156.482838][ T8191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.510695][ T8191] Cannot create hsr debugfs directory [ 156.519458][ T8314] team0: Device wg2 is of different type [ 156.528533][ T8317] netlink: 'syz.3.887': attribute type 1 has an invalid length. [ 156.551106][ T8313] team0: Device wg2 is of different type [ 156.557380][ T8317] netlink: 'syz.3.887': attribute type 1 has an invalid length. [ 156.573967][ T8317] netlink: 'syz.3.887': attribute type 2 has an invalid length. [ 156.857932][ T8330] xt_bpf: check failed: parse error [ 157.248785][ T8191] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.308726][ T8347] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 157.536165][ T8191] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.609007][ T8361] tipc: Enabling of bearer rejected, failed to enable media [ 157.786691][ T8191] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.879382][ T8379] __nla_validate_parse: 5 callbacks suppressed [ 157.879406][ T8379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.905'. [ 157.953291][ T8378] netlink: 72 bytes leftover after parsing attributes in process `syz.4.904'. [ 157.970222][ T8384] netlink: 'syz.3.906': attribute type 2 has an invalid length. [ 157.979754][ T8384] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.906'. [ 158.021187][ T8388] TCP: TCP_TX_DELAY enabled [ 158.041283][ T8388] netlink: 'syz.4.904': attribute type 2 has an invalid length. [ 158.071789][ T8392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.908'. [ 158.081012][ T8392] netlink: 176 bytes leftover after parsing attributes in process `syz.0.908'. [ 158.090934][ T8392] netlink: 'syz.0.908': attribute type 5 has an invalid length. [ 158.143751][ T8191] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.336391][ T8401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.911'. [ 158.430626][ T8191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 158.440660][ T5242] Bluetooth: hci5: command tx timeout [ 158.459356][ T8191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 158.483761][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.911'. [ 158.499683][ T8191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 158.521894][ T8406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.912'. [ 158.542172][ T8191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 158.568506][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.911'. [ 158.821731][ T8191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.876103][ T8191] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.893031][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.900209][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.972134][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.979525][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.998465][ T8421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.917'. [ 159.788418][ T8191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.980647][ T8191] veth0_vlan: entered promiscuous mode [ 160.024599][ T8191] veth1_vlan: entered promiscuous mode [ 160.138673][ T8191] veth0_macvtap: entered promiscuous mode [ 160.164560][ T8191] veth1_macvtap: entered promiscuous mode [ 160.225725][ T8191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.252208][ T8191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.272599][ T8191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.300638][ T8191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.320404][ T8191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.331278][ T8191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.350657][ T8191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.371203][ T8191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.402855][ T8191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.458235][ T8191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.491515][ T8191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.520838][ T5242] Bluetooth: hci5: command tx timeout [ 160.521642][ T8191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.580131][ T8191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.608913][ T8191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.621683][ T8191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.642976][ T8191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.660982][ T8191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.681545][ T8191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.706813][ T8191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.723008][ T8191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.771102][ T8498] syz_tun: entered promiscuous mode [ 160.783486][ T8191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.810469][ T8191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.819236][ T8191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.847683][ T8191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.865620][ T8498] syz_tun: left promiscuous mode [ 161.121503][ T8519] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 161.134950][ T8519] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 161.314801][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.333958][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.410613][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.439065][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.629820][ T8540] set_target_v0_checkentry: 55 callbacks suppressed [ 161.629843][ T8540] Cannot find del_set index 4 as target [ 161.787102][ T8547] syzkaller0: entered promiscuous mode [ 161.834171][ T8547] syzkaller0 (unregistering): left promiscuous mode [ 162.313505][ T8576] netlink: 'syz.0.964': attribute type 3 has an invalid length. [ 162.375134][ T8578] netlink: 'syz.2.963': attribute type 7 has an invalid length. [ 162.429780][ T8578] Êü: entered promiscuous mode [ 162.512687][ T8583] IPv6: addrconf: prefix option has invalid lifetime [ 162.600718][ T5242] Bluetooth: hci5: command tx timeout [ 163.232311][ T8616] netlink: 'syz.1.977': attribute type 1 has an invalid length. [ 163.254001][ T8616] __nla_validate_parse: 14 callbacks suppressed [ 163.254023][ T8616] netlink: 9348 bytes leftover after parsing attributes in process `syz.1.977'. [ 163.280801][ T8616] netlink: 'syz.1.977': attribute type 1 has an invalid length. [ 163.313209][ T8624] netlink: 256 bytes leftover after parsing attributes in process `syz.3.979'. [ 163.442945][ T8631] netlink: 'syz.1.980': attribute type 4 has an invalid length. [ 164.007999][ T8646] netlink: 666 bytes leftover after parsing attributes in process `syz.0.986'. [ 164.305705][ T8654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.988'. [ 164.320009][ T8654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.988'. [ 164.347736][ T8654] netlink: 'syz.3.988': attribute type 3 has an invalid length. [ 164.436816][ T8660] netlink: 16 bytes leftover after parsing attributes in process `syz.0.991'. [ 164.446179][ T8660] netlink: 32 bytes leftover after parsing attributes in process `syz.0.991'. [ 164.785601][ T8676] netlink: 228 bytes leftover after parsing attributes in process `syz.4.995'. [ 164.794900][ T8676] netlink: 'syz.4.995': attribute type 2 has an invalid length. [ 164.869528][ T8676] netlink: 'syz.4.995': attribute type 5 has an invalid length. [ 164.998060][ T5933] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.152738][ T5933] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.364608][ T5933] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.623571][ T5933] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.855982][ T5240] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 165.887168][ T5240] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 165.902696][ T5240] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 165.923460][ T5240] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 165.931595][ T5240] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 165.939184][ T5240] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 166.250835][ T5933] bridge_slave_1: left allmulticast mode [ 166.257026][ T5933] bridge_slave_1: left promiscuous mode [ 166.276795][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.368241][ T5933] bridge_slave_0: left allmulticast mode [ 166.392199][ T5933] bridge_slave_0: left promiscuous mode [ 166.398050][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.463374][ T8761] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1016'. [ 166.472826][ T8761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1016'. [ 166.482306][ T8761] netlink: 'syz.0.1016': attribute type 2 has an invalid length. [ 166.708645][ T5321] IPVS: starting estimator thread 0... [ 166.817480][ T8771] IPVS: using max 18 ests per chain, 43200 per kthread [ 166.897984][ T8781] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 167.317164][ T5933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.334013][ T5933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.362142][ T5933] bond0 (unregistering): Released all slaves [ 167.395692][ T8797] bridge0: entered allmulticast mode [ 167.446716][ T8798] netlink: 'syz.0.1023': attribute type 8 has an invalid length. [ 167.488643][ T8798] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 167.541431][ T8792] pim6reg: entered allmulticast mode [ 167.558818][ T5933] Êü: left promiscuous mode [ 167.654480][ T8803] bridge0: port 3(macvlan2) entered blocking state [ 167.680053][ T8803] bridge0: port 3(macvlan2) entered disabled state [ 167.701262][ T8803] macvlan2: entered allmulticast mode [ 167.718793][ T8803] macvlan2: entered promiscuous mode [ 167.965528][ T5242] Bluetooth: hci5: command tx timeout [ 168.032567][ T8829] netlink: 'syz.0.1033': attribute type 3 has an invalid length. [ 168.237110][ T8839] xt_bpf: check failed: parse error [ 168.258899][ T8724] chnl_net:caif_netlink_parms(): no params data found [ 168.588980][ T8858] can: request_module (can-proto-3) failed. [ 168.684246][ T5933] hsr_slave_0: left promiscuous mode [ 168.737172][ T5933] hsr_slave_1: left promiscuous mode [ 168.746573][ T5933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.760711][ T5933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.782399][ T5933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.791012][ T5933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.845721][ T5933] veth1_macvtap: left promiscuous mode [ 168.874664][ T5933] veth0_macvtap: left promiscuous mode [ 168.882108][ T5933] veth1_vlan: left promiscuous mode [ 168.887848][ T5933] veth0_vlan: left promiscuous mode [ 169.683971][ T5933] team0 (unregistering): Port device team_slave_1 removed [ 169.759333][ T8887] xt_bpf: check failed: parse error [ 169.801869][ T5933] team0 (unregistering): Port device team_slave_0 removed [ 169.941619][ T8893] xt_CT: No such helper "snmp" [ 170.044655][ T5242] Bluetooth: hci5: command tx timeout [ 170.727733][ T8889] __nla_validate_parse: 6 callbacks suppressed [ 170.727754][ T8889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1050'. [ 171.008210][ T8724] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.008405][ T8920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1056'. [ 171.026908][ T8724] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.038627][ T8724] bridge_slave_0: entered allmulticast mode [ 171.051553][ T8724] bridge_slave_0: entered promiscuous mode [ 171.060645][ T8920] netlink: 'syz.4.1056': attribute type 1 has an invalid length. [ 171.074360][ T8920] netlink: 'syz.4.1056': attribute type 1 has an invalid length. [ 171.091886][ T8724] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.118565][ T8920] netlink: 'syz.4.1056': attribute type 2 has an invalid length. [ 171.127141][ T8724] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.147115][ T8920] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1056'. [ 171.157020][ T8724] bridge_slave_1: entered allmulticast mode [ 171.165170][ T8724] bridge_slave_1: entered promiscuous mode [ 171.328040][ T8936] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 171.364011][ T8724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.417572][ T8724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.473187][ T8941] xt_bpf: check failed: parse error [ 171.546260][ T8913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1055'. [ 171.557320][ T8944] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 171.687123][ T8724] team0: Port device team_slave_0 added [ 171.732666][ T8724] team0: Port device team_slave_1 added [ 171.973594][ T8724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.997572][ T8724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.070985][ T8724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.094559][ T8724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.110586][ T8724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.121083][ T5242] Bluetooth: hci5: command tx timeout [ 172.143217][ T8724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.188320][ T8972] xt_bpf: check failed: parse error [ 172.243503][ T8974] IPVS: length: 8 != 1152 [ 172.354873][ T8970] IPv6: sit1: Disabled Multicast RS [ 172.433889][ T8724] hsr_slave_0: entered promiscuous mode [ 172.477034][ T8724] hsr_slave_1: entered promiscuous mode [ 172.482743][ T8987] af_packet: tpacket_rcv: packet too big, clamped from 212960 to 3952. macoff=96 [ 172.483348][ T8987] netlink: 'syz.1.1078': attribute type 1 has an invalid length. [ 172.516095][ T8987] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.1078'. [ 172.527276][ T8724] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.540909][ T8724] Cannot create hsr debugfs directory [ 172.672059][ T8996] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1080'. [ 172.836657][ T8995] delete_channel: no stack [ 172.893852][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.022843][ T9009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1083'. [ 173.072455][ T9015] xt_bpf: check failed: parse error [ 173.081914][ T9009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1083'. [ 173.147910][ T5242] block nbd1: Receive control failed (result -107) [ 173.188822][ T9009] nbd1: detected capacity change from 0 to 256 [ 173.424319][ T9020] netlink: 'syz.3.1087': attribute type 1 has an invalid length. [ 173.843193][ T9046] xt_bpf: check failed: parse error [ 173.849733][ T9045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1095'. [ 173.921196][ T9045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1095'. [ 174.205322][ T5242] Bluetooth: hci5: command tx timeout [ 174.283030][ T8724] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 174.341937][ T8724] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 174.391689][ T8724] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 174.431021][ T8724] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 174.819248][ T9087] xt_bpf: check failed: parse error [ 174.857856][ T8724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.989092][ T8724] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.069234][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.076507][ T5939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.118399][ T966] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.125685][ T966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.279264][ T8724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.321308][ T9105] netlink: 'syz.0.1114': attribute type 11 has an invalid length. [ 175.692017][ T9122] openvswitch: netlink: Unknown nsh attribute 0 [ 175.944235][ T8724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.252533][ T9130] xt_bpf: check failed: parse error [ 176.377356][ T8724] veth0_vlan: entered promiscuous mode [ 176.492496][ T8724] veth1_vlan: entered promiscuous mode [ 176.727106][ T8724] veth0_macvtap: entered promiscuous mode [ 176.748611][ T9141] __nla_validate_parse: 23 callbacks suppressed [ 176.748636][ T9141] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1124'. [ 176.811085][ T8724] veth1_macvtap: entered promiscuous mode [ 176.957787][ T8724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.006727][ T8724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.050473][ T8724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.104795][ T8724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.138446][ T8724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.174996][ T8724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.213960][ T8724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.242341][ T8724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.302758][ T8724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.339272][ T9149] netlink: 'syz.4.1126': attribute type 2 has an invalid length. [ 177.377670][ T8724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.431436][ T8724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.470829][ T8724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.501154][ T9156] openvswitch: netlink: Missing key (keys=44, expected=10000000) [ 177.519736][ T8724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.546178][ T9157] openvswitch: netlink: Missing key (keys=44, expected=10000000) [ 177.570458][ T8724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.613178][ T8724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.654885][ T8724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.685303][ T8724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.717888][ T8724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.765385][ T8724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.820957][ T8724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.846497][ T9156] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1128'. [ 177.878688][ T9156] netlink: 'syz.3.1128': attribute type 6 has an invalid length. [ 177.917941][ T9156] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.927178][ T9156] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.936008][ T9156] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.944854][ T9156] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.039538][ T9156] vxlan0: entered promiscuous mode [ 178.115784][ T8724] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.188334][ T8724] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.239006][ T8724] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.290549][ T8724] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.375411][ T9170] xt_bpf: check failed: parse error [ 178.520300][ T9174] netlink: 23 bytes leftover after parsing attributes in process `syz.1.1134'. [ 178.542781][ T9175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1134'. [ 178.655155][ T5933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.675520][ T5933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.768381][ T966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.791108][ T966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.836745][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1139'. [ 179.115039][ T9203] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1142'. [ 179.168916][ C1] vcan0: j1939_tp_rxtimer: 0xffff888024815c00: rx timeout, send abort [ 179.196047][ T9211] xt_bpf: check failed: parse error [ 179.308836][ T9215] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1147'. [ 179.364842][ T9215] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1147'. [ 179.375073][ T9215] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 179.568532][ T9227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1151'. [ 179.677356][ C1] vcan0: j1939_tp_rxtimer: 0xffff888024815c00: abort rx timeout. Force session deactivation [ 179.978017][ T9247] netlink: 'syz.1.1156': attribute type 15 has an invalid length. [ 180.209198][ T9259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1160'. [ 180.363892][ T9267] netlink: 'syz.0.1162': attribute type 2 has an invalid length. [ 180.461741][ T9273] vlan2: entered allmulticast mode [ 180.671608][ T9285] xt_ecn: cannot match TCP bits for non-tcp packets [ 181.125291][ T9310] netlink: 'syz.1.1177': attribute type 1 has an invalid length. [ 181.133354][ T9310] netlink: 'syz.1.1177': attribute type 2 has an invalid length. [ 181.414419][ T9324] netlink: 'syz.3.1182': attribute type 2 has an invalid length. [ 181.546622][ T9332] netlink: 'syz.3.1184': attribute type 1 has an invalid length. [ 181.576650][ T9332] bond2: entered promiscuous mode [ 181.951502][ T5937] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.192549][ T9350] __nla_validate_parse: 8 callbacks suppressed [ 182.192578][ T9350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1189'. [ 182.214854][ T9347] x_tables: unsorted entry at hook 2 [ 182.257230][ T9352] tipc: Enabling of bearer rejected, failed to enable media [ 182.598441][ T5937] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.651169][ T9364] netlink: 'syz.0.1192': attribute type 2 has an invalid length. [ 182.662793][ T9363] bond_slave_0: entered promiscuous mode [ 182.668961][ T9363] bond_slave_1: entered promiscuous mode [ 182.717692][ T9363] bond_slave_0: left promiscuous mode [ 182.723627][ T9363] bond_slave_1: left promiscuous mode [ 182.777206][ T5240] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 182.789494][ T5240] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 182.799462][ T5240] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 182.821272][ T5240] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 182.830174][ T5240] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 182.838104][ T5240] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 182.913510][ T5937] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.941479][ T9383] netlink: 'syz.3.1195': attribute type 1 has an invalid length. [ 182.959023][ T9383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1195'. [ 182.980757][ T9381] netlink: 'syz.1.1197': attribute type 1 has an invalid length. [ 183.097990][ T9381] bond2: entered promiscuous mode [ 183.135663][ T9385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1197'. [ 183.158964][ T9385] bond2: entered allmulticast mode [ 183.176156][ T9385] 8021q: adding VLAN 0 to HW filter on device bond2 [ 183.228553][ T5937] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.282151][ T9392] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1201'. [ 183.687453][ T9419] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1208'. [ 183.735253][ T5937] bridge_slave_1: left allmulticast mode [ 183.741021][ T5937] bridge_slave_1: left promiscuous mode [ 183.746835][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.802399][ T5937] bridge_slave_0: left allmulticast mode [ 183.808140][ T5937] bridge_slave_0: left promiscuous mode [ 183.824972][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.378207][ T9445] netlink: 'syz.4.1216': attribute type 8 has an invalid length. [ 184.657915][ T5937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.674684][ T5937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.687441][ T5937] bond0 (unregistering): Released all slaves [ 184.907151][ T9372] chnl_net:caif_netlink_parms(): no params data found [ 184.912551][ T9460] netlink: 'syz.1.1219': attribute type 4 has an invalid length. [ 184.929565][ T5242] Bluetooth: hci5: command tx timeout [ 185.075464][ T9469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1222'. [ 185.104263][ T9469] netlink: 'syz.0.1222': attribute type 7 has an invalid length. [ 185.112145][ T9472] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1223'. [ 185.155232][ T9469] : entered promiscuous mode [ 185.321262][ T9480] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.1225'. [ 185.339057][ T9482] atomic_op ffff88802583b998 conn xmit_atomic 0000000000000000 [ 185.348093][ T9480] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.1225'. [ 185.393251][ T9481] xt_CT: No such helper "syz0" [ 185.447614][ T9484] netlink: 'syz.4.1224': attribute type 1 has an invalid length. [ 185.474524][ T9484] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1224'. [ 185.586010][ T5937] hsr_slave_0: left promiscuous mode [ 185.611250][ T5937] hsr_slave_1: left promiscuous mode [ 185.626633][ T9498] netlink: 'syz.0.1230': attribute type 1 has an invalid length. [ 185.639434][ T5937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.670435][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.702806][ T5937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.710296][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.795528][ T5937] veth1_macvtap: left promiscuous mode [ 185.802929][ T5937] veth0_macvtap: left promiscuous mode [ 185.808717][ T5937] veth1_vlan: left promiscuous mode [ 185.814734][ T5937] veth0_vlan: left promiscuous mode [ 185.826484][ T9506] netlink: 'syz.4.1232': attribute type 30 has an invalid length. [ 186.721732][ T5937] team0 (unregistering): Port device team_slave_1 removed [ 186.776572][ T5937] team0 (unregistering): Port device team_slave_0 removed [ 187.006469][ T5242] Bluetooth: hci5: command tx timeout [ 187.388883][ T9508] tap1: tun_chr_ioctl cmd 1074025677 [ 187.395055][ T9508] tap1: linktype set to 1 [ 187.408002][ T9515] __nla_validate_parse: 5 callbacks suppressed [ 187.408025][ T9515] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1232'. [ 187.551540][ T9372] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.560619][ T9372] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.584704][ T9372] bridge_slave_0: entered allmulticast mode [ 187.599879][ T9372] bridge_slave_0: entered promiscuous mode [ 187.618318][ T9372] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.659426][ T9372] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.690670][ T9372] bridge_slave_1: entered allmulticast mode [ 187.715039][ T9372] bridge_slave_1: entered promiscuous mode [ 187.925768][ T9372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.949212][ T9372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.048274][ T9372] team0: Port device team_slave_0 added [ 188.079175][ T9372] team0: Port device team_slave_1 added [ 188.168755][ T9372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.191949][ T9372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.236387][ T9372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.270679][ T9372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.300744][ T9372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.307849][ T9555] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1241'. [ 188.338175][ T9372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.527403][ T9372] hsr_slave_0: entered promiscuous mode [ 188.552770][ T9372] hsr_slave_1: entered promiscuous mode [ 188.559189][ T9372] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.567398][ T9372] Cannot create hsr debugfs directory [ 188.826675][ T9575] team_slave_0: entered promiscuous mode [ 188.832892][ T9575] team_slave_1: entered promiscuous mode [ 188.852610][ T9580] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1249'. [ 189.001501][ T9582] xt_bpf: check failed: parse error [ 189.081486][ T5242] Bluetooth: hci5: command tx timeout [ 189.206759][ T9591] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1253'. [ 189.214030][ T9593] netlink: 'syz.0.1254': attribute type 32 has an invalid length. [ 189.226984][ T9593] netlink: 'syz.0.1254': attribute type 4 has an invalid length. [ 189.245729][ T9593] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 189.331471][ T9593] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1254'. [ 189.506072][ T9372] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 189.525213][ T9601] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1257'. [ 189.542572][ T9372] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 189.574091][ T9372] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 189.608824][ T9372] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 189.824108][ T9612] netlink: 'syz.3.1260': attribute type 1 has an invalid length. [ 189.832521][ T9595] syz.4.1255 (9595) used greatest stack depth: 16432 bytes left [ 189.859743][ T9612] netlink: 'syz.3.1260': attribute type 2 has an invalid length. [ 189.892438][ T9612] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1260'. [ 189.962465][ T9372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.009512][ T9614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1261'. [ 190.030824][ T9620] xt_bpf: check failed: parse error [ 190.094473][ T9372] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.141641][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.148901][ T5937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.194062][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.201298][ T5935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.313492][ T9629] xt_nfacct: accounting object `syz1' does not exists [ 190.401312][ T9638] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.1266'. [ 190.783272][ T9653] netdevsim netdevsim0 ÿÿÿÿ: renamed from netdevsim0 (while UP) [ 190.798806][ T9653] A link change request failed with some changes committed already. Interface ÿÿÿÿ may have been left with an inconsistent configuration, please check. [ 190.817118][ T9654] netlink: 'syz.3.1270': attribute type 1 has an invalid length. [ 190.825259][ T9654] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1270'. [ 190.974219][ T9372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.160884][ T5242] Bluetooth: hci5: command tx timeout [ 191.363854][ T9665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.425225][ T9372] veth0_vlan: entered promiscuous mode [ 191.431967][ T9665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.499268][ T9372] veth1_vlan: entered promiscuous mode [ 191.572133][ T9668] netlink: 'syz.1.1273': attribute type 96 has an invalid length. [ 191.600004][ T9372] veth0_macvtap: entered promiscuous mode [ 191.648648][ T9372] veth1_macvtap: entered promiscuous mode [ 191.718989][ T9372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.749931][ T9372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.767856][ T9372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.779076][ T9677] xt_bpf: check failed: parse error [ 191.784957][ T9372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.806158][ T9372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.826247][ T9372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.851559][ T9372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.868345][ T9372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.886143][ T9372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.929035][ T9372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.944382][ T9372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.954709][ T9372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.967450][ T9372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.977584][ T9372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.010239][ T9372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.030851][ T9372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.070085][ T9372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.090618][ T9372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.110457][ T9372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.147957][ T9372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.166108][ T9688] netlink: 'syz.3.1280': attribute type 3 has an invalid length. [ 192.209796][ T9372] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.232886][ T9372] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.260152][ T9372] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.271749][ T9372] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.367946][ T9697] openvswitch: netlink: Tunnel attr 7867 out of range max 16 [ 192.496401][ T5935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.528197][ T5935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.734747][ T5933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.774968][ T5933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.868765][ T9718] xt_bpf: check failed: parse error [ 193.094167][ T9728] __nla_validate_parse: 4 callbacks suppressed [ 193.094190][ T9728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1291'. [ 193.117847][ T9728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.126856][ T9728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.137595][ T9728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.146556][ T9728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.262713][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.270006][ T5933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.546566][ T9749] SET target dimension over the limit! [ 193.562438][ T9750] SET target dimension over the limit! [ 193.593150][ T9753] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1301'. [ 193.704218][ T9756] xt_bpf: check failed: parse error [ 193.831841][ T9760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1304'. [ 193.869997][ T9760] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1304'. [ 193.934985][ T9760] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1304'. [ 194.082954][ T9773] IPVS: Error joining to the multicast group [ 194.256468][ T9786] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1312'. [ 194.472936][ T9800] Cannot find add_set index 0 as target [ 194.688227][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.877602][ T9818] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1320'. [ 194.957043][ T9822] netlink: 'syz.3.1321': attribute type 11 has an invalid length. [ 195.010679][ T9822] netlink: 'syz.3.1321': attribute type 11 has an invalid length. [ 195.099938][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.146262][ T9822] debugfs: Directory 'netdev:' with parent 'phy3' already present! [ 195.376337][ T9836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1325'. [ 195.391784][ T9838] netlink: 'syz.0.1323': attribute type 1 has an invalid length. [ 195.418681][ T9838] netlink: 9348 bytes leftover after parsing attributes in process `syz.0.1323'. [ 195.421097][ T9834] team_slave_1: entered promiscuous mode [ 195.444714][ T9838] netlink: 'syz.0.1323': attribute type 1 has an invalid length. [ 195.457891][ T9832] netlink: 'syz.0.1323': attribute type 1 has an invalid length. [ 195.468978][ T9832] netlink: 9348 bytes leftover after parsing attributes in process `syz.0.1323'. [ 195.488078][ T9834] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. [ 195.529943][ T9832] netlink: 'syz.0.1323': attribute type 1 has an invalid length. [ 195.727996][ T9846] netlink: 'syz.0.1328': attribute type 26 has an invalid length. [ 195.897903][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.941926][ T5240] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 195.953263][ T5240] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 195.967981][ T5240] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 195.985514][ T5240] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 196.002490][ T5240] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 196.013383][ T5240] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 196.111912][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.264357][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.813221][ T52] bridge_slave_1: left allmulticast mode [ 196.834034][ T52] bridge_slave_1: left promiscuous mode [ 196.860486][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.876352][ T52] bridge_slave_0: left allmulticast mode [ 196.895094][ T52] bridge_slave_0: left promiscuous mode [ 196.905452][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.648363][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.665344][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.676935][ T52] bond0 (unregistering): Released all slaves [ 197.836366][ T9907] netlink: 'syz.3.1344': attribute type 14 has an invalid length. [ 197.960610][ T5240] Bluetooth: hci4: command 0x0405 tx timeout [ 197.997985][ T9915] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 198.068434][ T9856] chnl_net:caif_netlink_parms(): no params data found [ 198.095732][ T9920] netlink: 'syz.3.1347': attribute type 2 has an invalid length. [ 198.121064][ T5240] Bluetooth: hci5: command tx timeout [ 198.232525][ T9929] __nla_validate_parse: 2 callbacks suppressed [ 198.232547][ T9929] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1349'. [ 198.448955][ T52] hsr_slave_0: left promiscuous mode [ 198.471167][ T52] hsr_slave_1: left promiscuous mode [ 198.500734][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.507524][ T9944] xt_bpf: check failed: parse error [ 198.515424][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.527041][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.541089][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.586368][ T52] veth1_macvtap: left promiscuous mode [ 198.592351][ T52] veth0_macvtap: left promiscuous mode [ 198.598075][ T52] veth1_vlan: left promiscuous mode [ 198.604444][ T52] veth0_vlan: left promiscuous mode [ 199.287253][ T52] team0 (unregistering): Port device team_slave_1 removed [ 199.346783][ T52] team0 (unregistering): Port device team_slave_0 removed [ 199.965919][ T9946] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1355'. [ 200.031167][ T9948] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1357'. [ 200.200884][ T5240] Bluetooth: hci5: command tx timeout [ 200.223524][ T9964] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 200.286558][ T9856] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.294147][ T9856] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.313950][ T9856] bridge_slave_0: entered allmulticast mode [ 200.340027][ T9856] bridge_slave_0: entered promiscuous mode [ 200.372982][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1364'. [ 200.424786][ T9974] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 200.466894][ T9974] macvtap1: entered promiscuous mode [ 200.485315][ T9974] macvtap1: entered allmulticast mode [ 200.491214][ T9974] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 200.502611][ T9856] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.513634][ T9976] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.1365'. [ 200.528411][ T9856] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.539622][ T9856] bridge_slave_1: entered allmulticast mode [ 200.548101][ T9976] openvswitch: netlink: Actions may not be safe on all matching packets [ 200.561677][ T9856] bridge_slave_1: entered promiscuous mode [ 200.595634][ T9976] netlink: 23 bytes leftover after parsing attributes in process `syz.0.1365'. [ 200.685170][ T9976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1365'. [ 200.708320][ T9986] netlink: 'syz.0.1365': attribute type 3 has an invalid length. [ 200.740559][ T9984] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1367'. [ 200.754014][ T9856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.816115][ T9856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.978810][ T9856] team0: Port device team_slave_0 added [ 201.005628][ T9856] team0: Port device team_slave_1 added [ 201.272372][ T9856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.279392][ T9856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.313234][ T9856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.357095][ T9856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.393497][ T9856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.425916][ T9856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.532836][T10021] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1377'. [ 201.653081][T10023] sctp: [Deprecated]: syz.3.1379 (pid 10023) Use of int in maxseg socket option. [ 201.653081][T10023] Use struct sctp_assoc_value instead [ 201.671119][ T9856] hsr_slave_0: entered promiscuous mode [ 201.692030][ T9856] hsr_slave_1: entered promiscuous mode [ 201.705023][T10028] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1381'. [ 201.729993][ T9856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.758684][T10036] xt_bpf: check failed: parse error [ 201.760394][ T9856] Cannot create hsr debugfs directory [ 201.886009][ T5240] Bluetooth: hci3: command 0x0406 tx timeout [ 201.890433][ T5247] Bluetooth: hci2: command 0x0406 tx timeout [ 201.899121][ T5242] Bluetooth: hci1: command 0x0406 tx timeout [ 201.997919][T10042] netlink: 'syz.0.1385': attribute type 1 has an invalid length. [ 202.238694][T10048] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.281508][ T4626] Bluetooth: hci5: command tx timeout [ 202.299383][T10048] veth0_to_batadv: entered promiscuous mode [ 202.310862][T10048] veth0_to_batadv: entered allmulticast mode [ 202.516156][ T9856] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 202.547577][ T9856] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 202.583203][ T9856] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 202.598320][ T9856] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 202.799273][ T9856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.828298][ T9856] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.856314][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.863645][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.897241][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.904519][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.192446][T10068] xt_bpf: check failed: parse error [ 203.344316][ T9856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.363434][T10073] netlink: 'syz.1.1396': attribute type 32 has an invalid length. [ 203.444877][ T9856] veth0_vlan: entered promiscuous mode [ 203.490052][ T9856] veth1_vlan: entered promiscuous mode [ 203.596739][ T9856] veth0_macvtap: entered promiscuous mode [ 203.626717][ T9856] veth1_macvtap: entered promiscuous mode [ 203.669208][ T9856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.690282][ T9856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.715310][ T9856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.754631][ T9856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.780568][ T9856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.801140][ T9856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.868770][ T9856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.918277][ T9856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.943965][ T9856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.956723][ T9856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.981511][ T9856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.991689][ T9856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.010878][ T9856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.025539][ T9856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.039850][ T9856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.067926][ T9856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.119468][ T9856] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.138365][ T9856] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.155606][ T9856] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.171738][ T9856] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.360807][ T4626] Bluetooth: hci5: command tx timeout [ 204.422426][ T5933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.439051][ T5933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.488706][T10117] Cannot find add_set index 0 as target [ 204.513653][ T5933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.540117][ T5933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.598737][T10120] can: request_module (can-proto-0) failed. [ 204.667665][T10125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1409'. [ 205.157932][T10140] netem: change failed [ 205.558389][T10150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1418'. [ 205.642515][T10155] Cannot find add_set index 0 as target [ 205.714205][T10151] "syz.0.1418" (10151) uses obsolete ecb(arc4) skcipher [ 205.823926][T10159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.838947][T10159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.000182][T10169] team0: No ports can be present during mode change [ 206.141184][T10178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.158506][T10178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.198365][T10180] tun0: tun_chr_ioctl cmd 1074025692 [ 206.323058][T10182] netlink: 4232 bytes leftover after parsing attributes in process `syz.0.1427'. [ 206.645917][T10197] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1431'. [ 206.810302][T10202] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1433'. [ 206.820118][T10202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1433'. [ 206.836061][T10202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1433'. [ 206.863591][T10207] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1432'. [ 206.967857][T10212] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1435'. [ 207.392757][T10234] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1444'. [ 207.531271][T10241] 0·: renamed from hsr0 (while UP) [ 207.547365][T10241] 0·: left promiscuous mode [ 207.555776][T10241] 0·: entered promiscuous mode [ 207.563107][T10241] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 207.918522][ T5933] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.929753][T10290] netlink: 'syz.0.1459': attribute type 1 has an invalid length. [ 208.955262][T10290] netlink: 'syz.0.1459': attribute type 1 has an invalid length. [ 209.032921][ T5256] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 209.050846][ T5256] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 209.059434][ T5256] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 209.078524][ T5256] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 209.093890][ T5256] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 209.101589][ T5256] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 209.166648][ T5933] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.186894][T10296] vlan3: entered promiscuous mode [ 209.303142][ T5933] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.422458][ T5933] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.577548][T10314] netlink: 'syz.1.1466': attribute type 1 has an invalid length. [ 209.634727][T10318] netlink: 'syz.0.1467': attribute type 6 has an invalid length. [ 209.702085][ T5933] bridge_slave_1: left allmulticast mode [ 209.708020][ T5933] bridge_slave_1: left promiscuous mode [ 209.717644][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.731217][ T5933] bridge_slave_0: left allmulticast mode [ 209.737402][ T5933] bridge_slave_0: left promiscuous mode [ 209.743889][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.289446][ T5933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.303853][ T5933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.322866][ T5933] bond0 (unregistering): Released all slaves [ 210.337070][T10318] netlink: 'syz.0.1467': attribute type 12 has an invalid length. [ 210.605523][T10291] chnl_net:caif_netlink_parms(): no params data found [ 210.730187][T10347] netlink: 'syz.3.1474': attribute type 1 has an invalid length. [ 210.742629][T10347] netlink: 'syz.3.1474': attribute type 3 has an invalid length. [ 210.758059][T10347] __nla_validate_parse: 11 callbacks suppressed [ 210.758083][T10347] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1474'. [ 210.888860][ T5933] hsr_slave_0: left promiscuous mode [ 210.895806][ T5933] hsr_slave_1: left promiscuous mode [ 210.904232][ T5933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.912207][ T5933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.920195][ T5933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.928106][ T5933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.959237][ T5933] veth1_macvtap: left promiscuous mode [ 210.965706][ T5933] veth0_macvtap: left promiscuous mode [ 210.974641][ T5933] veth1_vlan: left promiscuous mode [ 210.980195][ T5933] veth0_vlan: left promiscuous mode [ 211.160742][ T5256] Bluetooth: hci5: command tx timeout [ 211.676512][ T5933] team0 (unregistering): Port device team_slave_1 removed [ 211.744830][ T5933] team0 (unregistering): Port device team_slave_0 removed [ 212.238351][ T4626] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 212.276880][ T4626] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 212.287521][ T4626] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 212.312191][ T4626] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 212.320213][ T4626] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 212.328194][ T4626] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 212.560457][T10357] tipc: Started in network mode [ 212.565408][T10357] tipc: Node identity a23d348913e2, cluster identity 4711 [ 212.580734][T10357] tipc: Enabled bearer , priority 0 [ 212.669705][T10366] pimreg: entered allmulticast mode [ 212.745236][T10291] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.762437][T10291] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.770238][T10291] bridge_slave_0: entered allmulticast mode [ 212.778370][T10291] bridge_slave_0: entered promiscuous mode [ 212.794956][T10291] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.804609][T10291] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.812490][T10291] bridge_slave_1: entered allmulticast mode [ 212.819657][T10291] bridge_slave_1: entered promiscuous mode [ 212.945725][T10291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.959414][T10374] netlink: 524 bytes leftover after parsing attributes in process `syz.0.1481'. [ 212.978981][T10291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.108695][T10291] team0: Port device team_slave_0 added [ 213.125796][T10291] team0: Port device team_slave_1 added [ 213.165643][T10380] netlink: 'syz.0.1484': attribute type 1 has an invalid length. [ 213.237865][T10291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.242071][T10382] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 213.245738][ T5256] Bluetooth: hci5: command tx timeout [ 213.257655][T10291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.288592][T10291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.331269][T10291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.338281][T10291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.376009][T10291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.554667][T10291] hsr_slave_0: entered promiscuous mode [ 213.569082][T10291] hsr_slave_1: entered promiscuous mode [ 213.578040][T10291] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.585928][T10291] Cannot create hsr debugfs directory [ 213.594603][T10392] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 213.701204][ T5294] tipc: Node number set to 2984195209 [ 213.707127][T10359] chnl_net:caif_netlink_parms(): no params data found [ 213.851118][T10395] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 213.888004][T10395] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 213.982374][T10359] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.989606][T10359] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.991922][T10406] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1491'. [ 214.017154][T10359] bridge_slave_0: entered allmulticast mode [ 214.032632][T10359] bridge_slave_0: entered promiscuous mode [ 214.085477][T10359] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.110540][T10359] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.126740][T10359] bridge_slave_1: entered allmulticast mode [ 214.137820][T10359] bridge_slave_1: entered promiscuous mode [ 214.178117][T10410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1492'. [ 214.197219][T10410] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1492'. [ 214.275474][T10359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.313430][T10359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.361843][ T5256] Bluetooth: hci6: command tx timeout [ 214.425773][T10359] team0: Port device team_slave_0 added [ 214.436940][T10359] team0: Port device team_slave_1 added [ 214.482205][T10359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.489225][T10359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.523278][T10359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.569865][T10359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.580308][T10424] IPVS: length: 8 != 1152 [ 214.585947][T10359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.618519][T10359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.720791][T10359] hsr_slave_0: entered promiscuous mode [ 214.728131][T10426] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 214.729527][T10359] hsr_slave_1: entered promiscuous mode [ 214.745871][T10359] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.754901][T10359] Cannot create hsr debugfs directory [ 214.773747][T10426] IPv6: Can't replace route, no match found [ 214.966553][T10291] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 214.993178][T10291] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 215.017421][T10291] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 215.037826][T10291] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 215.124401][T10359] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.173422][T10435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1500'. [ 215.189939][T10435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1500'. [ 215.266785][T10359] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.326517][ T5256] Bluetooth: hci5: command tx timeout [ 215.386919][T10359] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.408144][T10440] netlink: 'syz.3.1502': attribute type 9 has an invalid length. [ 215.423420][T10440] bond_slave_0: entered promiscuous mode [ 215.429223][T10440] bond_slave_1: entered promiscuous mode [ 215.435195][T10440] macvlan2: entered promiscuous mode [ 215.446406][T10440] bond0: entered promiscuous mode [ 215.452297][T10440] macvlan2: entered allmulticast mode [ 215.457689][T10440] bond0: entered allmulticast mode [ 215.463051][T10440] bond_slave_0: entered allmulticast mode [ 215.469399][T10440] bond_slave_1: entered allmulticast mode [ 215.472212][T10443] dccp_v4_rcv: dropped packet with invalid checksum [ 215.478115][T10440] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 215.597754][T10446] dccp_invalid_packet: pskb_may_pull failed [ 215.615198][T10359] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.717707][T10291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.747760][T10291] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.772243][ T966] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.779465][ T966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.882012][ T966] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.889432][ T966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.070730][T10359] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 216.084672][T10359] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 216.133347][T10359] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 216.176141][T10359] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 216.277298][T10465] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1509'. [ 216.286581][T10463] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1508'. [ 216.315986][T10463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1508'. [ 216.325819][T10465] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1509'. [ 216.361587][T10465] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1509'. [ 216.401744][T10465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1509'. [ 216.450819][ T5256] Bluetooth: hci6: command tx timeout [ 216.505049][T10291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.530136][T10472] xt_bpf: check failed: parse error [ 216.638026][T10359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.752898][T10359] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.818139][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.825401][ T5933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.857782][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.865049][ T5933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.883153][T10291] veth0_vlan: entered promiscuous mode [ 216.973081][T10291] veth1_vlan: entered promiscuous mode [ 217.095619][T10491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1515'. [ 217.142551][T10291] veth0_macvtap: entered promiscuous mode [ 217.169360][T10291] veth1_macvtap: entered promiscuous mode [ 217.230021][T10291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.251237][T10291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.271464][T10291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.292595][T10291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.302841][T10291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.315501][T10291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.334212][T10291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.387310][T10291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.401491][ T5256] Bluetooth: hci5: command tx timeout [ 217.430892][T10291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.441187][T10291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.451744][T10291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.461723][T10291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.472299][T10291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.490420][T10291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.517622][T10291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.543967][T10506] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1518'. [ 217.548365][T10291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.564418][T10506] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1518'. [ 217.567712][T10507] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1519'. [ 217.606553][T10291] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.626165][T10291] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.638569][T10291] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.659773][T10291] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.715776][T10359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.856106][ T5933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.875740][ T5933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.929457][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.953005][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.274673][T10359] veth0_vlan: entered promiscuous mode [ 218.313110][T10359] veth1_vlan: entered promiscuous mode [ 218.418190][T10359] veth0_macvtap: entered promiscuous mode [ 218.446843][T10359] veth1_macvtap: entered promiscuous mode [ 218.498909][T10359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.511542][T10359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.522767][ T5256] Bluetooth: hci6: command tx timeout [ 218.534979][T10359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.548953][T10359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.559259][T10359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.570520][T10359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.588808][T10359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.611546][T10359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.634172][T10359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.695831][T10359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.717812][T10359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.730633][T10359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.751304][T10359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.771576][T10359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.790498][T10359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.807630][T10359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.818752][T10359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.831507][T10359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.843165][T10359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.857571][T10359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.874089][T10359] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.883589][T10359] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.893553][T10359] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.923844][T10359] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.087495][ T966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.104579][ T966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.179439][ T5935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.193780][ T5935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.274270][T10538] x_tables: duplicate underflow at hook 1 [ 219.447879][T10544] netlink: 'syz.0.1528': attribute type 6 has an invalid length. [ 219.465777][T10544] netlink: 'syz.0.1528': attribute type 5 has an invalid length. [ 219.842391][T10560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.864084][T10560] batadv0: entered promiscuous mode [ 220.100005][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.600907][ T5256] Bluetooth: hci6: command tx timeout [ 220.999275][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.045633][T10580] netlink: 'syz.0.1538': attribute type 22 has an invalid length. [ 221.073632][T10583] bond2: Unknown bonding mode 6 for xdp xmit [ 221.080529][T10583] ------------[ cut here ]------------ [ 221.086173][T10583] WARNING: CPU: 0 PID: 10583 at drivers/net/bonding/bond_main.c:5541 bond_xdp_get_xmit_slave+0x519/0x690 [ 221.097673][T10583] Modules linked in: [ 221.101771][T10583] CPU: 0 UID: 0 PID: 10583 Comm: syz.0.1538 Not tainted 6.11.0-rc6-syzkaller-00219-g3e705251d998 #0 [ 221.112630][T10583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 221.114873][T10584] netlink: 'syz.3.1539': attribute type 1 has an invalid length. [ 221.122754][T10583] RIP: 0010:bond_xdp_get_xmit_slave+0x519/0x690 [ 221.122803][T10583] Code: be 90 13 00 00 48 c7 c2 c0 5d 96 8c e8 10 02 13 fb eb 98 e8 79 60 36 fb 4c 89 e7 48 c7 c6 c0 7c 96 8c 89 da e8 48 f7 5b 05 90 <0f> 0b 90 eb a6 e8 5d 60 36 fb 48 85 db 74 0a e8 53 60 36 fb e9 72 [ 221.122826][T10583] RSP: 0018:ffffc9000329f848 EFLAGS: 00010246 [ 221.122851][T10583] RAX: 8779dedf98526900 RBX: 0000000000000006 RCX: 8779dedf98526900 [ 221.122870][T10583] RDX: ffffc9000a45c000 RSI: 0000000000001ce6 RDI: 0000000000001ce7 [ 221.122888][T10583] RBP: ffffc9000329fc60 R08: ffffffff817401bc R09: fffffbfff1cfa0e0 [ 221.122908][T10583] R10: dffffc0000000000 R11: fffffbfff1cfa0e0 R12: ffff88807d334000 [ 221.122927][T10583] R13: ffff88807d334000 R14: ffff88807d334cc0 R15: dffffc0000000000 [ 221.122947][T10583] FS: 00007ff6edde16c0(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 221.122969][T10583] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 221.122986][T10583] CR2: 000000110c35ae85 CR3: 00000000351de000 CR4: 00000000003506f0 [ 221.123006][T10583] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 221.123027][T10583] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 221.123044][T10583] Call Trace: [ 221.246315][T10583] [ 221.249277][T10583] ? __warn+0x163/0x4e0 [ 221.253555][T10583] ? bond_xdp_get_xmit_slave+0x519/0x690 [ 221.259259][T10583] ? report_bug+0x2b3/0x500 [ 221.264007][T10583] ? bond_xdp_get_xmit_slave+0x519/0x690 [ 221.269723][T10583] ? handle_bug+0x3e/0x70 [ 221.270704][T10581] netlink: 'syz.4.1537': attribute type 10 has an invalid length. [ 221.274124][T10583] ? exc_invalid_op+0x1a/0x50 [ 221.286645][T10583] ? asm_exc_invalid_op+0x1a/0x20 [ 221.291775][T10583] ? __wake_up_klogd+0xcc/0x110 [ 221.296678][T10583] ? bond_xdp_get_xmit_slave+0x519/0x690 [ 221.302418][T10583] ? bond_xdp_get_xmit_slave+0x518/0x690 [ 221.302838][T10581] __nla_validate_parse: 5 callbacks suppressed [ 221.302857][T10581] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1537'. [ 221.308087][T10583] xdp_master_redirect+0x143/0x2d0 [ 221.308138][T10583] bpf_test_run+0x8cf/0xa90 [ 221.308169][T10583] ? bpf_test_run+0x370/0xa90 [ 221.308207][T10583] ? __pfx_bpf_test_run+0x10/0x10 [ 221.308263][T10583] ? _copy_from_user+0xa6/0xe0 [ 221.308296][T10583] ? bpf_test_init+0x15a/0x180 [ 221.308332][T10583] ? xdp_convert_md_to_buff+0x5b/0x330 [ 221.308360][T10583] bpf_prog_test_run_xdp+0x7e3/0x11b0 [ 221.308395][T10583] ? __pfx_lock_release+0x10/0x10 [ 221.308441][T10583] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 221.308467][T10583] ? __fget_files+0x29/0x470 [ 221.308514][T10583] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 221.308544][T10583] bpf_prog_test_run+0x33a/0x3b0 [ 221.308583][T10583] __sys_bpf+0x48d/0x810 [ 221.308618][T10583] ? __pfx___sys_bpf+0x10/0x10 [ 221.308665][T10583] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 221.308705][T10583] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 221.308742][T10583] ? do_syscall_64+0x100/0x230 [ 221.308777][T10583] __x64_sys_bpf+0x7c/0x90 [ 221.308806][T10583] do_syscall_64+0xf3/0x230 [ 221.308833][T10583] ? clear_bhb_loop+0x35/0x90 [ 221.308870][T10583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.308902][T10583] RIP: 0033:0x7ff6ecf7def9 [ 221.308944][T10583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.308966][T10583] RSP: 002b:00007ff6edde1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 221.308995][T10583] RAX: ffffffffffffffda RBX: 00007ff6ed136058 RCX: 00007ff6ecf7def9 [ 221.309015][T10583] RDX: 0000000000000050 RSI: 0000000020000040 RDI: 000000000000000a [ 221.309032][T10583] RBP: 00007ff6ecff0b76 R08: 0000000000000000 R09: 0000000000000000 [ 221.309049][T10583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.309071][T10583] R13: 0000000000000000 R14: 00007ff6ed136058 R15: 00007ffe6c109a18 [ 221.309111][T10583] [ 221.309124][T10583] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 221.309139][T10583] CPU: 0 UID: 0 PID: 10583 Comm: syz.0.1538 Not tainted 6.11.0-rc6-syzkaller-00219-g3e705251d998 #0 [ 221.309166][T10583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 221.309181][T10583] Call Trace: [ 221.309191][T10583] [ 221.309201][T10583] dump_stack_lvl+0x241/0x360 [ 221.309232][T10583] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.309259][T10583] ? __pfx__printk+0x10/0x10 [ 221.309293][T10583] ? vscnprintf+0x5d/0x90 [ 221.309324][T10583] panic+0x349/0x860 [ 221.309351][T10583] ? __warn+0x172/0x4e0 [ 221.309378][T10583] ? __pfx_panic+0x10/0x10 [ 221.309429][T10583] __warn+0x346/0x4e0 [ 221.309454][T10583] ? bond_xdp_get_xmit_slave+0x519/0x690 [ 221.309497][T10583] report_bug+0x2b3/0x500 [ 221.309534][T10583] ? bond_xdp_get_xmit_slave+0x519/0x690 [ 221.309578][T10583] handle_bug+0x3e/0x70 [ 221.309605][T10583] exc_invalid_op+0x1a/0x50 [ 221.309634][T10583] asm_exc_invalid_op+0x1a/0x20 [ 221.309664][T10583] RIP: 0010:bond_xdp_get_xmit_slave+0x519/0x690 [ 221.309702][T10583] Code: be 90 13 00 00 48 c7 c2 c0 5d 96 8c e8 10 02 13 fb eb 98 e8 79 60 36 fb 4c 89 e7 48 c7 c6 c0 7c 96 8c 89 da e8 48 f7 5b 05 90 <0f> 0b 90 eb a6 e8 5d 60 36 fb 48 85 db 74 0a e8 53 60 36 fb e9 72 [ 221.309723][T10583] RSP: 0018:ffffc9000329f848 EFLAGS: 00010246 [ 221.309745][T10583] RAX: 8779dedf98526900 RBX: 0000000000000006 RCX: 8779dedf98526900 [ 221.309764][T10583] RDX: ffffc9000a45c000 RSI: 0000000000001ce6 RDI: 0000000000001ce7 [ 221.309782][T10583] RBP: ffffc9000329fc60 R08: ffffffff817401bc R09: fffffbfff1cfa0e0 [ 221.309801][T10583] R10: dffffc0000000000 R11: fffffbfff1cfa0e0 R12: ffff88807d334000 [ 221.309819][T10583] R13: ffff88807d334000 R14: ffff88807d334cc0 R15: dffffc0000000000 [ 221.309847][T10583] ? __wake_up_klogd+0xcc/0x110 [ 221.309887][T10583] ? bond_xdp_get_xmit_slave+0x518/0x690 [ 221.309927][T10583] xdp_master_redirect+0x143/0x2d0 [ 221.309970][T10583] bpf_test_run+0x8cf/0xa90 [ 221.310002][T10583] ? bpf_test_run+0x370/0xa90 [ 221.310042][T10583] ? __pfx_bpf_test_run+0x10/0x10 [ 221.310108][T10583] ? _copy_from_user+0xa6/0xe0 [ 221.310140][T10583] ? bpf_test_init+0x15a/0x180 [ 221.310176][T10583] ? xdp_convert_md_to_buff+0x5b/0x330 [ 221.310206][T10583] bpf_prog_test_run_xdp+0x7e3/0x11b0 [ 221.310240][T10583] ? __pfx_lock_release+0x10/0x10 [ 221.310287][T10583] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 221.310318][T10583] ? __fget_files+0x29/0x470 [ 221.310366][T10583] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 221.310395][T10583] bpf_prog_test_run+0x33a/0x3b0 [ 221.310433][T10583] __sys_bpf+0x48d/0x810 [ 221.310467][T10583] ? __pfx___sys_bpf+0x10/0x10 [ 221.310514][T10583] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 221.310553][T10583] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 221.310590][T10583] ? do_syscall_64+0x100/0x230 [ 221.310622][T10583] __x64_sys_bpf+0x7c/0x90 [ 221.310652][T10583] do_syscall_64+0xf3/0x230 [ 221.310679][T10583] ? clear_bhb_loop+0x35/0x90 [ 221.310715][T10583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.310746][T10583] RIP: 0033:0x7ff6ecf7def9 [ 221.310767][T10583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.310788][T10583] RSP: 002b:00007ff6edde1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 221.310813][T10583] RAX: ffffffffffffffda RBX: 00007ff6ed136058 RCX: 00007ff6ecf7def9 [ 221.310832][T10583] RDX: 0000000000000050 RSI: 0000000020000040 RDI: 000000000000000a [ 221.310849][T10583] RBP: 00007ff6ecff0b76 R08: 0000000000000000 R09: 0000000000000000 [ 221.310864][T10583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.310880][T10583] R13: 0000000000000000 R14: 00007ff6ed136058 R15: 00007ffe6c109a18 [ 221.310919][T10583] [ 221.315676][T10583] Kernel Offset: disabled