last executing test programs: 1m23.958161658s ago: executing program 4 (id=365): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=@del={0x100, 0x11, 0x20, 0x70bd2d, 0x25dfdbff, {{'drbg_pr_hmac_sha1\x00'}, '\x00', '\x00', 0x2c00, 0x2000}, [{0x8, 0x1, 0x8}, {0x8, 0x1, 0x8d}, {0x8, 0x1, 0x1000}, {0x8, 0x1, 0x1}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000840}, 0x8800) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xf, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0xba}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0xc01, 0x3, 0x498, 0x0, 0x5002004a, 0x6, 0x0, 0x3, 0x400, 0x3c8, 0x3c8, 0x400, 0x3c8, 0x3, 0x0, {[{{@ip={@dev, @broadcast, 0x0, 0x0, 'hsr0\x00', 'bridge0\x00'}, 0x0, 0x2a0, 0x300, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}]}, @common=@CLUSTERIP={0x60}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@udp={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f8) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f00000002c0)=@add_del={0x2, 0x0}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0003000000700008877fbac0c1416e000030a89079f03b18000440c0511e0845013f2325f000708050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x2100, 0x0, 0x0) r6 = socket(0x40000000015, 0x805, 0x0) getsockopt(r6, 0x114, 0x271c, 0x0, &(0x7f00000000c0)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r1, 0x0, 0x24, 0xee, &(0x7f0000000f00)="8fc0e793885d79975506e8856545dfabf1096f268ac6fa44d272632712f1aa25ff777495", &(0x7f0000000f40)=""/238, 0x2a88, 0x0, 0x8e, 0xc2, &(0x7f0000001040)="5da5a987fe90c3861f98ce2ab8a8b2454eccc37042f62d3a4fc1fe3cdfbafc4bdc019de9717b2b2245d1679570c19b1e4e883ec4c71312e1efad8c05288660bd812e81140bf2e5352d86e83d1d4bad96bbb499d649cf39b903331cf01b4a56bbb72e9a536fd5d2ba0ecc4a468891db9807356722219607991044844fba3dfd6d0f9e90eaf7a52a31192fad11bfac", &(0x7f0000001100)="04f0197d87c2940855038679a54fe6130b9e24f7959f4a880dc6ddc1d01a7c9859870f3b0baf8fa5526e4f741e9b74fc7911be37bd97f7e3ac6fdd5e3fd237d53d98c6836c4b6477fa86bd7a0b214fbf029b7bf3f7c4e4d77b7e394fd01d8e77705a006c41db70f1ab19840031689c5c591b4e60dc445ba00d9a613c746d0d633cbd78f43f5da86c99fd1bf2fa12adb06cc98c20aa169e36f04d91667d53ed219f9f1803fbf5e42eacfaa49e71a1d862d13c89003f3748a7c8eedaa815e7986f852b", 0x4, 0x0, 0x9}, 0x50) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)={0x14, r8, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000084) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x48, r8, 0x100, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x67}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x21) 1m10.684400557s ago: executing program 4 (id=365): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=@del={0x100, 0x11, 0x20, 0x70bd2d, 0x25dfdbff, {{'drbg_pr_hmac_sha1\x00'}, '\x00', '\x00', 0x2c00, 0x2000}, [{0x8, 0x1, 0x8}, {0x8, 0x1, 0x8d}, {0x8, 0x1, 0x1000}, {0x8, 0x1, 0x1}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000840}, 0x8800) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xf, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0xba}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0xc01, 0x3, 0x498, 0x0, 0x5002004a, 0x6, 0x0, 0x3, 0x400, 0x3c8, 0x3c8, 0x400, 0x3c8, 0x3, 0x0, {[{{@ip={@dev, @broadcast, 0x0, 0x0, 'hsr0\x00', 'bridge0\x00'}, 0x0, 0x2a0, 0x300, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}]}, @common=@CLUSTERIP={0x60}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@udp={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f8) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f00000002c0)=@add_del={0x2, 0x0}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0003000000700008877fbac0c1416e000030a89079f03b18000440c0511e0845013f2325f000708050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x2100, 0x0, 0x0) r6 = socket(0x40000000015, 0x805, 0x0) getsockopt(r6, 0x114, 0x271c, 0x0, &(0x7f00000000c0)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r1, 0x0, 0x24, 0xee, &(0x7f0000000f00)="8fc0e793885d79975506e8856545dfabf1096f268ac6fa44d272632712f1aa25ff777495", &(0x7f0000000f40)=""/238, 0x2a88, 0x0, 0x8e, 0xc2, &(0x7f0000001040)="5da5a987fe90c3861f98ce2ab8a8b2454eccc37042f62d3a4fc1fe3cdfbafc4bdc019de9717b2b2245d1679570c19b1e4e883ec4c71312e1efad8c05288660bd812e81140bf2e5352d86e83d1d4bad96bbb499d649cf39b903331cf01b4a56bbb72e9a536fd5d2ba0ecc4a468891db9807356722219607991044844fba3dfd6d0f9e90eaf7a52a31192fad11bfac", &(0x7f0000001100)="04f0197d87c2940855038679a54fe6130b9e24f7959f4a880dc6ddc1d01a7c9859870f3b0baf8fa5526e4f741e9b74fc7911be37bd97f7e3ac6fdd5e3fd237d53d98c6836c4b6477fa86bd7a0b214fbf029b7bf3f7c4e4d77b7e394fd01d8e77705a006c41db70f1ab19840031689c5c591b4e60dc445ba00d9a613c746d0d633cbd78f43f5da86c99fd1bf2fa12adb06cc98c20aa169e36f04d91667d53ed219f9f1803fbf5e42eacfaa49e71a1d862d13c89003f3748a7c8eedaa815e7986f852b", 0x4, 0x0, 0x9}, 0x50) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)={0x14, r8, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000084) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x48, r8, 0x100, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x67}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x21) 57.53716943s ago: executing program 4 (id=365): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=@del={0x100, 0x11, 0x20, 0x70bd2d, 0x25dfdbff, {{'drbg_pr_hmac_sha1\x00'}, '\x00', '\x00', 0x2c00, 0x2000}, [{0x8, 0x1, 0x8}, {0x8, 0x1, 0x8d}, {0x8, 0x1, 0x1000}, {0x8, 0x1, 0x1}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000840}, 0x8800) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xf, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0xba}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0xc01, 0x3, 0x498, 0x0, 0x5002004a, 0x6, 0x0, 0x3, 0x400, 0x3c8, 0x3c8, 0x400, 0x3c8, 0x3, 0x0, {[{{@ip={@dev, @broadcast, 0x0, 0x0, 'hsr0\x00', 'bridge0\x00'}, 0x0, 0x2a0, 0x300, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}]}, @common=@CLUSTERIP={0x60}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@udp={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f8) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f00000002c0)=@add_del={0x2, 0x0}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0003000000700008877fbac0c1416e000030a89079f03b18000440c0511e0845013f2325f000708050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x2100, 0x0, 0x0) r6 = socket(0x40000000015, 0x805, 0x0) getsockopt(r6, 0x114, 0x271c, 0x0, &(0x7f00000000c0)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r1, 0x0, 0x24, 0xee, &(0x7f0000000f00)="8fc0e793885d79975506e8856545dfabf1096f268ac6fa44d272632712f1aa25ff777495", &(0x7f0000000f40)=""/238, 0x2a88, 0x0, 0x8e, 0xc2, &(0x7f0000001040)="5da5a987fe90c3861f98ce2ab8a8b2454eccc37042f62d3a4fc1fe3cdfbafc4bdc019de9717b2b2245d1679570c19b1e4e883ec4c71312e1efad8c05288660bd812e81140bf2e5352d86e83d1d4bad96bbb499d649cf39b903331cf01b4a56bbb72e9a536fd5d2ba0ecc4a468891db9807356722219607991044844fba3dfd6d0f9e90eaf7a52a31192fad11bfac", &(0x7f0000001100)="04f0197d87c2940855038679a54fe6130b9e24f7959f4a880dc6ddc1d01a7c9859870f3b0baf8fa5526e4f741e9b74fc7911be37bd97f7e3ac6fdd5e3fd237d53d98c6836c4b6477fa86bd7a0b214fbf029b7bf3f7c4e4d77b7e394fd01d8e77705a006c41db70f1ab19840031689c5c591b4e60dc445ba00d9a613c746d0d633cbd78f43f5da86c99fd1bf2fa12adb06cc98c20aa169e36f04d91667d53ed219f9f1803fbf5e42eacfaa49e71a1d862d13c89003f3748a7c8eedaa815e7986f852b", 0x4, 0x0, 0x9}, 0x50) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)={0x14, r8, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000084) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x48, r8, 0x100, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x67}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x21) 44.200589674s ago: executing program 4 (id=365): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=@del={0x100, 0x11, 0x20, 0x70bd2d, 0x25dfdbff, {{'drbg_pr_hmac_sha1\x00'}, '\x00', '\x00', 0x2c00, 0x2000}, [{0x8, 0x1, 0x8}, {0x8, 0x1, 0x8d}, {0x8, 0x1, 0x1000}, {0x8, 0x1, 0x1}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000840}, 0x8800) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xf, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0xba}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0xc01, 0x3, 0x498, 0x0, 0x5002004a, 0x6, 0x0, 0x3, 0x400, 0x3c8, 0x3c8, 0x400, 0x3c8, 0x3, 0x0, {[{{@ip={@dev, @broadcast, 0x0, 0x0, 'hsr0\x00', 'bridge0\x00'}, 0x0, 0x2a0, 0x300, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}]}, @common=@CLUSTERIP={0x60}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@udp={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f8) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f00000002c0)=@add_del={0x2, 0x0}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0003000000700008877fbac0c1416e000030a89079f03b18000440c0511e0845013f2325f000708050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x2100, 0x0, 0x0) r6 = socket(0x40000000015, 0x805, 0x0) getsockopt(r6, 0x114, 0x271c, 0x0, &(0x7f00000000c0)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r1, 0x0, 0x24, 0xee, &(0x7f0000000f00)="8fc0e793885d79975506e8856545dfabf1096f268ac6fa44d272632712f1aa25ff777495", &(0x7f0000000f40)=""/238, 0x2a88, 0x0, 0x8e, 0xc2, &(0x7f0000001040)="5da5a987fe90c3861f98ce2ab8a8b2454eccc37042f62d3a4fc1fe3cdfbafc4bdc019de9717b2b2245d1679570c19b1e4e883ec4c71312e1efad8c05288660bd812e81140bf2e5352d86e83d1d4bad96bbb499d649cf39b903331cf01b4a56bbb72e9a536fd5d2ba0ecc4a468891db9807356722219607991044844fba3dfd6d0f9e90eaf7a52a31192fad11bfac", &(0x7f0000001100)="04f0197d87c2940855038679a54fe6130b9e24f7959f4a880dc6ddc1d01a7c9859870f3b0baf8fa5526e4f741e9b74fc7911be37bd97f7e3ac6fdd5e3fd237d53d98c6836c4b6477fa86bd7a0b214fbf029b7bf3f7c4e4d77b7e394fd01d8e77705a006c41db70f1ab19840031689c5c591b4e60dc445ba00d9a613c746d0d633cbd78f43f5da86c99fd1bf2fa12adb06cc98c20aa169e36f04d91667d53ed219f9f1803fbf5e42eacfaa49e71a1d862d13c89003f3748a7c8eedaa815e7986f852b", 0x4, 0x0, 0x9}, 0x50) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)={0x14, r8, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000084) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x48, r8, 0x100, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x67}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x21) 33.142261004s ago: executing program 0 (id=968): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c0002800800fa400000000c08000140000000020800014000000030080002"], 0x122}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000180)=@ethtool_cmd={0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4}}) 32.981712635s ago: executing program 0 (id=970): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ipvlan1\x00'}) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x17) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x5, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r3, 0x0, 0x2, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000003b000900000000000000000001000000"], 0x2c}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040), 0x4) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 32.802077463s ago: executing program 0 (id=973): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000171102a00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)={@cgroup, r2, 0x2, 0x2, 0x0, @link_id}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) readv(r5, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/101, 0x65}, {&(0x7f0000000780)=""/223, 0xdf}, {0x0}, {&(0x7f00000009c0)=""/204, 0xcc}, {&(0x7f0000000ac0)=""/232, 0xe8}, {&(0x7f0000000bc0)=""/216, 0xd8}, {&(0x7f0000000cc0)=""/216, 0xd8}], 0x7) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) connect$inet6(r4, &(0x7f00000003c0)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x420004}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x89}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x0, 0x1}, 0xfffffffffffffe6c) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890c, &(0x7f0000000000)) r7 = socket(0x2, 0x80805, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) sendmmsg$inet(r7, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000780)="dd", 0x1}], 0x1}}], 0x2, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) 32.572653108s ago: executing program 0 (id=976): r0 = socket$tipc(0x1e, 0x7, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000005c0)={0x40, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000c40)={0x40, 0x0, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="28160000", @ANYRES16=0x0, @ANYBLOB="000227bd7000fddbdf2508000000380001801400020076657468315f746f5f6261746164760008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000000800030003000000fc00028004000100e1000400a4e79d70cde407fc514210adee253ddc85c5ac8e6c6cfab46d55666fbca1301ecc1d491aafa7c4f1110ae0d89e4e363a551b194f2fbe83c83ba065ee010e3720e9a7c62b08617ec13836e769e3b516b6b4e50be7fd419293be31edcb872636d3d8d2e40c61763c62f43e2a2cefea01129ba104c84081df549a5879707fbf341cd52b7bb285826f8f0c8952973f2d3cc8647507d1f26286a31a73d46467a580126b3702c9f0feaab2313c2b8edb93c46b1c7d6b970e26ca617a03ecc0e181565a7ce4ffb976a3e402b1d9b961c38cd0fe531443732b404acc15fb1cbfcb0000000400010008000200090000000400010040010280890004001790ec5d3291f6b7d138a1d7da44b2d4eb10cd81c64fcca355b7c8f87c4ecd3e7966f80476879c3eaafcd057fbba225b5c2851fa6641236f12ddb0e3f18f46a80c9cd55f3719bbf370a742dc5b57b90f532e0617899e236255264fc45382e492a480fc71cfdebd010c934e7a27f9c05eb08d7aebb2ae020d760c583d68684b23d0a52da06900000070000380280001800400030005000200000000000400030008000100090000000400030005000200000000004400018008000100f200000005000200000000000700020052230000040003000e000200f23a5d4a5e292e405a000000040003000500020000000000070002002b2b000035000500ad5a34d0c0118657e5ff663eab59c50e01f007d5e3cda147b7d1adaf14110dc636db87b221f49fee6c0866d6aa64c6fc7f0000000800020006000000f0000280080002000000008008000200d5000000810005008ebc4a9b5c77ba8be22c11633f1e2b65d365f4c8b6fba807b47db7e74bee9fa3b3a48f96ed55226ec4726524c834f02c6e5f508cb6cfd8cf4f5585f07a083e2727caffc53eb274b6ccf50d6bb6e6b2f1c83ad586d346af3e144a2d7619e04062d879ac708e91b527e1111c0634f3da20f1f2c7c79d986e73e371b991880000005800038020000180080001000000000005000200000000000400030005000200000000003400018009000200e123272e000000000400030008000100040000000400030004000300050002000000000008000100020000003800018008000100", @ANYRES32=0x0, @ANYBLOB="140002006970363000ac9c5db751610000000000", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x1628}, 0x1, 0x0, 0x0, 0x1}, 0x4) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="70010000", @ANYRES16=r2, @ANYBLOB="010000000000000000001e0000001c002f800c00020000000000000000000c000380080001000100000008000300", @ANYRES32=r5, @ANYBLOB="38012f8008000100000100000c0002000203aaaaaaaaaaaa94"], 0x170}}, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r6, &(0x7f0000000000), 0x10) close(r6) sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r7 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r7, 0x1, 0x3e, &(0x7f00000003c0), &(0x7f0000000140)=0x32) close(r1) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) 32.166484659s ago: executing program 0 (id=982): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f0000000080)=0x3, 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002340)) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071121e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@can_delroute={0x14c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_CS_CRC8={0x11e, 0x6, {0x47, 0x0, 0x0, 0x0, 0x0, "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", 0x0, "56e89243dad36ae9dc7283425f986bbfe5349c4e"}}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "80deae486c1a0221"}, 0x6}}]}, 0x14c}}, 0x0) setsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000200), &(0x7f0000000240)=0x4) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c80)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x27, 0x2, {{0x0, 0x0, 0x0, 0x2}}}}]}, 0x78}}, 0x0) 28.979026788s ago: executing program 4 (id=365): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=@del={0x100, 0x11, 0x20, 0x70bd2d, 0x25dfdbff, {{'drbg_pr_hmac_sha1\x00'}, '\x00', '\x00', 0x2c00, 0x2000}, [{0x8, 0x1, 0x8}, {0x8, 0x1, 0x8d}, {0x8, 0x1, 0x1000}, {0x8, 0x1, 0x1}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000840}, 0x8800) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xf, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0xba}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0xc01, 0x3, 0x498, 0x0, 0x5002004a, 0x6, 0x0, 0x3, 0x400, 0x3c8, 0x3c8, 0x400, 0x3c8, 0x3, 0x0, {[{{@ip={@dev, @broadcast, 0x0, 0x0, 'hsr0\x00', 'bridge0\x00'}, 0x0, 0x2a0, 0x300, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}]}, @common=@CLUSTERIP={0x60}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@udp={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f8) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f00000002c0)=@add_del={0x2, 0x0}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0003000000700008877fbac0c1416e000030a89079f03b18000440c0511e0845013f2325f000708050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x2100, 0x0, 0x0) r6 = socket(0x40000000015, 0x805, 0x0) getsockopt(r6, 0x114, 0x271c, 0x0, &(0x7f00000000c0)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r1, 0x0, 0x24, 0xee, &(0x7f0000000f00)="8fc0e793885d79975506e8856545dfabf1096f268ac6fa44d272632712f1aa25ff777495", &(0x7f0000000f40)=""/238, 0x2a88, 0x0, 0x8e, 0xc2, &(0x7f0000001040)="5da5a987fe90c3861f98ce2ab8a8b2454eccc37042f62d3a4fc1fe3cdfbafc4bdc019de9717b2b2245d1679570c19b1e4e883ec4c71312e1efad8c05288660bd812e81140bf2e5352d86e83d1d4bad96bbb499d649cf39b903331cf01b4a56bbb72e9a536fd5d2ba0ecc4a468891db9807356722219607991044844fba3dfd6d0f9e90eaf7a52a31192fad11bfac", &(0x7f0000001100)="04f0197d87c2940855038679a54fe6130b9e24f7959f4a880dc6ddc1d01a7c9859870f3b0baf8fa5526e4f741e9b74fc7911be37bd97f7e3ac6fdd5e3fd237d53d98c6836c4b6477fa86bd7a0b214fbf029b7bf3f7c4e4d77b7e394fd01d8e77705a006c41db70f1ab19840031689c5c591b4e60dc445ba00d9a613c746d0d633cbd78f43f5da86c99fd1bf2fa12adb06cc98c20aa169e36f04d91667d53ed219f9f1803fbf5e42eacfaa49e71a1d862d13c89003f3748a7c8eedaa815e7986f852b", 0x4, 0x0, 0x9}, 0x50) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)={0x14, r8, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000084) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x48, r8, 0x100, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x67}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x21) 16.372689724s ago: executing program 0 (id=982): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f0000000080)=0x3, 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002340)) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071121e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@can_delroute={0x14c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_CS_CRC8={0x11e, 0x6, {0x47, 0x0, 0x0, 0x0, 0x0, "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", 0x0, "56e89243dad36ae9dc7283425f986bbfe5349c4e"}}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "80deae486c1a0221"}, 0x6}}]}, 0x14c}}, 0x0) setsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000200), &(0x7f0000000240)=0x4) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c80)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x27, 0x2, {{0x0, 0x0, 0x0, 0x2}}}}]}, 0x78}}, 0x0) 13.260140284s ago: executing program 4 (id=365): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=@del={0x100, 0x11, 0x20, 0x70bd2d, 0x25dfdbff, {{'drbg_pr_hmac_sha1\x00'}, '\x00', '\x00', 0x2c00, 0x2000}, [{0x8, 0x1, 0x8}, {0x8, 0x1, 0x8d}, {0x8, 0x1, 0x1000}, {0x8, 0x1, 0x1}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000840}, 0x8800) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xf, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0xba}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0xc01, 0x3, 0x498, 0x0, 0x5002004a, 0x6, 0x0, 0x3, 0x400, 0x3c8, 0x3c8, 0x400, 0x3c8, 0x3, 0x0, {[{{@ip={@dev, @broadcast, 0x0, 0x0, 'hsr0\x00', 'bridge0\x00'}, 0x0, 0x2a0, 0x300, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}]}, @common=@CLUSTERIP={0x60}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@udp={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f8) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f00000002c0)=@add_del={0x2, 0x0}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0003000000700008877fbac0c1416e000030a89079f03b18000440c0511e0845013f2325f000708050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x2100, 0x0, 0x0) r6 = socket(0x40000000015, 0x805, 0x0) getsockopt(r6, 0x114, 0x271c, 0x0, &(0x7f00000000c0)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r1, 0x0, 0x24, 0xee, &(0x7f0000000f00)="8fc0e793885d79975506e8856545dfabf1096f268ac6fa44d272632712f1aa25ff777495", &(0x7f0000000f40)=""/238, 0x2a88, 0x0, 0x8e, 0xc2, &(0x7f0000001040)="5da5a987fe90c3861f98ce2ab8a8b2454eccc37042f62d3a4fc1fe3cdfbafc4bdc019de9717b2b2245d1679570c19b1e4e883ec4c71312e1efad8c05288660bd812e81140bf2e5352d86e83d1d4bad96bbb499d649cf39b903331cf01b4a56bbb72e9a536fd5d2ba0ecc4a468891db9807356722219607991044844fba3dfd6d0f9e90eaf7a52a31192fad11bfac", &(0x7f0000001100)="04f0197d87c2940855038679a54fe6130b9e24f7959f4a880dc6ddc1d01a7c9859870f3b0baf8fa5526e4f741e9b74fc7911be37bd97f7e3ac6fdd5e3fd237d53d98c6836c4b6477fa86bd7a0b214fbf029b7bf3f7c4e4d77b7e394fd01d8e77705a006c41db70f1ab19840031689c5c591b4e60dc445ba00d9a613c746d0d633cbd78f43f5da86c99fd1bf2fa12adb06cc98c20aa169e36f04d91667d53ed219f9f1803fbf5e42eacfaa49e71a1d862d13c89003f3748a7c8eedaa815e7986f852b", 0x4, 0x0, 0x9}, 0x50) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)={0x14, r8, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000084) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x48, r8, 0x100, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x67}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x21) 3.257354888s ago: executing program 3 (id=1152): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014"], 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x1100, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0xffffffffffffffa6, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x1100, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0xffffffffffffffa6, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}}, 0x0) 3.098750258s ago: executing program 3 (id=1154): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0xae, &(0x7f0000000140)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x26, 0x4, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0x2, 0x0, @loopback, @multicast1, {[@end, @ssrr={0x89, 0x3, 0xf3}, @rr={0x7, 0x23, 0x21, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @broadcast, @loopback, @remote, @rand_addr=0x64010101, @loopback, @multicast2]}, @timestamp={0x44, 0x28, 0x32, 0x0, 0x4, [0x1, 0x1ff, 0x4, 0x3ff, 0x6, 0x3, 0x34, 0x2, 0x8]}, @end, @ssrr={0x89, 0x7, 0x29, [@empty]}, @timestamp_addr={0x44, 0x2c, 0xec, 0x1, 0xe, [{@private=0xa010102, 0x5}, {@empty, 0x8000}, {@multicast1, 0x6}, {@multicast1, 0x9}, {@remote, 0x7}]}]}}, {0x0, 0x0, 0x0, @multicast1}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 2.997407516s ago: executing program 2 (id=1155): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x490000, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000080)=0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000006000000000000000000850000000f000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{r3}, &(0x7f0000000700), &(0x7f0000000740)='%-5lx \x00'}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"/4208], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002a00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b13ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216eca6fd0f8cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c7a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d064d5d15c2015d633e2d3a50acaacac5ae1921cea3d5f78438868aa97824bd2e2eb389deb09a466b423bb44eecc896878d7b58b72ea247508841fa99fc3f4f3dba117"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r5, r6, 0x2f, 0x2000, 0x4}, 0x20) r7 = socket$kcm(0x2, 0xa, 0x2) r8 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000540)={@val={0x6}, @void, @eth={@link_local, @random="d26b98d19dd8", @val, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0x2, 0x24, 0x67, 0x0, 0x0, 0x21, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "20e856"}}}}}}}, 0x3e) 2.868834841s ago: executing program 3 (id=1157): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x25dfdbff, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) (async) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x400000000000003, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}, @sadb_sa={0x2, 0x1, 0x0, 0x13, 0x0, 0x2, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0) 2.593164617s ago: executing program 3 (id=1159): ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x4, 0x3, 0x9, 0x1, 0x3, 0xfffffffffffffffe}, {0xfff, 0x0, 0x8, 0x4, 0x6, 0xffffffffffffffff}], ['\x00', '\x00', '\x00']}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r2, &(0x7f00000001c0)="e8af1373077bae0376cdd8016a323f6f80ea91f80e4b3ef5799b12ea009349381dffa3d8f9e464d55fc6", 0x2a, 0x91, &(0x7f0000000200)={0xa, 0x4e22, 0x80000001, @private1, 0xffffffc0}, 0x1c) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) socketpair(0x9, 0x800, 0x7, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x7c, r3, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10a}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '&#^!*'}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}]}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1a9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r5) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f00000005c0)={'gretap0\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x10, 0x80, 0x7, 0x8, {{0x32, 0x4, 0x0, 0x2c, 0xc8, 0x65, 0x0, 0x8, 0x2f, 0x0, @remote, @remote, {[@end, @timestamp_prespec={0x44, 0x34, 0xf1, 0x3, 0x4, [{@local, 0x9}, {@private=0xa010100, 0xe5}, {@private=0xa010102, 0x2}, {@loopback, 0x80000000}, {@multicast2, 0x3}, {@local, 0x4}]}, @lsrr={0x83, 0xf, 0x5d, [@remote, @loopback, @loopback]}, @timestamp={0x44, 0x20, 0x79, 0x0, 0x3, [0xf97, 0x3, 0x7, 0x5, 0x2, 0x9, 0x0]}, @noop, @rr={0x7, 0x2b, 0x3b, [@dev={0xac, 0x14, 0x14, 0x32}, @empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @remote, @loopback, @loopback, @multicast1, @multicast2]}, @lsrr={0x83, 0x23, 0x26, [@rand_addr=0x64010100, @multicast1, @loopback, @private=0xa010101, @multicast2, @empty, @multicast2, @rand_addr=0x64010100]}]}}}}}) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000600)={@rand_addr, @broadcast, 0x0}, &(0x7f0000000640)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000006c0)={'gre0\x00', &(0x7f0000000680)={'tunl0\x00', 0x0, 0x1, 0x7800, 0x3, 0xa2, {{0x6, 0x4, 0x2, 0x16, 0x18, 0x64, 0x0, 0x1, 0x2f, 0x0, @loopback, @remote, {[@ra={0x94, 0x4}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000000800)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xa0, r7, 0x800, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000043}, 0x22004884) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000b40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000880)={0x268, r7, 0x800, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0xa0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x9c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '-+)$\'!-!@\'.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'tunl0\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbce5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'macsec0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff7fff}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'gretap0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x24, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x164, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xbc, 0x4, "04c4676418807fd7e2688cfbdc7ecdb3362f04051c83dadfbfc2a55d909235760e01bf53457fff6fb6a19a6bd4ce6ab136b5ad5cd84172d5f0e41d4f07b2e701eea7a5e0e9bcb4b3cbdae0e1d2b7b46e25255a22724af8c49eb78c9c4998eee33c6009479dec87fc85d70f1b815b75dcad18b2295279d8d0de04214b205306fa2086d3d430238b1c5c7e50d9619fe93a9896a4efcc548718da14442f82c54ad8199d5c3e7e24170ad624e796179c834cc78b9461d9b5870b"}, @ETHTOOL_A_BITSET_MASK={0x49, 0x5, "51d153b62a2c749eb0420bb6c707aee231a4083b62b38c8d96e602c475e64a29d3d661f61eccfde23d066fcc6996b0c5e1d4a449ea82568696c871498dc9db3f186893f012"}, @ETHTOOL_A_BITSET_MASK={0x3d, 0x5, "df098880f2aa1945254dc913e0a0ba572f15f98dc7dbc75482dbdef1572bc8efd3acb2735f6925185914318a8a564b90f3b1cee0502cc1fccc"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40008c0}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000b80)={'macsec0\x00', 0x0}) r12 = syz_genetlink_get_family_id$fou(&(0x7f0000000c00), r4) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x2c, r12, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r13, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x800) r14 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r14, &(0x7f0000000e40)={0xa, 0x0, 0x9, @empty, 0xfff}, 0x20) shutdown(r4, 0x0) socket$inet(0x2, 0x5, 0x2a) r15 = socket$pppl2tp(0x18, 0x1, 0x1) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x6, 0x1f, &(0x7f0000000e80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x424d}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f0000000f80)='syzkaller\x00', 0x1, 0xb2, &(0x7f0000000fc0)=""/178, 0x41000, 0x30, '\x00', r11, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000001080)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000010c0)={0x2, 0x625d, 0xfffffff7, 0x4}, 0x10, 0xffffffffffffffff, r6, 0x3, 0x0, &(0x7f0000001100)=[{0x3, 0x5, 0xf, 0x6}, {0x5, 0x4, 0x7, 0xa}, {0x3, 0x2, 0xa, 0x7}], 0x10, 0x4, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r15, 0x1, 0x32, &(0x7f0000001200)=r16, 0x4) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r5, 0x111, 0x2, 0x0, 0x4) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x34, r13, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x60000001}, 0x24000801) 2.585190025s ago: executing program 2 (id=1160): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$can_raw(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/210, 0xd2}], 0x1, &(0x7f0000000200)=""/153, 0x99}, 0x3) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x20000001, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 2.238370702s ago: executing program 3 (id=1164): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x45, &(0x7f0000000000), 0x4) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 64) r2 = socket$rxrpc(0x21, 0x2, 0x2) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='cdg\x00', 0x4) (async) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfffffd9d) (async, rerun: 64) sendfile(r3, r4, 0x0, 0x8000002b) (rerun: 64) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000b00)={0x2d8, r5, 0x8, 0x70bd28, 0xa5dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x99}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x6}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x5}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0xd}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x81}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x7}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_TX_RATES={0x284, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x114, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x800, 0x5, 0x1ff, 0x8a3, 0x4, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x963e, 0xc, 0x7, 0x4, 0xfff9, 0x0, 0x8, 0xd]}}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x2}, {0x3, 0x3}, {0x3, 0x8}, {0x5, 0x4}, {0x0, 0x5}, {0x2, 0x3}, {0x4, 0x3}, {0x7, 0xa}, {0x0, 0x1}, {0x5, 0x8}, {0x6, 0x7}, {0x2, 0x5}, {0x5, 0x8}, {0x0, 0x3}, {0x0, 0xa}, {0x1, 0x7}, {0x0, 0x3}, {0x5, 0x8}, {0x6}, {0x4, 0x6}, {0x2, 0x9}, {0x3}, {0x2, 0x2}, {0x5, 0x4}, {0x4, 0x2}, {0x2, 0x6}, {0x5, 0x4}, {0x4, 0x5}, {0x4}, {0x1, 0x4}, {0x4, 0x8}, {0x5, 0x4}, {0x6}, {0x1, 0x3}, {0x3, 0x4}, {0x1, 0x3}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x5}, {0x1, 0x3}, {0x0, 0x9}, {0x1, 0x2}, {0x7, 0x3}, {0x6, 0x8}, {0x1, 0x8}, {0x3, 0x7}, {0x5, 0x5}, {0x4, 0x2}, {0x5, 0x8}, {0x4, 0x5}, {0x1, 0x8}, {0x3, 0x8}, {0x0, 0x5}, {0x5, 0x8}, {0x0, 0x1}, {0x7, 0xa}, {0x7, 0x1}, {0x1, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x45, 0x2, [{}, {0x4, 0x2}, {0x0, 0x5}, {0x7, 0x8}, {0x1, 0x7}, {0x1, 0x7}, {0x2}, {0x0, 0x3}, {0x2, 0xa}, {0x4, 0x2}, {0x1, 0x9}, {0x5, 0x1}, {0x5}, {0x3, 0x8}, {0x4, 0x9}, {0x3, 0x7}, {0x2, 0x3}, {0x0, 0xa}, {0x5}, {0x5, 0x6}, {0x1, 0x8}, {0x5, 0x7}, {0x0, 0xa}, {0x0, 0x3}, {0x1, 0x6}, {}, {0x6, 0x7}, {0x3, 0xa}, {0x6, 0x8}, {0x0, 0x8}, {0x6, 0x13}, {0x5, 0xa}, {0x4, 0xa}, {0x4, 0x1}, {0x4, 0x3}, {0x6, 0x1}, {0x4, 0x3}, {0x6, 0x3}, {0x4, 0x8}, {}, {0x7, 0x9}, {0x1, 0x8}, {0x3, 0x1}, {0x6, 0xa}, {0x3, 0x6}, {0x1, 0x3}, {0x5, 0x3}, {0x6, 0x5}, {0x1, 0x8}, {0x3, 0x7}, {0x1, 0x9}, {0x7, 0x8}, {0x5}, {0x4}, {0x4, 0x9}, {0x6, 0x8}, {0x7, 0xa}, {0x4, 0x1}, {0x1, 0x5}, {0x4, 0x3}, {0x0, 0x9}, {0x3, 0x1}, {0x1, 0x5}, {0x0, 0x2}, {0x1, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x400, 0x2, 0x1d, 0xf001, 0x9, 0x2, 0xfffa]}}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x2, 0xa}, {0x1, 0x5}, {0x0, 0x1}, {0x1, 0x3}, {0x0, 0x9}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x6}, {0x2, 0x1}, {0x7, 0x5}, {0x2, 0x8}, {0x7, 0x3}, {0x0, 0x9}, {0x0, 0x7}, {0x7, 0x1}, {0x5, 0x3}, {0x7, 0x9}, {0x6}, {0x1, 0x6}, {0x7, 0x8}, {0x6, 0x1}, {}, {0x2, 0x4}, {0x3, 0x7}, {0x3, 0x6}, {0x1, 0x3}, {0x3, 0x3}, {0x0, 0x4}, {0x1, 0x4}, {0x1, 0x5}, {0x0, 0x7}, {0x5, 0x8}, {0x3, 0x8}, {0x4, 0xa}, {0x3, 0x5}, {0x5, 0x2}, {0x7, 0x4}, {0x4, 0x4}, {0x1, 0x8}, {0x1, 0x3}, {0x7}, {0x5, 0x6}, {0x6, 0x4}, {0x1, 0x2}, {0x3, 0xa}, {0x3, 0x7}, {0x6}, {0x1, 0x4}, {0x1, 0x8}, {0x1, 0x7}, {0x4, 0x2}, {0x2, 0x9}, {0x3, 0x1}, {0x6, 0x9}, {0x4, 0x1}]}]}, @NL80211_BAND_2GHZ={0xfc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x2, 0x58, 0x1, 0x4, 0x24, 0x3, 0x1, 0x30, 0x12, 0x6c, 0x32, 0x2, 0xc, 0x18, 0x6c, 0x1, 0x4, 0x16, 0x24]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x0, 0x3}, {0x2}, {0x5, 0x8}, {0x0, 0x4}, {0x6, 0x8}, {0x4, 0xa}, {0x0, 0x8}, {0x0, 0x7}, {0x0, 0x8}, {0x2, 0x8}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x24, 0x30, 0x48, 0x12, 0x6c, 0x36, 0x4, 0x48]}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x6, 0x8}, {0x5, 0x3}, {0x3}, {0x2, 0x9}, {0x3, 0x7}, {0x4, 0x4}, {0x4, 0x5}, {}, {0x4, 0x6}, {0x1, 0x6}, {0x1, 0xa}, {0x3, 0xa}, {0x5, 0x4}, {0x1, 0x2}, {0x4, 0x9}, {0x1}, {0x0, 0x9}, {0x0, 0x1}, {0x3, 0x3}, {0x7, 0x3}, {0x4, 0x9}, {0x4, 0x7}, {0x5, 0x8}, {0x0, 0x7}, {0x7, 0x8}, {0x2, 0x7}, {0x4, 0x4}, {0x7, 0x7}, {0x5, 0x6}, {0x3, 0x5}, {0x3, 0xa}, {0x1, 0x2}, {0x3, 0xa}, {0x4, 0x3}, {0x1, 0x3}, {0x0, 0x2}, {0x5, 0x9}, {0x5, 0x7}, {0x4, 0x9}, {0x3, 0x5}, {0x5, 0x5}, {0x1}, {0x0, 0x6}, {0x2}, {0x6}, {0x6, 0x9}, {0x7, 0x8}, {0x3}, {0x2, 0xc}, {0x2, 0x7}, {0x4, 0x3}, {0x2, 0x6}, {0x6, 0x7}, {0x4, 0x8}, {0x4, 0x1}, {0x1, 0x3}, {0x1, 0x9}, {0x7, 0x4}, {0x4, 0x7}, {0x1, 0x4}]}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x5, 0x1}, {0x0, 0x8}, {0x0, 0x6}, {0x6, 0x5}, {0x3, 0x2}, {0x3, 0x7}, {0x3, 0x5}, {0x1, 0x4}, {0x5, 0x9}, {0x0, 0x5}, {0x0, 0x7}, {0x5, 0x5}, {0x2, 0x7}, {0x4, 0x4}, {0x1, 0x3}, {0x4, 0x3}, {0x6, 0x1}, {0x4, 0x7}, {0x0, 0x5}, {0x7, 0x2}, {0x7, 0x6}, {0x7, 0x5}, {0x4, 0x3}, {0x2, 0x7}, {0x6, 0x9}, {0x7, 0x7}, {0x5, 0xa}, {0x6, 0x9}, {0x3, 0x5}, {0x2, 0x8}, {0x0, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x1, 0xa}, {0x1, 0x3}, {0x3, 0x8}, {0x1, 0x9}, {0x5, 0x7}, {0x4, 0x7}, {0x1, 0x3}, {0x1, 0x2}, {0x7, 0xd}, {0x1, 0x1}, {0x4}, {0x1, 0x8}, {0x0, 0x3}, {0x0, 0x2}, {0x1, 0x3}, {0x0, 0x3}, {0x5, 0x4}, {0x6}, {0x5, 0xa}, {0x7, 0xa}, {0x3, 0x9}, {0x6, 0x3}, {0x7, 0xa}, {0x0, 0x1}, {0x1, 0x4}, {0x2, 0x7}, {0x7, 0x6}, {0x4, 0x4}, {0x1, 0x8}, {0x6}, {0x5, 0x3}, {0x4, 0x9}, {0x1, 0x3}, {0x2}, {0x4, 0x9}, {0x4, 0x5}, {0x1, 0x3}, {0x5, 0x7}, {0x0, 0x2}, {0x3, 0x4}, {0x0, 0x2}, {0x6, 0x8}]}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x2, 0x7}, {0x1, 0x6}, {0x0, 0x2}, {0x2, 0x4}, {0x6, 0xa}, {0x5, 0xa}, {0x1, 0x2}, {0x6, 0x8}, {0x7, 0x7}, {0x3}, {0x6, 0x2}, {0x7}, {}, {0x0, 0x8}, {0x2, 0x4}, {0x1}, {0x3, 0x9}, {0x2, 0xa}, {0x2, 0x6}, {0x1, 0x8}, {0x3, 0x5}, {0x5, 0x3}, {0x0, 0x8}, {0x4, 0x5}, {0x7, 0x4}, {0x2, 0x9}, {0x5, 0x9}, {0x7, 0x5}, {0x1, 0x7}, {}, {0x5, 0x1}, {0x6, 0x6}, {0x1, 0x3}, {0x3, 0x3}, {0x3, 0x4}, {0x2, 0x9}, {0x0, 0x1}, {0x4}, {}, {0x4}, {0x0, 0x8}, {0x4, 0x8}, {0x7}, {0x6, 0x8}, {0x4, 0x2}, {0x3, 0x9}, {0x3}, {0x6, 0x6}]}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0xfffe, 0x0, 0x2, 0x10, 0x6, 0x6, 0x9]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x24, 0x16, 0x3, 0xc, 0x6]}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4d, 0x207, 0x9, 0x969, 0x9, 0x9, 0x0, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0xff}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1000, 0x7, 0x8ad, 0x3, 0x0, 0x4, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r8 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4, @mcast1, 0x0, 0x0, 0x8}}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) (async) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000300)={'veth0_to_bond\x00', &(0x7f00000002c0)=@ethtool_channels={0x3d, 0x4, 0xff, 0x81, 0x9, 0x8001, 0x5, 0x4, 0x4}}) (async, rerun: 64) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000e6ffffffffffffff00787f9353bd04000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async, rerun: 64) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r10, 0x6, 0x1f, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x16, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@printk={@p, {}, {0x5}, {0x7, 0x0, 0xa}, {}, {}, {0x6a, 0x9}}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.03738663s ago: executing program 3 (id=1165): syz_emit_ethernet(0x76, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800450000680000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="54de0000907800001e0c800000000000000000001e0c10000000000000000000051600000000000000000000000300000000000000001312a4bcbcee95c6179191d2675112a6689b"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x20040005) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000017000/0x4000)=nil, 0x4000, 0x0, 0x28011, r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) socket$netlink(0x10, 0x3, 0x8) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000380)={&(0x7f0000000640)={0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x70bd26}, 0x10}}, 0x0) setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f00000001c0)=0x1, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180090001006d6574610000000014000280080003400000001008000240000000030900010073797a30000000000900020073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3a, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r5}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@cgroup, 0xffffffffffffffff, 0x37}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) write$binfmt_script(r6, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map}, 0x10) recvmmsg(r2, &(0x7f0000003080)=[{{0x0, 0x0, 0x0}, 0xd}], 0x1, 0x61, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x5, 0x1, @void}]}]}, {0x4}, {0xc}, {0xfffffffffffffeba}}}]}]}, 0x98}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r0) 1.628074359s ago: executing program 1 (id=1168): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) 1.553356112s ago: executing program 2 (id=1169): sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="df3adaaed0c932d8", 0x8, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x48000041, &(0x7f00000000c0)={&(0x7f0000001640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000025b729000e0001006e657464657673696d0000000f0002006e75d132c3a7e89b8d98826202b17c3981657464657673696d30000008008b00c58e6679092b4e1f984b5cd024626071e1fe879a67cef7a71d8550d4c5e021464967132f9c7616de373ab311567fa82e1804b2d5f3ce2b29574de85b", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@updsa={0x1cc, 0x1a, 0x1, 0x0, 0x0, {{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3a}, {@in6=@remote, 0x0, 0x32}, @in=@multicast1, {}, {0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0x2, 0x0, 0xa5}, [@tfcpad={0x8, 0x16, 0x3}, @migrate={0x9c, 0x11, [{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0xff, 0x0, 0x0, 0x0, 0xa, 0x2}, {@in=@multicast2, @in6=@private1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@empty, 0x2b, 0x1, 0x0, 0x0, 0x2, 0x2}]}, @replay_esn_val={0x38, 0x17, {0x7, 0x70bd2c, 0x70bd2c, 0x70bd2b, 0x70bd29, 0x8001, [0x10000, 0x7fffffff, 0x8000, 0xfffffffe, 0x7f, 0x69, 0x200]}}]}, 0x1cc}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)}}], 0x2, 0x2004000) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000180)=0x1000, 0x8) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}}, [0x20, 0x7, 0x1, 0x1, 0xfffffffffffffffc, 0x7ff, 0x1ff, 0x125699cd, 0x7, 0x2, 0x200, 0x8, 0x9, 0xf60, 0xff]}, &(0x7f00000000c0)=0x100) syz_init_net_socket$ax25(0x3, 0x5, 0xcc) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000240)={r7, 0x346, 0x20}, 0xc) r8 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x46, 0x0, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={&(0x7f0000001640)=@generic={0xb, "f17c0e7f016be037799a8650058fd739c6ace1f32d52e5b013c77e1a89e25abeb0c80411df1fa0fed429d3505785023f63bc0217601746a657fbbdbf6391783ef1bdc63a99b36392f89994f37107b788f8ce0a43745c51de25abf42ab48ead2967c50575f8495af1398ad2e09782a5a6bc012926982ef6d8b220a30adf62"}, 0x80, &(0x7f0000000280)}, 0x0) syz_emit_ethernet(0x1f, &(0x7f0000000380)={@local, @random="f8694d4bcc7a", @void, {@llc_tr={0x11, {@llc={0xaa, 0x0, "1f", "eae6801661b373e9b1f31094a40b"}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f00000000c0)=0x9, 0x4) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000280)=0xd6dc, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[], 0x34}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) 1.332981231s ago: executing program 1 (id=1170): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f00000014c0)=ANY=[@ANYBLOB="18002200000000000000809f2ecb568b", @ANYRESOCT, @ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000001700)="6fb90479248d7edb56a6253432acd70eff07428573", 0x15}], 0x1, 0x0) (async, rerun: 32) recvmmsg(r3, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x0, 0x0) (rerun: 32) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'gretap0\x00'}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x3f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x0, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x801, 0xb00, 0x0, {0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async, rerun: 32) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r5}, 0x10) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfecc) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x64) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001780)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c000780080008000000000005bb8b758e1b04cf49000500020000000500048174e3b55097dd620073797a3100000000163c0300686173683a6e65742c706f72742c6e65740000005175d29e7061b2c500e36531fd1cff33b4b85d14258408ed98e6c4723b9db2bc7670113a1f714e86fff2cf5238b394f6bf453a5d21b8d34a5acb8d0cfccaebed3dad97eea3408eba5bd8"], 0x5c}}, 0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) (async) connect$pppoe(r8, &(0x7f00000001c0)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, 'veth1_vlan\x00'}}, 0x1e) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 1.106424936s ago: executing program 1 (id=1171): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x22eb}, @TCA_MPLS_TTL={0x5, 0x7, 0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x0, &(0x7f0000000280)=""/265, &(0x7f0000000100)=0xfffffe20) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0xffff, 0x0, 0x0, {}, [{0x64, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x6}}}}]}]}, 0x78}}, 0x0) 829.507862ms ago: executing program 1 (id=1172): r0 = socket(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000004840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="1e000000000000001f0000000000000005100000", @ANYRES32, @ANYRES8=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004000000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 554.267597ms ago: executing program 1 (id=1173): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000002e5619ce194374ce389ec94fc5fe3850b614f36d8332344115a6b13a882196ba3b639b90c10e4918446038abff6d85898b01d5718996ca1ce88edef72b6d6f9c16c9529cc4db9443c797b532bafc26314c54e1fa9afa0e4ef8788ebbefb1002ba8a9eae35f8e02d7ca86bdec7f673ba5d7c812e0348ce2276aeb76bcd91ba9fc8de71d143ab0266417fd96300b7a3581d21a2cfd100f06bc31b673596c0e7f08436ad0f81f00efef61b88ab7146eb944cb662e243f4289003ffba57fd3117d3fa3456e"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000700b7080000000400007b8af8ff00000000bfa2000000000000070200000f6bc85a4a6597e50d624951a762fcffffffb703000008000000b704003d4ece", @ANYBLOB="cfa456e7c141058262dd1c49ecf7513b365d8a758bdfe0946365", @ANYRESOCT=r2, @ANYRES16=r2, @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, r5) sendmsg$TIPC_NL_BEARER_ENABLE(r5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$kcm(0x11, 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$can_raw(r8, &(0x7f00000002c0), 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x10d, 0x14, 0x0, 0x0) 529.674967ms ago: executing program 2 (id=1174): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x8, 0x5, 0x3c0, 0x0, 0x270, 0xffffffff, 0x1c8, 0x270, 0x328, 0x328, 0xffffffff, 0x328, 0x328, 0x5, 0x0, {[{{@uncond, 0xae01, 0xd8, 0x110, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@unspec=@connlimit={{0x40}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @broadcast, @loopback, @icmp_id, @icmp_id}}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'bridge0\x00', 'ipvlan0\x00'}, 0x3f5, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@empty, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0xff00, {0x0, @multicast1, @multicast1, @gre_key}}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'caif0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4, @ipv6=@loopback, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x2, 0x1, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff0}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_CLASSID={0x8}]}}]}, 0x4c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0xfff2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x34, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 221.202714ms ago: executing program 2 (id=1175): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x508, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}, @TCA_RATE={0x6}, @filter_kind_options=@f_flower={{0xb}, {0x4}}, @filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x7, 0xfff1}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}, @filter_kind_options=@f_route={{0xa}, {0x498, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x31}, @TCA_ROUTE4_CLASSID={0x8}, @TCA_ROUTE4_ACT={0x474, 0x6, [@m_sample={0x74, 0x6, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x0, 0x1, 0x72b, 0x1000000}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x10}]}, {0xd, 0x6, "e382c42ebd85b3baf2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_nat={0xd0, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @loopback, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @local, @broadcast}}]}, {0x55, 0x6, "ef93daeef78df7f9a037a0d7a2f92a1cc341deabba437fc636cbf66a843bc4e0304e79be1f16cfa199b042be92c52b0490cb3ccc8a115bd7fba1ddd4a3ea8aa011548c0a44af30d92f016d58b7280bd342"}, {0xc}, {0xc}}}, @m_ct={0x148, 0x13, 0x0, 0x0, {{0x7}, {0x78, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x101}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_LABELS_MASK={0x14, 0x8, "c30604ab3100a6de878355a1bfb0f58b"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @remote}, @TCA_CT_PARMS={0x18, 0x1, {0x1ff, 0x80, 0x10000000, 0x6, 0x3}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "58f25e882ecebd3017a6274441c51594"}]}, {0xa9, 0x6, "f84ebe84c2d9809d98cb12f2274b5e21a4b137a60d915bfb42d02d4976ad358f638df8594bc932b13ff21d61be8614c3e0d017d21773d441648e714188ceca643a7f306544ce1be061d95d94f171717e049609b7d2b065d9b018db93c08d3479edf5f057f3b5d682c142a7be2a698456dbb28b7070774e11cf4125dc778036c189ec187ceb923d94a23e0d32f0cda5d880fc5a368aae1f7da8ca75bbda9fa9c8514245e0fd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_nat={0x1a4, 0x15, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x4, 0x1, 0x2, 0x6}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x101, 0x10, 0x10000000, 0x8000, 0x1000}, @remote, @multicast2, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x8, 0x20000000, 0x1, 0x6f4f}, @remote, @private=0xa010101, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x45df, 0x7ff, 0x20000000, 0x4, 0x7}, @dev={0xac, 0x14, 0x14, 0x3d}, @loopback, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x7, 0xffffffffffffffff, 0x6, 0xfffefffd}, @broadcast, @loopback}}]}, {0xb1, 0x6, "4dc7f21787f380380347f84b5145b1d23981926587a24d1dd1274fe45fc013617ccb6d9e31bcfb7b8dac1b3216e41c33d1fdb26e2baeb62bc73fd724687b9c81b597a8c41e925f7c67b15bc9a13d6e2636eae1a59fe52768c11c3c60cb3741b8a3c7287e56e6eff75d3c9ae7929334218c08416b1a17c8821676ee62a89de765ca5de04261f6a60e4a0e43db1662bbe56fcd7eea8f1b58aa889814d3ea0ce15c0b1a55ca51b31be3e02e29ec55"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_ctinfo={0x40, 0x0, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x508}, 0x1, 0x0, 0x0, 0x10}, 0x40004) (async) r0 = socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000080)="7800000018002507b9409b02ffff48000203be04020406050a02040c5c000900580006080a0000000d0085a168d0bf46d32345653600648d040012000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x52) (async, rerun: 32) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r0) (rerun: 32) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r2, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x101}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050200000000001a00190000000000010300", @ANYRES32=r5, @ANYBLOB="04002d800c002c800800000000000000"], 0x2c}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r6, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x1) r7 = socket$inet_dccp(0x2, 0x6, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000300)="eb"}], 0x1, 0x0, 0x0) (async, rerun: 64) write$binfmt_aout(r8, &(0x7f00000002c0)=ANY=[], 0xc1) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r8, 0x0) (async) getsockopt$inet_int(r7, 0x10d, 0xce, 0x0, &(0x7f0000000040)) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000011000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="00000002000000000c001a800800048004"], 0x2c}}, 0x0) (async) connect$packet(r0, &(0x7f0000000000)={0x11, 0x3, r11, 0x1, 0x9, 0x6, @link_local}, 0x14) (async, rerun: 32) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x1b0}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (rerun: 32) 158.99584ms ago: executing program 1 (id=1176): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_audit(0x10, 0x3, 0x9) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000000)=0xfff, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x40, r5, 0xb7a006d1969b963b, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @probe_request={{{}, {}, @broadcast, @device_b}, @void, @void, @void, @void, @val={0x72, 0x6}}}]}, 0x40}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) 0s ago: executing program 2 (id=1177): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000400095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061122f0e2a2d087ca7c0010000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.bfq.time\x00', 0x0, 0x0) (async) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x5, 0x8}, 0xc) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='devices.list\x00', 0x275a, 0x0) read(r4, &(0x7f00000003c0)=""/132, 0x84) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0xfea7) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={&(0x7f00000005c0)='./file0\x00', 0x0, 0x8, r0}, 0x18) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={0x1, 0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x21, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb905, 0x0, 0x0, 0x0, 0xfff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffff000}}, @alu={0x7, 0x0, 0xa, 0x0, 0x9, 0x4, 0x1}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @generic={0x35, 0x0, 0x8, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x4, 0x1, 0x0, r2}, @jmp={0x5, 0x0, 0x6, 0x4, 0x1, 0x40, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000500)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000d80)=""/4096, 0x41000, 0x4, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000540)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0xd, 0x2, 0x80000001}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000007c0)=[r5, r6, r7, r8], &(0x7f0000000800)=[{0x3, 0x3, 0x7, 0xb}, {0x1, 0x4, 0x1, 0x2}, {0x0, 0x5, 0x3, 0x9}], 0x10, 0x5, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) (async) r9 = socket$kcm(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r10, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r11, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb0}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000801}, 0x48) (async) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c02c000000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) kernel console output (not intermixed with test programs): er parsing attributes in process `syz.1.373'. [ 121.999833][ T6528] sch_fq: defrate 0 ignored. [ 122.545124][ T6547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.382'. [ 122.584673][ T6547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.382'. [ 122.981209][ T6552] pim6reg1: entered promiscuous mode [ 123.010520][ T6552] pim6reg1: entered allmulticast mode [ 123.332808][ T2519] hsr_slave_0: left promiscuous mode [ 123.350708][ T2519] hsr_slave_1: left promiscuous mode [ 123.374577][ T2519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.388281][ T5253] Bluetooth: hci1: command tx timeout [ 123.401818][ T2519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.450472][ T2519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.478211][ T2519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.539766][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.550238][ T2519] veth1_macvtap: left promiscuous mode [ 123.569647][ T2519] veth0_macvtap: left promiscuous mode [ 123.585724][ T2519] veth1_vlan: left promiscuous mode [ 123.594289][ T2519] veth0_vlan: left promiscuous mode [ 124.541433][ T2519] team0 (unregistering): Port device team_slave_1 removed [ 124.583595][ T5251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.627967][ T2519] team0 (unregistering): Port device team_slave_0 removed [ 125.300376][ T5294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.333766][ T6572] netlink: 'syz.2.388': attribute type 5 has an invalid length. [ 125.476964][ T5253] Bluetooth: hci1: command tx timeout [ 125.657969][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.684591][ T6584] bridge_slave_1: left allmulticast mode [ 125.713635][ T6584] bridge_slave_1: left promiscuous mode [ 125.724928][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.393'. [ 125.731568][ T6584] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.772590][ T6589] netlink: 16 bytes leftover after parsing attributes in process `syz.3.393'. [ 125.783907][ T6588] netlink: 16 bytes leftover after parsing attributes in process `syz.3.393'. [ 125.794705][ T6589] netlink: 68 bytes leftover after parsing attributes in process `syz.3.393'. [ 125.797408][ T6590] netlink: 68 bytes leftover after parsing attributes in process `syz.3.393'. [ 125.849650][ T6586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.392'. [ 125.864717][ T6582] batadv_slave_1: entered promiscuous mode [ 125.901709][ T6582] batadv_slave_1: left promiscuous mode [ 125.924715][ T6582] xt_bpf: check failed: parse error [ 126.119202][ T6595] netlink: 'syz.0.394': attribute type 23 has an invalid length. [ 126.123562][ T6517] chnl_net:caif_netlink_parms(): no params data found [ 126.126976][ T6595] netlink: 'syz.0.394': attribute type 9 has an invalid length. [ 126.351037][ T6599] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 126.563509][ T6517] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.571238][ T6517] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.585480][ T6517] bridge_slave_0: entered allmulticast mode [ 126.600506][ T6517] bridge_slave_0: entered promiscuous mode [ 126.655548][ T6517] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.666331][ T5251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.681753][ T6517] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.716144][ T6517] bridge_slave_1: entered allmulticast mode [ 126.738867][ T6517] bridge_slave_1: entered promiscuous mode [ 126.869859][ T6517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.906419][ T6517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.066640][ T6517] team0: Port device team_slave_0 added [ 127.110506][ T6517] team0: Port device team_slave_1 added [ 127.175967][ T6628] __nla_validate_parse: 4 callbacks suppressed [ 127.175990][ T6628] netlink: 666 bytes leftover after parsing attributes in process `syz.2.404'. [ 127.258086][ T6517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.265270][ T6517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.348483][ T6517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.374251][ T6517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.387109][ T6517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.428192][ T6517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.538712][ T5253] Bluetooth: hci1: command tx timeout [ 127.598472][ T6517] hsr_slave_0: entered promiscuous mode [ 127.615420][ T6517] hsr_slave_1: entered promiscuous mode [ 127.629246][ T6517] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.636873][ T6517] Cannot create hsr debugfs directory [ 127.708142][ T5251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.834024][ T6633] IPv6: sit2: Disabled Multicast RS [ 127.914693][ T6635] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 128.138930][ T6641] xt_hashlimit: max too large, truncated to 1048576 [ 128.338930][ T5293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.469682][ T6659] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 128.575216][ T6662] netlink: 'syz.0.415': attribute type 1 has an invalid length. [ 128.612663][ T6662] netlink: 4048 bytes leftover after parsing attributes in process `syz.0.415'. [ 128.623921][ T6663] netlink: 52 bytes leftover after parsing attributes in process `syz.1.416'. [ 128.748312][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.902015][ T6517] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 128.954719][ T6517] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 129.013943][ T6517] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 129.014307][ T6683] netlink: 56 bytes leftover after parsing attributes in process `syz.3.420'. [ 129.049984][ T6517] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 129.219086][ T6687] netlink: 48 bytes leftover after parsing attributes in process `syz.1.422'. [ 129.229063][ T6685] netlink: 'syz.0.421': attribute type 30 has an invalid length. [ 129.474719][ T6517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.489180][ T6698] netlink: 88 bytes leftover after parsing attributes in process `syz.1.426'. [ 129.560399][ T6517] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.602559][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.609827][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.618109][ T5253] Bluetooth: hci1: command tx timeout [ 129.623932][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.631152][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.699633][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.430'. [ 129.779761][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.792685][ T6709] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 129.977553][ T6717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.431'. [ 130.015218][ T6717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.431'. [ 130.053357][ T6717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.431'. [ 130.464561][ T6517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.811329][ T6761] netlink: 'syz.2.441': attribute type 12 has an invalid length. [ 131.222956][ T5248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.266965][ T6786] netlink: 'syz.0.445': attribute type 3 has an invalid length. [ 131.592112][ T6517] veth0_vlan: entered promiscuous mode [ 131.706038][ T6800] netlink: 'syz.3.451': attribute type 2 has an invalid length. [ 131.783537][ T6517] veth1_vlan: entered promiscuous mode [ 131.860847][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.937755][ T6517] veth0_macvtap: entered promiscuous mode [ 131.976629][ T6517] veth1_macvtap: entered promiscuous mode [ 132.039698][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.088142][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.114466][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.147204][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.168082][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.188098][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.208094][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.234205][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.251761][ T6517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.401824][ T6814] syzkaller0: entered allmulticast mode [ 132.582443][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.602977][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.625903][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.643036][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.653202][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.677186][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.691766][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.707565][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.727101][ T6517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.899108][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.147400][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.949914][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.438511][ T5293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.979472][ T1851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.474194][ T6827] __nla_validate_parse: 5 callbacks suppressed [ 135.474216][ T6827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.457'. [ 135.581842][ T6517] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.616086][ T6517] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.633655][ T6517] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.662909][ T6517] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.681169][ T6808] tunl0: left promiscuous mode [ 135.730163][ T6808] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 136.044487][ T1851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.212588][ T6850] netlink: 'syz.3.463': attribute type 1 has an invalid length. [ 136.403772][ T6857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.463'. [ 136.435142][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.448220][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.461017][ T6854] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 136.462062][ T6850] bond2 (unregistering): Released all slaves [ 136.471951][ T6854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.487206][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.557432][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.588176][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.058490][ T48] net_ratelimit: 2 callbacks suppressed [ 137.058511][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.171647][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.217579][ T6880] netlink: 116 bytes leftover after parsing attributes in process `syz.3.470'. [ 137.239275][ T6877] netlink: 'syz.1.469': attribute type 2 has an invalid length. [ 137.281705][ T6877] dvmrp1: entered allmulticast mode [ 137.458997][ T5248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.485560][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.678480][ T6897] netlink: 220 bytes leftover after parsing attributes in process `syz.2.475'. [ 137.711159][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.836812][ T6894] xt_TCPMSS: Only works on TCP SYN packets [ 137.989843][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.011744][ T6921] SET target dimension over the limit! [ 138.019005][ T6923] netlink: 32 bytes leftover after parsing attributes in process `syz.0.481'. [ 138.056633][ T6921] Dead loop on virtual device ipvlan1, fix it urgently! [ 138.108754][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.180459][ T5250] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 138.181720][ T6921] syz.1.480 (6921) used greatest stack depth: 5616 bytes left [ 138.197257][ T5250] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 138.221719][ T5250] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 138.240117][ T5250] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 138.248083][ T5250] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 138.255575][ T5250] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 138.319238][ T35] bridge_slave_1: left allmulticast mode [ 138.324954][ T35] bridge_slave_1: left promiscuous mode [ 138.377638][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.410620][ T35] bridge_slave_0: left allmulticast mode [ 138.435280][ T35] bridge_slave_0: left promiscuous mode [ 138.459630][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.617718][ T6950] FAULT_INJECTION: forcing a failure. [ 138.617718][ T6950] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 138.650514][ T6950] CPU: 0 UID: 0 PID: 6950 Comm: syz.3.487 Not tainted 6.11.0-rc6-syzkaller-00179-gb3c9e65eb227 #0 [ 138.661192][ T6950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 138.671299][ T6950] Call Trace: [ 138.674626][ T6950] [ 138.677592][ T6950] dump_stack_lvl+0x241/0x360 [ 138.682317][ T6950] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.687567][ T6950] ? __pfx__printk+0x10/0x10 [ 138.692211][ T6950] ? snprintf+0xda/0x120 [ 138.696501][ T6950] should_fail_ex+0x3b0/0x4e0 [ 138.701240][ T6950] _copy_to_user+0x2f/0xb0 [ 138.705701][ T6950] simple_read_from_buffer+0xca/0x150 [ 138.711136][ T6950] proc_fail_nth_read+0x1ec/0x260 [ 138.716206][ T6950] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 138.721800][ T6950] ? rw_verify_area+0x520/0x6b0 [ 138.726688][ T6950] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 138.732277][ T6950] vfs_read+0x204/0xbc0 [ 138.736468][ T6950] ? __pfx_lock_release+0x10/0x10 [ 138.741558][ T6950] ? __pfx_vfs_read+0x10/0x10 [ 138.746279][ T6950] ? __fget_files+0x29/0x470 [ 138.750911][ T6950] ? __fget_files+0x3f6/0x470 [ 138.755657][ T6950] ksys_read+0x1a0/0x2c0 [ 138.759954][ T6950] ? __pfx_ksys_read+0x10/0x10 [ 138.764767][ T6950] ? do_syscall_64+0x100/0x230 [ 138.769580][ T6950] ? do_syscall_64+0xb6/0x230 [ 138.774301][ T6950] do_syscall_64+0xf3/0x230 [ 138.778850][ T6950] ? clear_bhb_loop+0x35/0x90 [ 138.783578][ T6950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.789495][ T6950] RIP: 0033:0x7f2fd877c93c [ 138.793924][ T6950] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 138.813558][ T6950] RSP: 002b:00007f2fd9510030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 138.822013][ T6950] RAX: ffffffffffffffda RBX: 00007f2fd8936130 RCX: 00007f2fd877c93c [ 138.830005][ T6950] RDX: 000000000000000f RSI: 00007f2fd95100a0 RDI: 000000000000000a [ 138.837997][ T6950] RBP: 00007f2fd9510090 R08: 0000000000000000 R09: 0000000000000000 [ 138.845988][ T6950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.853969][ T6950] R13: 0000000000000000 R14: 00007f2fd8936130 R15: 00007fffca4a3958 [ 138.861983][ T6950] [ 138.903010][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.152312][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.237384][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.251034][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.262400][ T35] bond0 (unregistering): Released all slaves [ 139.593388][ T6969] netlink: 'syz.3.492': attribute type 7 has an invalid length. [ 139.670027][ T6969] Êü: entered promiscuous mode [ 139.691849][ T6964] netlink: 176 bytes leftover after parsing attributes in process `syz.3.492'. [ 139.720100][ T6966] netlink: 28 bytes leftover after parsing attributes in process `syz.1.491'. [ 140.029883][ T6984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.498'. [ 140.119980][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.498'. [ 140.180090][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.338847][ T5253] Bluetooth: hci1: command tx timeout [ 140.441365][ T35] hsr_slave_0: left promiscuous mode [ 140.455524][ T35] hsr_slave_1: left promiscuous mode [ 140.479448][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.505271][ T5294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.518203][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.538817][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.552641][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.578325][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.586588][ T35] veth1_macvtap: left promiscuous mode [ 140.593863][ T35] veth0_macvtap: left promiscuous mode [ 140.599703][ T35] veth1_vlan: left promiscuous mode [ 140.605368][ T35] veth0_vlan: left promiscuous mode [ 141.166215][ T35] team0 (unregistering): Port device team_slave_1 removed [ 141.214616][ T35] team0 (unregistering): Port device team_slave_0 removed [ 141.236064][ T1851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.738547][ T7014] sch_fq: defrate 0 ignored. [ 141.755805][ T7012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.504'. [ 141.851092][ T7021] netlink: 'syz.2.507': attribute type 25 has an invalid length. [ 142.011384][ T7033] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 142.136282][ T6924] chnl_net:caif_netlink_parms(): no params data found [ 142.259351][ T1851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.403445][ T6924] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.411014][ T6924] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.419035][ T5253] Bluetooth: hci1: command tx timeout [ 142.419137][ T6924] bridge_slave_0: entered allmulticast mode [ 142.432246][ T6924] bridge_slave_0: entered promiscuous mode [ 142.443760][ T6924] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.451655][ T6924] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.459491][ T6924] bridge_slave_1: entered allmulticast mode [ 142.478373][ T6924] bridge_slave_1: entered promiscuous mode [ 142.567781][ T7054] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 142.600452][ T6924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.632828][ T6924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.770832][ T6924] team0: Port device team_slave_0 added [ 142.844945][ T6924] team0: Port device team_slave_1 added [ 142.921093][ T6924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.937976][ T6924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.994871][ T6924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.020801][ T6924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.027804][ T6924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.055034][ T7077] netlink: 32 bytes leftover after parsing attributes in process `syz.3.524'. [ 143.064056][ T6924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.079774][ T7078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.524'. [ 143.216339][ T6924] hsr_slave_0: entered promiscuous mode [ 143.226785][ T6924] hsr_slave_1: entered promiscuous mode [ 143.253384][ T6924] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.268405][ T6924] Cannot create hsr debugfs directory [ 143.298303][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.503757][ T7096] netlink: 48 bytes leftover after parsing attributes in process `syz.3.530'. [ 143.529763][ T7096] netlink: 'syz.3.530': attribute type 2 has an invalid length. [ 143.546503][ T7096] netlink: 244 bytes leftover after parsing attributes in process `syz.3.530'. [ 143.556119][ T5294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.690038][ T7099] netlink: 'syz.1.531': attribute type 25 has an invalid length. [ 143.733423][ T7099] netlink: 'syz.1.531': attribute type 7 has an invalid length. [ 143.765054][ T7098] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.531'. [ 143.944043][ T7113] netlink: 'syz.2.534': attribute type 1 has an invalid length. [ 144.370784][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.524407][ T5253] Bluetooth: hci1: command tx timeout [ 144.558596][ T7125] SET target dimension over the limit! [ 144.587723][ T7128] netlink: 'syz.3.540': attribute type 39 has an invalid length. [ 144.663858][ T7134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.541'. [ 144.766275][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032e17c00: rx timeout, send abort [ 144.767114][ T6924] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 144.793731][ T7137] netlink: 14 bytes leftover after parsing attributes in process `syz.2.542'. [ 144.802203][ T6924] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 144.816906][ T7137] netlink: get zone limit has 4 unknown bytes [ 144.832897][ T6924] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 144.851512][ T7139] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 144.876459][ T6924] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 145.017080][ T7150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.110702][ T6924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.147599][ T6924] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.180980][ T2519] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.188459][ T2519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.202181][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802a325800: rx timeout, send abort [ 145.250636][ T2519] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.258096][ T2519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.275547][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032e17c00: abort rx timeout. Force session deactivation [ 145.379788][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.651730][ T7155] syzkaller1: entered promiscuous mode [ 145.678398][ T7155] syzkaller1: entered allmulticast mode [ 145.710504][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802a325800: abort rx timeout. Force session deactivation [ 145.841333][ T7184] macvtap0: entered promiscuous mode [ 145.880683][ T7184] macvtap0: left promiscuous mode [ 145.907287][ T7194] netlink: 'syz.1.550': attribute type 7 has an invalid length. [ 145.985265][ T5293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.003227][ T7199] xt_cgroup: invalid path, errno=-2 [ 146.233169][ T6924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.430398][ T1851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.488945][ T7215] vlan2: entered promiscuous mode [ 146.490529][ T7217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.559'. [ 146.579258][ T5253] Bluetooth: hci1: command tx timeout [ 146.759225][ T7229] netlink: 16 bytes leftover after parsing attributes in process `syz.1.561'. [ 146.900026][ T7234] netlink: 24 bytes leftover after parsing attributes in process `syz.2.562'. [ 147.079701][ T6924] veth0_vlan: entered promiscuous mode [ 147.127704][ T6924] veth1_vlan: entered promiscuous mode [ 147.264818][ T6924] veth0_macvtap: entered promiscuous mode [ 147.301420][ T6924] veth1_macvtap: entered promiscuous mode [ 147.367204][ T6924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.388799][ T7260] netlink: 'syz.3.569': attribute type 11 has an invalid length. [ 147.425074][ T6924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.442150][ T6924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.458313][ T1851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.471124][ T6924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.501052][ T6924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.535323][ T6924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.556978][ T6924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.577960][ T6924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.606965][ T6924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.636144][ T7275] netlink: 28 bytes leftover after parsing attributes in process `syz.2.572'. [ 147.651644][ T6924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.687990][ T6924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.727400][ T6924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.747845][ T6924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.767471][ T6924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.789888][ T6924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.806503][ T6924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.819189][ T6924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.832457][ T6924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.853478][ T7282] dccp_close: ABORT with 243 bytes unread [ 147.890294][ T6924] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.908136][ T6924] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.928633][ T6924] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.937423][ T6924] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.175435][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.196308][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.235721][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.244485][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.428339][ T7300] netlink: 752 bytes leftover after parsing attributes in process `syz.0.584'. [ 148.451304][ T7300] netlink: 142 bytes leftover after parsing attributes in process `syz.0.584'. [ 148.473265][ T7303] netlink: 56 bytes leftover after parsing attributes in process `syz.2.585'. [ 148.495164][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.584'. [ 148.507622][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.507689][ T7303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.585'. [ 148.531294][ T7300] netlink: 68 bytes leftover after parsing attributes in process `syz.0.584'. [ 148.541990][ T7303] netlink: 31 bytes leftover after parsing attributes in process `syz.2.585'. [ 148.581506][ T7303] netlink: 'syz.2.585': attribute type 3 has an invalid length. [ 148.602940][ T7303] netlink: 'syz.2.585': attribute type 2 has an invalid length. [ 148.663366][ T7300] bridge0: entered allmulticast mode [ 148.956137][ T7316] netlink: 'syz.2.588': attribute type 11 has an invalid length. [ 149.057564][ T7319] x_tables: unsorted entry at hook 1 [ 149.068520][ T5248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.206266][ T7323] netlink: 'syz.2.590': attribute type 3 has an invalid length. [ 149.309252][ T7326] netlink: 'syz.0.591': attribute type 1 has an invalid length. [ 149.549013][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.878372][ T7346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.969784][ T7346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.257377][ T7358] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 150.268470][ T7358] macvtap1: entered promiscuous mode [ 150.274085][ T7358] macvtap1: entered allmulticast mode [ 150.285426][ T7358] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 150.316787][ T7358] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 150.327319][ T7358] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 150.522061][ T2531] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.579357][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.048030][ T7381] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 151.122322][ T5250] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.134823][ T5250] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.143391][ T5250] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.152419][ T5250] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.167623][ T5250] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 151.177776][ T5250] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.241900][ T7387] SET target dimension over the limit! [ 151.287448][ T2531] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.520866][ T2531] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.622777][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.651147][ T2531] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.004441][ T7417] __nla_validate_parse: 5 callbacks suppressed [ 152.004464][ T7417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.618'. [ 152.025299][ T7417] tc_dump_action: action bad kind [ 152.030499][ T7406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.045470][ T7406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.072806][ T7406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.092547][ T7413] ip6_vti0: entered promiscuous mode [ 152.105022][ T7419] FAULT_INJECTION: forcing a failure. [ 152.105022][ T7419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.106042][ T7413] vlan2: entered promiscuous mode [ 152.126777][ T7419] CPU: 0 UID: 0 PID: 7419 Comm: syz.3.619 Not tainted 6.11.0-rc6-syzkaller-00179-gb3c9e65eb227 #0 [ 152.137407][ T7419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 152.147468][ T7419] Call Trace: [ 152.150761][ T7419] [ 152.153706][ T7419] dump_stack_lvl+0x241/0x360 [ 152.158408][ T7419] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.163655][ T7419] ? __pfx__printk+0x10/0x10 [ 152.168264][ T7419] ? __pfx_lock_release+0x10/0x10 [ 152.173331][ T7419] should_fail_ex+0x3b0/0x4e0 [ 152.178053][ T7419] _copy_from_user+0x2f/0xe0 [ 152.182690][ T7419] copy_msghdr_from_user+0xae/0x680 [ 152.187934][ T7419] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 152.193800][ T7419] __sys_sendmsg+0x23d/0x3a0 [ 152.198436][ T7419] ? __pfx___sys_sendmsg+0x10/0x10 [ 152.203603][ T7419] ? vfs_write+0x7c4/0xc90 [ 152.208088][ T7419] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 152.214446][ T7419] ? do_syscall_64+0x100/0x230 [ 152.219231][ T7419] ? do_syscall_64+0xb6/0x230 [ 152.223940][ T7419] do_syscall_64+0xf3/0x230 [ 152.228472][ T7419] ? clear_bhb_loop+0x35/0x90 [ 152.233194][ T7419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.239137][ T7419] RIP: 0033:0x7f2fd877def9 [ 152.243590][ T7419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.263208][ T7419] RSP: 002b:00007f2fd9552038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.271701][ T7419] RAX: ffffffffffffffda RBX: 00007f2fd8935f80 RCX: 00007f2fd877def9 [ 152.279791][ T7419] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 152.287792][ T7419] RBP: 00007f2fd9552090 R08: 0000000000000000 R09: 0000000000000000 [ 152.295770][ T7419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.303746][ T7419] R13: 0000000000000000 R14: 00007f2fd8935f80 R15: 00007fffca4a3958 [ 152.311767][ T7419] [ 152.315572][ T7413] ip6_vti0: left promiscuous mode [ 152.370046][ T7414] ip6_vti0: entered promiscuous mode [ 152.375717][ T7414] vlan2: entered promiscuous mode [ 152.386949][ T7414] ip6_vti0: left promiscuous mode [ 152.527048][ T2531] bridge_slave_1: left allmulticast mode [ 152.537934][ T2531] bridge_slave_1: left promiscuous mode [ 152.554777][ T2531] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.600694][ T2531] bridge_slave_0: left allmulticast mode [ 152.606485][ T2531] bridge_slave_0: left promiscuous mode [ 152.633207][ T7433] net_ratelimit: 4 callbacks suppressed [ 152.633226][ T7433] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 152.639727][ T2531] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.659518][ T1851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.716812][ T7438] netlink: 40 bytes leftover after parsing attributes in process `syz.1.622'. [ 152.787755][ T7441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.622'. [ 152.794311][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.623'. [ 153.098651][ T2531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.113929][ T2531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.128182][ T2531] bond0 (unregistering): Released all slaves [ 153.151706][ T7429] netlink: 24 bytes leftover after parsing attributes in process `syz.1.622'. [ 153.176973][ T7437] netlink: 'syz.0.623': attribute type 4 has an invalid length. [ 153.222026][ T5250] Bluetooth: hci1: command tx timeout [ 153.569933][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.628'. [ 153.658462][ T7454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.628'. [ 153.700097][ T1851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.726550][ T5250] block nbd0: Receive control failed (result -107) [ 153.759455][ T7463] netlink: 40 bytes leftover after parsing attributes in process `syz.3.631'. [ 153.769937][ T7454] nbd0: detected capacity change from 0 to 256 [ 153.913016][ T7382] chnl_net:caif_netlink_parms(): no params data found [ 154.089571][ T7471] netlink: 'syz.0.634': attribute type 3 has an invalid length. [ 154.098959][ T7471] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.634'. [ 154.125871][ T7453] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 154.160847][ T7473] netlink: 68 bytes leftover after parsing attributes in process `syz.0.634'. [ 154.228222][ T2531] hsr_slave_0: left promiscuous mode [ 154.265997][ T2531] hsr_slave_1: left promiscuous mode [ 154.295338][ T2531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.309785][ T2531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.331487][ T7483] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 154.340643][ T2531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.378055][ T2531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.440546][ T2531] veth1_macvtap: left promiscuous mode [ 154.446281][ T2531] veth0_macvtap: left promiscuous mode [ 154.452324][ T2531] veth1_vlan: left promiscuous mode [ 154.469721][ T2531] veth0_vlan: left promiscuous mode [ 154.738753][ T1851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.141130][ T5294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.298157][ T5250] Bluetooth: hci1: command tx timeout [ 155.305143][ T2531] team0 (unregistering): Port device team_slave_1 removed [ 155.354232][ T2531] team0 (unregistering): Port device team_slave_0 removed [ 155.542604][ T5250] Bluetooth: hci2: command 0x0401 tx timeout [ 155.788102][ T1851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.847396][ T7472] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 155.882051][ T7499] netlink: 'syz.2.640': attribute type 7 has an invalid length. [ 155.905644][ T7499] netlink: 'syz.2.640': attribute type 39 has an invalid length. [ 155.992168][ T7500] bridge1: port 1(gretap1) entered blocking state [ 156.019706][ T7500] bridge1: port 1(gretap1) entered disabled state [ 156.026401][ T7500] gretap1: entered allmulticast mode [ 156.036964][ T7500] gretap1: entered promiscuous mode [ 156.044415][ T7501] netlink: 'syz.2.640': attribute type 7 has an invalid length. [ 156.053866][ T7501] netlink: 'syz.2.640': attribute type 39 has an invalid length. [ 156.159655][ T7382] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.167146][ T7382] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.188600][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.226246][ T7382] bridge_slave_0: entered allmulticast mode [ 156.258854][ T7382] bridge_slave_0: entered promiscuous mode [ 156.267738][ T7382] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.285966][ T7382] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.293559][ T7382] bridge_slave_1: entered allmulticast mode [ 156.310168][ T7382] bridge_slave_1: entered promiscuous mode [ 156.522974][ T7382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.571943][ T7382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.630178][ T7532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.716408][ T7382] team0: Port device team_slave_0 added [ 156.737515][ T7382] team0: Port device team_slave_1 added [ 156.800713][ T7540] ip6tnl0: Master is either lo or non-ether device [ 156.860554][ T7382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.867631][ T7382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.894924][ T7382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.949102][ T7382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.956188][ T7382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.987992][ T7382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.089346][ T7382] hsr_slave_0: entered promiscuous mode [ 157.096686][ T7382] hsr_slave_1: entered promiscuous mode [ 157.107742][ T7552] FAULT_INJECTION: forcing a failure. [ 157.107742][ T7552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.121376][ T7552] CPU: 1 UID: 0 PID: 7552 Comm: syz.0.657 Not tainted 6.11.0-rc6-syzkaller-00179-gb3c9e65eb227 #0 [ 157.121467][ T7382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.132012][ T7552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 157.132029][ T7552] Call Trace: [ 157.132040][ T7552] [ 157.132051][ T7552] dump_stack_lvl+0x241/0x360 [ 157.132086][ T7552] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.132112][ T7552] ? __pfx__printk+0x10/0x10 [ 157.132139][ T7552] ? __pfx_lock_release+0x10/0x10 [ 157.132194][ T7552] should_fail_ex+0x3b0/0x4e0 [ 157.132234][ T7552] _copy_from_iter+0x1f6/0x1960 [ 157.132258][ T7552] ? __virt_addr_valid+0x183/0x530 [ 157.132282][ T7552] ? __pfx_lock_release+0x10/0x10 [ 157.132321][ T7552] ? __alloc_skb+0x28f/0x440 [ 157.132347][ T7552] ? __pfx__copy_from_iter+0x10/0x10 [ 157.132375][ T7552] ? __virt_addr_valid+0x183/0x530 [ 157.132396][ T7552] ? __virt_addr_valid+0x183/0x530 [ 157.132434][ T7552] ? __virt_addr_valid+0x45f/0x530 [ 157.132459][ T7552] ? __check_object_size+0x49c/0x900 [ 157.132498][ T7552] netlink_sendmsg+0x73d/0xcb0 [ 157.132537][ T7552] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.132565][ T7552] ? __import_iovec+0x536/0x820 [ 157.132591][ T7552] ? aa_sock_msg_perm+0x91/0x160 [ 157.132620][ T7552] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 157.132649][ T7552] ? security_socket_sendmsg+0x87/0xb0 [ 157.151100][ T7382] Cannot create hsr debugfs directory [ 157.153525][ T7552] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.153557][ T7552] __sock_sendmsg+0x221/0x270 [ 157.271922][ T7552] ____sys_sendmsg+0x525/0x7d0 [ 157.276721][ T7552] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.282077][ T7552] __sys_sendmsg+0x2b0/0x3a0 [ 157.286719][ T7552] ? __pfx___sys_sendmsg+0x10/0x10 [ 157.291864][ T7552] ? vfs_write+0x7c4/0xc90 [ 157.296321][ T7552] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 157.302679][ T7552] ? do_syscall_64+0x100/0x230 [ 157.307513][ T7552] ? do_syscall_64+0xb6/0x230 [ 157.312387][ T7552] do_syscall_64+0xf3/0x230 [ 157.316906][ T7552] ? clear_bhb_loop+0x35/0x90 [ 157.321603][ T7552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.327617][ T7552] RIP: 0033:0x7fb50737def9 [ 157.332063][ T7552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.351776][ T7552] RSP: 002b:00007fb50810e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.360213][ T7552] RAX: ffffffffffffffda RBX: 00007fb507535f80 RCX: 00007fb50737def9 [ 157.368204][ T7552] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 157.376207][ T7552] RBP: 00007fb50810e090 R08: 0000000000000000 R09: 0000000000000000 [ 157.384215][ T7552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.392228][ T7552] R13: 0000000000000000 R14: 00007fb507535f80 R15: 00007ffcdfffa108 [ 157.400264][ T7552] [ 157.406632][ T5250] Bluetooth: hci1: command tx timeout [ 157.606439][ T7557] __nla_validate_parse: 3 callbacks suppressed [ 157.606459][ T7557] netlink: 128 bytes leftover after parsing attributes in process `syz.0.659'. [ 157.623273][ T7556] netlink: 128 bytes leftover after parsing attributes in process `syz.0.659'. [ 157.766785][ T7564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.662'. [ 157.785093][ T7564] netlink: 32 bytes leftover after parsing attributes in process `syz.1.662'. [ 157.858483][ T5251] net_ratelimit: 7 callbacks suppressed [ 157.858527][ T5251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.922211][ T7566] netlink: 'syz.3.663': attribute type 1 has an invalid length. [ 157.974268][ T7570] netlink: 'syz.2.665': attribute type 8 has an invalid length. [ 157.988800][ T7570] netlink: 'syz.2.665': attribute type 7 has an invalid length. [ 157.996487][ T7570] netlink: 187184 bytes leftover after parsing attributes in process `syz.2.665'. [ 158.036144][ T7578] netlink: 48 bytes leftover after parsing attributes in process `syz.2.665'. [ 158.095484][ T7570] netlink: 'syz.2.665': attribute type 8 has an invalid length. [ 158.122750][ T7570] netlink: 'syz.2.665': attribute type 7 has an invalid length. [ 158.132429][ T7570] netlink: 187184 bytes leftover after parsing attributes in process `syz.2.665'. [ 158.165267][ T7382] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 158.191533][ T7382] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 158.191986][ T7587] netlink: 24 bytes leftover after parsing attributes in process `syz.3.667'. [ 158.241040][ T7588] netlink: 'syz.0.668': attribute type 11 has an invalid length. [ 158.243500][ T7382] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 158.271938][ T7590] FAULT_INJECTION: forcing a failure. [ 158.271938][ T7590] name failslab, interval 1, probability 0, space 0, times 0 [ 158.285265][ T7590] CPU: 1 UID: 0 PID: 7590 Comm: syz.2.670 Not tainted 6.11.0-rc6-syzkaller-00179-gb3c9e65eb227 #0 [ 158.295915][ T7590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 158.306010][ T7590] Call Trace: [ 158.309326][ T7590] [ 158.312293][ T7590] dump_stack_lvl+0x241/0x360 [ 158.317022][ T7590] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.322275][ T7590] ? __pfx__printk+0x10/0x10 [ 158.326903][ T7590] ? ref_tracker_alloc+0x332/0x490 [ 158.332035][ T7590] should_fail_ex+0x3b0/0x4e0 [ 158.336739][ T7590] ? skb_clone+0x20c/0x390 [ 158.341166][ T7590] should_failslab+0xac/0x100 [ 158.345858][ T7590] ? skb_clone+0x20c/0x390 [ 158.350282][ T7590] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 158.355668][ T7590] skb_clone+0x20c/0x390 [ 158.359935][ T7590] __netlink_deliver_tap+0x3cc/0x7c0 [ 158.365266][ T7590] ? netlink_deliver_tap+0x2e/0x1b0 [ 158.370498][ T7590] netlink_deliver_tap+0x19d/0x1b0 [ 158.375647][ T7590] netlink_unicast+0x7c4/0x990 [ 158.380468][ T7590] ? __pfx_netlink_unicast+0x10/0x10 [ 158.385799][ T7590] ? __virt_addr_valid+0x183/0x530 [ 158.390953][ T7590] ? __check_object_size+0x49c/0x900 [ 158.396293][ T7590] ? bpf_lsm_netlink_send+0x9/0x10 [ 158.401448][ T7590] netlink_sendmsg+0x8e4/0xcb0 [ 158.406266][ T7590] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.411595][ T7590] ? __import_iovec+0x536/0x820 [ 158.416481][ T7590] ? aa_sock_msg_perm+0x91/0x160 [ 158.421455][ T7590] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 158.426783][ T7590] ? security_socket_sendmsg+0x87/0xb0 [ 158.432291][ T7590] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.437612][ T7590] __sock_sendmsg+0x221/0x270 [ 158.442367][ T7590] ____sys_sendmsg+0x525/0x7d0 [ 158.447194][ T7590] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.452553][ T7590] __sys_sendmsg+0x2b0/0x3a0 [ 158.457196][ T7590] ? __pfx___sys_sendmsg+0x10/0x10 [ 158.462348][ T7590] ? vfs_write+0x7c4/0xc90 [ 158.467006][ T7590] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 158.473359][ T7590] ? do_syscall_64+0x100/0x230 [ 158.478167][ T7590] ? do_syscall_64+0xb6/0x230 [ 158.482893][ T7590] do_syscall_64+0xf3/0x230 [ 158.487857][ T7590] ? clear_bhb_loop+0x35/0x90 [ 158.492562][ T7590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.498504][ T7590] RIP: 0033:0x7ff4e4b7def9 [ 158.502954][ T7590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.522602][ T7590] RSP: 002b:00007ff4e45ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.531070][ T7590] RAX: ffffffffffffffda RBX: 00007ff4e4d35f80 RCX: 00007ff4e4b7def9 [ 158.539084][ T7590] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 158.547097][ T7590] RBP: 00007ff4e45ff090 R08: 0000000000000000 R09: 0000000000000000 [ 158.555194][ T7590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.563202][ T7590] R13: 0000000000000000 R14: 00007ff4e4d35f80 R15: 00007ffc33ccd988 [ 158.571242][ T7590] [ 158.586358][ T7382] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 158.841622][ T7382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.906347][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.928065][ T7382] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.974359][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.981606][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.058996][ T7614] netlink: 40 bytes leftover after parsing attributes in process `syz.0.675'. [ 159.119630][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.126833][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.219029][ T5293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.442460][ T7629] netlink: 'syz.3.676': attribute type 1 has an invalid length. [ 159.459013][ T5250] Bluetooth: hci1: command tx timeout [ 159.471099][ T7629] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.676'. [ 159.844082][ T7647] tipc: Started in network mode [ 159.854087][ T7647] tipc: Node identity 1, cluster identity 4711 [ 159.865628][ T7647] tipc: Node number set to 1 [ 159.877746][ T7647] tipc: Cannot configure node identity twice [ 159.922674][ T7382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.938511][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.259396][ T7665] netlink: 'syz.2.684': attribute type 11 has an invalid length. [ 160.368744][ T7667] wg2: entered promiscuous mode [ 160.376697][ T7667] wg2: entered allmulticast mode [ 160.953545][ T7382] veth0_vlan: entered promiscuous mode [ 160.982993][ T5251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.025984][ T7382] veth1_vlan: entered promiscuous mode [ 161.160673][ T7382] veth0_macvtap: entered promiscuous mode [ 161.180958][ T7702] netlink: 'syz.1.697': attribute type 21 has an invalid length. [ 161.201175][ T7702] netlink: 'syz.1.697': attribute type 4 has an invalid length. [ 161.215431][ T7702] netlink: 'syz.1.697': attribute type 5 has an invalid length. [ 161.232883][ T7705] netlink: 'syz.2.698': attribute type 11 has an invalid length. [ 161.253173][ T7382] veth1_macvtap: entered promiscuous mode [ 161.348844][ T7382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.370888][ T7382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.392172][ T7382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.403921][ T7382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.415421][ T7382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.427382][ T7382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.443982][ T7382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.455878][ T7382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.476610][ T7382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.491459][ T7382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.503061][ T7382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.514112][ T7382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.534848][ T7382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.553248][ T7382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.564206][ T7382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.574210][ T7382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.584718][ T7382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.596731][ T7382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.642097][ T7382] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.669288][ T7382] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.684886][ T7382] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.695292][ T7382] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.862836][ T7733] trusted_key: syz.0.707 sent an empty control message without MSG_MORE. [ 162.021965][ T5251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.145805][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.175768][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.271041][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.279145][ T5248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.297952][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.537044][ T7760] netlink: 'syz.3.716': attribute type 13 has an invalid length. [ 162.798833][ T7775] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 162.994745][ T7786] syz.0.724[7786] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.994909][ T7786] syz.0.724[7786] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.059104][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.092644][ T7792] nbd: must specify at least one socket [ 163.151937][ T7788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.161062][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.547576][ T2531] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.099435][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.138233][ T2531] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.321674][ T2531] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.469566][ T7829] netlink: 'syz.2.735': attribute type 4 has an invalid length. [ 164.554596][ T5253] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 164.566287][ T5253] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 164.577179][ T5253] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 164.586935][ T5253] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 164.600101][ T5253] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 164.608718][ T5253] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 164.619433][ T2531] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.658617][ T7823] netlink: 'syz.2.735': attribute type 4 has an invalid length. [ 164.716474][ T7836] IPv6: sit1: Disabled Multicast RS [ 164.752971][ T7838] netlink: 'syz.1.737': attribute type 29 has an invalid length. [ 164.810883][ T7836] netlink: 'syz.1.737': attribute type 29 has an invalid length. [ 165.041335][ T2531] bridge_slave_1: left allmulticast mode [ 165.065000][ T2531] bridge_slave_1: left promiscuous mode [ 165.078510][ T2531] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.130419][ T2531] bridge_slave_0: left allmulticast mode [ 165.136138][ T2531] bridge_slave_0: left promiscuous mode [ 165.167353][ T2531] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.524738][ T7868] __nla_validate_parse: 11 callbacks suppressed [ 165.524760][ T7868] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.747'. [ 165.543508][ T7868] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 165.802285][ T2531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.816224][ T2531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.829400][ T2531] bond0 (unregistering): Released all slaves [ 165.846855][ T7848] IPv6: sit1: Disabled Multicast RS [ 165.853612][ T7848] team0: Device sit1 is of different type [ 165.931392][ T7867] netlink: 28 bytes leftover after parsing attributes in process `syz.2.747'. [ 166.135414][ T7876] netlink: 'syz.2.750': attribute type 11 has an invalid length. [ 166.263474][ T7874] ieee802154 phy0 wpan0: encryption failed: -22 [ 166.280438][ T7874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.748'. [ 166.290240][ T7874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.748'. [ 166.321823][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.751'. [ 166.332416][ T7883] netlink: 'syz.2.752': attribute type 3 has an invalid length. [ 166.368937][ T7883] set match dimension is over the limit! [ 166.659062][ T5253] Bluetooth: hci1: command tx timeout [ 166.694736][ T7833] chnl_net:caif_netlink_parms(): no params data found [ 166.836933][ T2531] hsr_slave_0: left promiscuous mode [ 166.851316][ T2531] hsr_slave_1: left promiscuous mode [ 166.857687][ T2531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.873927][ T2531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.887697][ T2531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.895705][ T2531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.924335][ T2531] veth1_macvtap: left promiscuous mode [ 166.930510][ T2531] veth0_macvtap: left promiscuous mode [ 166.936190][ T2531] veth1_vlan: left promiscuous mode [ 166.943577][ T2531] veth0_vlan: left promiscuous mode [ 167.114129][ T7896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.755'. [ 167.682865][ T2531] team0 (unregistering): Port device team_slave_1 removed [ 167.741722][ T2531] team0 (unregistering): Port device team_slave_0 removed [ 167.783539][ T7915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.852940][ T7915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.243835][ T7899] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 168.265621][ T7908] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 168.485410][ T7925] ieee802154 phy0 wpan0: encryption failed: -22 [ 168.677049][ T7833] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.708071][ T7833] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.744203][ T5253] Bluetooth: hci1: command tx timeout [ 168.745787][ T7833] bridge_slave_0: entered allmulticast mode [ 168.772929][ T7833] bridge_slave_0: entered promiscuous mode [ 168.793791][ T7833] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.815008][ T7833] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.824865][ T7833] bridge_slave_1: entered allmulticast mode [ 168.832490][ T7833] bridge_slave_1: entered promiscuous mode [ 168.939801][ T7931] netlink: 332 bytes leftover after parsing attributes in process `syz.2.764'. [ 168.958713][ T7931] netlink: 'syz.2.764': attribute type 9 has an invalid length. [ 168.979565][ T7931] netlink: 108 bytes leftover after parsing attributes in process `syz.2.764'. [ 168.993385][ T7833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.009062][ T7931] netlink: 32 bytes leftover after parsing attributes in process `syz.2.764'. [ 169.031724][ T7833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.064860][ T7937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.767'. [ 169.209636][ T7833] team0: Port device team_slave_0 added [ 169.269318][ T7833] team0: Port device team_slave_1 added [ 169.373601][ T7833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.408036][ T7833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.453471][ T7833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.456171][ T7950] netlink: 'syz.3.772': attribute type 1 has an invalid length. [ 169.483576][ T7833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.508348][ T7950] netlink: 'syz.3.772': attribute type 1 has an invalid length. [ 169.521754][ T7833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.559256][ T7950] netlink: 'syz.3.772': attribute type 2 has an invalid length. [ 169.589257][ T7833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.602556][ T7957] IPVS: set_ctl: invalid protocol: 0 172.20.20.52:20001 [ 169.772632][ T7833] hsr_slave_0: entered promiscuous mode [ 169.794641][ T7833] hsr_slave_1: entered promiscuous mode [ 169.828121][ T7833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.835749][ T7833] Cannot create hsr debugfs directory [ 170.050641][ T7974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.126090][ T7974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.563967][ T29] audit: type=1107 audit(1725900687.096:2): pid=7986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 170.613757][ T29] audit: type=1107 audit(1725900687.106:3): pid=7986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 170.818543][ T5253] Bluetooth: hci1: command tx timeout [ 170.916160][ T7833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 170.976174][ T7833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 171.098826][ T7998] veth1: entered promiscuous mode [ 171.123207][ T7998] veth1: left promiscuous mode [ 171.273149][ T8012] netlink: 'syz.1.786': attribute type 3 has an invalid length. [ 171.329071][ T8006] __nla_validate_parse: 3 callbacks suppressed [ 171.329094][ T8006] netlink: 116 bytes leftover after parsing attributes in process `syz.0.783'. [ 171.366690][ T7833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 171.515705][ T7833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 171.622928][ T8019] netlink: 'syz.3.789': attribute type 12 has an invalid length. [ 171.652989][ T8019] netlink: 132 bytes leftover after parsing attributes in process `syz.3.789'. [ 171.686871][ T8024] netlink: 'syz.2.790': attribute type 1 has an invalid length. [ 171.822146][ T8024] netlink: 28 bytes leftover after parsing attributes in process `syz.2.790'. [ 171.850761][ T8024] bond1: entered allmulticast mode [ 171.906023][ T8024] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 171.967813][ T8024] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 171.993921][ T8041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.790'. [ 172.003536][ T8024] bond1: (slave ip6gre1): making interface the new active one [ 172.030838][ T8024] ip6gre1: entered allmulticast mode [ 172.052549][ T8024] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 172.122430][ T8040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.218665][ T8042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.320980][ T7833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.330987][ T8044] netlink: 16 bytes leftover after parsing attributes in process `syz.2.795'. [ 172.401941][ T7833] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.450281][ T2519] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.457658][ T2519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.517915][ T2519] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.525133][ T2519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.799446][ T8056] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.798'. [ 172.833679][ T8056] openvswitch: netlink: Actions may not be safe on all matching packets [ 172.909062][ T5253] Bluetooth: hci1: command tx timeout [ 173.000179][ T8064] netlink: 40 bytes leftover after parsing attributes in process `syz.0.799'. [ 173.070693][ T8064] netlink: 252 bytes leftover after parsing attributes in process `syz.0.799'. [ 173.120029][ T7833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.134058][ T8064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.189193][ T8064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.216317][ T8074] netlink: 72 bytes leftover after parsing attributes in process `syz.2.802'. [ 173.248362][ T8064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.268687][ T8064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.278891][ T8064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.290253][ T8064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.302774][ T8064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.313609][ T8064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.831276][ T8102] ieee802154 phy0 wpan0: encryption failed: -22 [ 174.321721][ T7833] veth0_vlan: entered promiscuous mode [ 174.386265][ T8115] netlink: 16 bytes leftover after parsing attributes in process `syz.0.812'. [ 174.452326][ T7833] veth1_vlan: entered promiscuous mode [ 174.591449][ T7833] veth0_macvtap: entered promiscuous mode [ 174.620627][ T7833] veth1_macvtap: entered promiscuous mode [ 174.720480][ T8124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.726609][ T7833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.795077][ T7833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.815723][ T7833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.836729][ T7833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.842550][ T8131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.856748][ T7833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.879240][ T7833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.890344][ T7833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.901256][ T7833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.914918][ T7833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.953274][ T7833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.965679][ T7833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.976568][ T7833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.994666][ T7833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.005680][ T7833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.020197][ T7833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.038102][ T7833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.051414][ T7833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.065141][ T7833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.136071][ T7833] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.166048][ T7833] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.186767][ T7833] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.195703][ T7833] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.407139][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.422453][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.491787][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.517997][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.615143][ T8159] netlink: 'syz.3.826': attribute type 10 has an invalid length. [ 175.689176][ T8159] geneve0: entered promiscuous mode [ 175.760922][ T8159] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 176.453433][ T8200] netlink: 'syz.0.840': attribute type 2 has an invalid length. [ 176.481026][ T8200] __nla_validate_parse: 6 callbacks suppressed [ 176.481046][ T8200] netlink: 16142 bytes leftover after parsing attributes in process `syz.0.840'. [ 176.518282][ T8203] netlink: 'syz.2.841': attribute type 30 has an invalid length. [ 176.591918][ T8208] IPVS: Scheduler module ip_vs_sip not found [ 176.711660][ T8219] netlink: 'syz.3.847': attribute type 4 has an invalid length. [ 176.729678][ T8219] netlink: 'syz.3.847': attribute type 1 has an invalid length. [ 176.745735][ T8219] netlink: 'syz.3.847': attribute type 7 has an invalid length. [ 176.799527][ T8222] openvswitch: netlink: Missing key (keys=100000040, expected=2000) [ 176.837143][ T29] audit: type=1107 audit(1725900693.366:4): pid=8218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Š63ú\›†m!öiN›íŠÉÍ‹ôEð~8§*ÔŽFEß@P7+¼kÜÖ' [ 177.003036][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.052078][ T8232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.849'. [ 177.517709][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.866041][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.914587][ T8246] netlink: 16 bytes leftover after parsing attributes in process `syz.0.854'. [ 177.968140][ T8246] netlink: 16 bytes leftover after parsing attributes in process `syz.0.854'. [ 178.135678][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.143120][ T8257] netlink: 'syz.1.857': attribute type 1 has an invalid length. [ 178.167743][ T8257] netlink: 9388 bytes leftover after parsing attributes in process `syz.1.857'. [ 178.215716][ T5250] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 178.233966][ T8254] ipt_REJECT: ECHOREPLY no longer supported. [ 178.246841][ T5250] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 178.256274][ T5250] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 178.267166][ T5250] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 178.277657][ T5250] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 178.296745][ T5250] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 178.595970][ T12] bridge_slave_1: left allmulticast mode [ 178.608280][ T12] bridge_slave_1: left promiscuous mode [ 178.614131][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.680359][ T12] bridge_slave_0: left allmulticast mode [ 178.686077][ T12] bridge_slave_0: left promiscuous mode [ 178.700087][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.326645][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.343588][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.354932][ T12] bond0 (unregistering): Released all slaves [ 179.368415][ T8276] netlink: 'syz.0.863': attribute type 8 has an invalid length. [ 179.385632][ T8282] netlink: 24 bytes leftover after parsing attributes in process `syz.2.861'. [ 179.406451][ T8289] netdevsim netdevsim3 ÿÿÿÿ: renamed from netdevsim0 [ 179.472913][ T8289] A link change request failed with some changes committed already. Interface ÿÿÿÿ may have been left with an inconsistent configuration, please check. [ 179.773681][ T8315] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 180.215098][ T8339] Cannot find del_set index 286 as target [ 180.271234][ T8343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.877'. [ 180.302334][ T8343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.877'. [ 180.340681][ T8347] netlink: 24 bytes leftover after parsing attributes in process `syz.3.878'. [ 180.418588][ T5253] Bluetooth: hci1: command tx timeout [ 180.429868][ T8261] chnl_net:caif_netlink_parms(): no params data found [ 180.592866][ T8357] netlink: 'syz.1.880': attribute type 11 has an invalid length. [ 180.834288][ T12] hsr_slave_0: left promiscuous mode [ 180.845492][ T12] hsr_slave_1: left promiscuous mode [ 180.872307][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.886278][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.901930][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.918096][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.978681][ T12] veth1_macvtap: left promiscuous mode [ 180.984291][ T12] veth0_macvtap: left promiscuous mode [ 180.998138][ T12] veth1_vlan: left promiscuous mode [ 181.014204][ T12] veth0_vlan: left promiscuous mode [ 181.244959][ T8381] ipt_REJECT: TCP_RESET invalid for non-tcp [ 181.718538][ T8405] netlink: 'syz.2.894': attribute type 11 has an invalid length. [ 181.745949][ T1851] IPVS: starting estimator thread 0... [ 181.753565][ T8406] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 181.811892][ T8409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.892'. [ 181.853770][ T8407] IPVS: using max 17 ests per chain, 40800 per kthread [ 181.866804][ T8410] netlink: 24 bytes leftover after parsing attributes in process `syz.3.892'. [ 182.076034][ T12] team0 (unregistering): Port device team_slave_1 removed [ 182.127190][ T12] team0 (unregistering): Port device team_slave_0 removed [ 182.508434][ T5253] Bluetooth: hci1: command tx timeout [ 182.692643][ T8401] netlink: 12 bytes leftover after parsing attributes in process `syz.3.892'. [ 182.738219][ T8261] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.758806][ T8261] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.776594][ T8261] bridge_slave_0: entered allmulticast mode [ 182.809326][ T8261] bridge_slave_0: entered promiscuous mode [ 182.840962][ T8261] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.870093][ T8261] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.890489][ T8261] bridge_slave_1: entered allmulticast mode [ 182.918783][ T8261] bridge_slave_1: entered promiscuous mode [ 183.132892][ T8261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.176347][ T8261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.182865][ T8435] netlink: 16 bytes leftover after parsing attributes in process `syz.3.900'. [ 183.441005][ T8261] team0: Port device team_slave_0 added [ 183.472307][ T8261] team0: Port device team_slave_1 added [ 183.580268][ T8261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.591521][ T8261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.620418][ T8449] netlink: 248 bytes leftover after parsing attributes in process `syz.2.906'. [ 183.631329][ T8261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.657640][ T8261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.675489][ T8261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.748024][ T8261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.850502][ T8261] hsr_slave_0: entered promiscuous mode [ 183.865655][ T8261] hsr_slave_1: entered promiscuous mode [ 183.881569][ T8261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.898402][ T8261] Cannot create hsr debugfs directory [ 183.976034][ T8465] netlink: 16 bytes leftover after parsing attributes in process `syz.2.911'. [ 184.183936][ T8471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.914'. [ 184.198356][ T8471] netlink: 256 bytes leftover after parsing attributes in process `syz.2.914'. [ 184.384820][ T8481] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.915'. [ 184.579169][ T5253] Bluetooth: hci1: command tx timeout [ 184.734170][ T8497] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.922'. [ 184.809628][ T8261] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 184.810021][ T8499] netlink: 'syz.2.924': attribute type 11 has an invalid length. [ 184.861469][ T8261] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 184.891466][ T8261] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 184.922350][ T8261] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 185.040673][ T8509] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 185.159679][ T8509] xt_socket: unknown flags 0x3c [ 185.184157][ T8261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.216207][ T8261] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.244502][ T2519] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.251783][ T2519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.300673][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.307999][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.327260][ T8520] --map-set only usable from mangle table [ 185.551978][ T8527] netlink: 'syz.0.934': attribute type 1 has an invalid length. [ 185.584362][ T8527] netlink: 'syz.0.934': attribute type 2 has an invalid length. [ 185.916357][ T8261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.103363][ T8560] veth1_to_team: Caught tx_queue_len zero misconfig [ 186.672342][ T5253] Bluetooth: hci1: command tx timeout [ 186.758758][ T8599] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 186.806862][ T8261] veth0_vlan: entered promiscuous mode [ 186.831277][ T8600] __nla_validate_parse: 1 callbacks suppressed [ 186.831296][ T8600] netlink: 16 bytes leftover after parsing attributes in process `syz.1.951'. [ 186.861246][ T8604] netlink: 12 bytes leftover after parsing attributes in process `syz.2.949'. [ 186.930970][ T8261] veth1_vlan: entered promiscuous mode [ 187.065855][ T8614] netlink: 'syz.2.956': attribute type 1 has an invalid length. [ 187.090144][ T8614] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 187.108854][ T8261] veth0_macvtap: entered promiscuous mode [ 187.181925][ T8261] veth1_macvtap: entered promiscuous mode [ 187.242506][ T8261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.280017][ T8261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.312441][ T8261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.338765][ T8261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.371397][ T8261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.400628][ T8261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.421084][ T8261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.448337][ T8261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.469952][ T8261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.477523][ T8623] IPv6: Can't replace route, no match found [ 187.534147][ T8261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.579311][ T8261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.600358][ T8261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.645937][ T8261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.683668][ T8261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.697768][ T8261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.702420][ T8647] xt_hashlimit: Unknown mode mask 115, kernel too old? [ 187.714139][ T8261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.729116][ T8261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.734111][ T8649] netlink: 24 bytes leftover after parsing attributes in process `syz.2.964'. [ 187.741250][ T8261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.814190][ T8261] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.829100][ T8261] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.840078][ T8261] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.853909][ T8261] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.872963][ T8653] netlink: 24 bytes leftover after parsing attributes in process `syz.0.968'. [ 187.940357][ T8657] netlink: 16 bytes leftover after parsing attributes in process `syz.2.969'. [ 188.046312][ T8659] netlink: 20 bytes leftover after parsing attributes in process `syz.0.970'. [ 188.067239][ T8659] openvswitch: netlink: Flow key attr not present in new flow. [ 188.079724][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.097284][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.165006][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.174279][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.417726][ T8674] netlink: 60 bytes leftover after parsing attributes in process `syz.2.975'. [ 188.596690][ T8682] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.979'. [ 188.637287][ T8682] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 188.655878][ T8676] netlink: 'syz.3.978': attribute type 29 has an invalid length. [ 188.674098][ T8683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.979'. [ 188.700416][ T8686] IPv6: Can't replace route, no match found [ 189.111608][ T8701] syzkaller0: create flow: hash 3305185857 index 3 [ 189.197556][ T8703] netlink: 20 bytes leftover after parsing attributes in process `syz.1.983'. [ 189.237078][ T8703] openvswitch: netlink: Flow key attr not present in new flow. [ 189.326425][ T8696] syzkaller0: delete flow: hash 3305185857 index 3 [ 189.460093][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.625223][ T5250] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 189.647385][ T5250] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 189.665349][ T5250] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 189.685394][ T5250] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 189.712687][ T5250] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 189.723571][ T5250] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 191.477176][ T8718] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:01 with invalid nss 1 [ 191.482891][ T8723] hsr0: entered promiscuous mode [ 191.552350][ T8720] hsr_slave_0: left promiscuous mode [ 191.563061][ T8720] hsr_slave_1: left promiscuous mode [ 191.651147][ T8733] netlink: 'syz.3.991': attribute type 4 has an invalid length. [ 191.753679][ T8734] netlink: 'syz.3.991': attribute type 4 has an invalid length. [ 191.780310][ T8735] netlink: 'syz.3.991': attribute type 4 has an invalid length. [ 191.798164][ T5253] Bluetooth: hci1: command tx timeout [ 192.049401][ T2519] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.064872][ T8752] __nla_validate_parse: 1 callbacks suppressed [ 192.064893][ T8752] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.996'. [ 192.089154][ T8752] netlink: zone id is out of range [ 192.094431][ T8752] netlink: zone id is out of range [ 192.118338][ T8752] netlink: zone id is out of range [ 192.136796][ T8752] netlink: zone id is out of range [ 192.160657][ T8753] IPv6: Can't replace route, no match found [ 192.164004][ T8752] netlink: zone id is out of range [ 192.185774][ T8752] netlink: zone id is out of range [ 192.261061][ T2519] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.373087][ T2519] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.467431][ T2519] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.584740][ T8716] chnl_net:caif_netlink_parms(): no params data found [ 192.669051][ T2519] bridge_slave_1: left allmulticast mode [ 192.674758][ T2519] bridge_slave_1: left promiscuous mode [ 192.680922][ T2519] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.691468][ T2519] bridge_slave_0: left allmulticast mode [ 192.697173][ T2519] bridge_slave_0: left promiscuous mode [ 192.703209][ T2519] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.160997][ T8765] netlink: 20 bytes leftover after parsing attributes in process `syz.2.998'. [ 193.179991][ T8765] net_ratelimit: 20 callbacks suppressed [ 193.180012][ T8765] openvswitch: netlink: Flow key attr not present in new flow. [ 193.331191][ T2519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.363798][ T2519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.376967][ T2519] bond0 (unregistering): Released all slaves [ 193.432509][ T5250] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 193.433676][ T8768] dvmrp1: entered allmulticast mode [ 193.457785][ T5250] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 193.469130][ T5250] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 193.486827][ T5250] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 193.496378][ T5250] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 193.514949][ T5250] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 193.729193][ T8716] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.744296][ T8716] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.753133][ T8716] bridge_slave_0: entered allmulticast mode [ 193.762384][ T8716] bridge_slave_0: entered promiscuous mode [ 193.808133][ T8716] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.815357][ T8716] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.837173][ T8716] bridge_slave_1: entered allmulticast mode [ 193.854344][ T8716] bridge_slave_1: entered promiscuous mode [ 193.858455][ T5253] Bluetooth: hci1: command tx timeout [ 194.131357][ T8716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.165184][ T8716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.219056][ T8802] IPv6: Can't replace route, no match found [ 194.400897][ T8716] team0: Port device team_slave_0 added [ 194.528717][ T8716] team0: Port device team_slave_1 added [ 194.596996][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.612963][ T8815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1011'. [ 194.642531][ T8812] x_tables: duplicate underflow at hook 2 [ 194.678677][ T8815] openvswitch: netlink: Flow actions attr not present in new flow. [ 194.737113][ T8716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.744876][ T8716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.772505][ T8716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.818531][ T2519] hsr_slave_0: left promiscuous mode [ 194.831093][ T2519] hsr_slave_1: left promiscuous mode [ 194.847847][ T2519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.855498][ T2519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.872004][ T2519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.886388][ T2519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.924029][ T2519] veth1_macvtap: left promiscuous mode [ 194.932271][ T2519] veth0_macvtap: left promiscuous mode [ 194.938197][ T2519] veth1_vlan: left promiscuous mode [ 194.943773][ T2519] veth0_vlan: left promiscuous mode [ 195.526693][ T2519] team0 (unregistering): Port device team_slave_1 removed [ 195.577222][ T2519] team0 (unregistering): Port device team_slave_0 removed [ 195.618204][ T5245] Bluetooth: hci3: command tx timeout [ 195.938225][ T5245] Bluetooth: hci1: command tx timeout [ 196.055539][ T8819] tipc: Enabling of bearer rejected, media not registered [ 196.071516][ T8716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.099712][ T8716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.149079][ T8716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.254304][ T8839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1017'. [ 196.286203][ T8835] netlink: 'syz.2.1019': attribute type 10 has an invalid length. [ 196.307013][ T8842] netlink: 'syz.1.1018': attribute type 4 has an invalid length. [ 196.393116][ T8716] hsr_slave_0: entered promiscuous mode [ 196.401533][ T8716] hsr_slave_1: entered promiscuous mode [ 196.413370][ T8716] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.423244][ T8716] Cannot create hsr debugfs directory [ 196.430550][ T8842] netlink: 'syz.1.1018': attribute type 4 has an invalid length. [ 196.506645][ T8846] netlink: 'syz.3.1021': attribute type 64 has an invalid length. [ 196.516473][ T8846] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1021'. [ 196.546149][ T8846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1021'. [ 196.556875][ T8846] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1021'. [ 196.619673][ T8846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1021'. [ 196.660074][ T5245] Bluetooth: hci0: command 0x0406 tx timeout [ 196.660877][ T54] Bluetooth: hci2: command 0x0401 tx timeout [ 196.792971][ T8854] Bluetooth: MGMT ver 1.23 [ 196.793732][ T8774] chnl_net:caif_netlink_parms(): no params data found [ 196.797468][ T8854] Bluetooth: hci3: invalid length 0, exp 2 for type 12 [ 197.007730][ T8867] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1025'. [ 197.141488][ T8875] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 197.316123][ T8880] netlink: 'syz.3.1028': attribute type 11 has an invalid length. [ 197.330904][ T8877] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1027'. [ 197.374143][ T8774] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.382013][ T8774] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.390079][ T8774] bridge_slave_0: entered allmulticast mode [ 197.397249][ T8774] bridge_slave_0: entered promiscuous mode [ 197.419245][ T8774] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.448081][ T8774] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.455411][ T8774] bridge_slave_1: entered allmulticast mode [ 197.471379][ T8774] bridge_slave_1: entered promiscuous mode [ 197.561044][ T8716] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.659913][ T8894] netlink: 'syz.2.1033': attribute type 49 has an invalid length. [ 197.698251][ T5250] Bluetooth: hci3: command tx timeout [ 197.726932][ T8774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.807440][ T8716] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.842589][ T8774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.916622][ T8774] team0: Port device team_slave_0 added [ 197.980662][ T8716] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.011552][ T8774] team0: Port device team_slave_1 added [ 198.018646][ T5250] Bluetooth: hci1: command tx timeout [ 198.116463][ T8909] netlink: 'syz.3.1038': attribute type 1 has an invalid length. [ 198.136272][ T8716] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.165325][ T8909] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1038'. [ 198.204498][ T8774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.215778][ T8774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.251171][ T8774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.281459][ T8774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.292077][ T8774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.323242][ T8774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.608229][ T8774] hsr_slave_0: entered promiscuous mode [ 198.621104][ T8774] hsr_slave_1: entered promiscuous mode [ 198.629335][ T8774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.637012][ T8774] Cannot create hsr debugfs directory [ 198.643635][ T8922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1040'. [ 198.726053][ T8716] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 198.757379][ T8716] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 198.775576][ T8716] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 198.795896][ T8716] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 198.907661][ T8927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1042'. [ 199.106586][ T8932] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1044'. [ 199.294531][ T8716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.376793][ T8716] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.430584][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.437818][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.494075][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.501324][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.769410][ T8774] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 199.778252][ T5250] Bluetooth: hci3: command tx timeout [ 199.801102][ T8774] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 200.611309][ T8970] xt_l2tp: v2 doesn't support IP mode [ 200.628997][ T8970] IPVS: length: 157 != 24 [ 201.356337][ T8774] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 201.428678][ T8774] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 201.444296][ T8979] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1055'. [ 201.807092][ T8774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.858224][ T5250] Bluetooth: hci3: command tx timeout [ 201.885943][ T8774] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.906743][ T8995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1060'. [ 201.925082][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.932343][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.964466][ T8996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1060'. [ 202.005170][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.012466][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.064736][ T8716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.233826][ T9004] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1064'. [ 202.244858][ T9001] ax25_connect(): syz.2.1062 uses autobind, please contact jreuter@yaina.de [ 202.353375][ T8716] veth0_vlan: entered promiscuous mode [ 202.388505][ T8716] veth1_vlan: entered promiscuous mode [ 202.437635][ T9010] IPv6: sit4: Disabled Multicast RS [ 202.573339][ T8716] veth0_macvtap: entered promiscuous mode [ 202.624726][ T8716] veth1_macvtap: entered promiscuous mode [ 202.694732][ T9021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.717068][ T8716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.731119][ T8716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.745025][ T8716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.756331][ T8716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.766711][ T8716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.778402][ T8716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.796229][ T8716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.807827][ T8716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.820065][ T8716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.836655][ T9023] netlink: 'syz.1.1069': attribute type 39 has an invalid length. [ 202.860968][ T9023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1069'. [ 202.890450][ T9023] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.900170][ T9023] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.960521][ T8774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.981997][ T8716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.018019][ T8716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.037952][ T8716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.059805][ T8716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.077922][ T8716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.096359][ T8716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.106396][ T8716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.117451][ T8716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.130675][ T8716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.146564][ T8716] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.156208][ T8716] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.165249][ T8716] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.174151][ T8716] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.439234][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.447120][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.545576][ T2519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.575421][ T2519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.649171][ T9055] netlink: 'syz.2.1075': attribute type 10 has an invalid length. [ 203.723911][ T9055] team0: Cannot enslave team device to itself [ 203.825583][ T9060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1077'. [ 203.875495][ T9059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1076'. [ 203.903361][ T9060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1077'. [ 204.042908][ T8774] veth0_vlan: entered promiscuous mode [ 204.093178][ T8774] veth1_vlan: entered promiscuous mode [ 204.192655][ T8774] veth0_macvtap: entered promiscuous mode [ 204.224201][ T8774] veth1_macvtap: entered promiscuous mode [ 204.272319][ T9077] netlink: 'syz.1.1083': attribute type 4 has an invalid length. [ 204.297407][ T8774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.319790][ T8774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.339744][ T8774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.362159][ T8774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.379861][ T8774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.397172][ T8774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.408130][ T8774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.421350][ T8774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.432137][ T8774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.452709][ T8774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.485961][ T8774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.544796][ T8774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.565560][ T8774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.581185][ T8774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.595417][ T8774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.605510][ T8774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.624456][ T8774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.636967][ T8774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.648317][ T8774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.671244][ T8774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.690290][ T8774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.706346][ T9098] block nbd2: not configured, cannot reconfigure [ 204.716195][ T8774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.911439][ T2531] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.027804][ T8774] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.048524][ T8774] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.063130][ T8774] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.081783][ T8774] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.186791][ T2531] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.541995][ T2531] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.809490][ T2531] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.829087][ T5253] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 205.840161][ T5253] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 205.850185][ T5253] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 205.865192][ T5253] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 205.866443][ T9120] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 205.908141][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.916224][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.916285][ T5253] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 205.936848][ T5253] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 205.993612][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.031026][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.173422][ T2531] bridge_slave_1: left allmulticast mode [ 206.191228][ T2531] bridge_slave_1: left promiscuous mode [ 206.211190][ T2531] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.275780][ T2531] bridge_slave_0: left allmulticast mode [ 206.288408][ T2531] bridge_slave_0: left promiscuous mode [ 206.300506][ T2531] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.979371][ T2531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.992483][ T2531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.004648][ T2531] bond0 (unregistering): Released all slaves [ 207.579699][ T9157] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1101'. [ 208.019688][ T5253] Bluetooth: hci1: command tx timeout [ 208.413166][ T9126] chnl_net:caif_netlink_parms(): no params data found [ 208.723619][ T2531] hsr_slave_0: left promiscuous mode [ 208.737036][ T2531] hsr_slave_1: left promiscuous mode [ 208.758965][ T2531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.766555][ T2531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.795181][ T2531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.812023][ T2531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.939677][ T2531] veth1_macvtap: left promiscuous mode [ 208.945311][ T2531] veth0_macvtap: left promiscuous mode [ 208.978503][ T2531] veth1_vlan: left promiscuous mode [ 208.983916][ T2531] veth0_vlan: left promiscuous mode [ 209.378960][ T5250] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 209.388775][ T5250] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 209.400180][ T5250] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 209.437541][ T5250] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 209.446730][ T5250] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 209.456538][ T5250] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 209.918594][ T2531] team0 (unregistering): Port device team_slave_1 removed [ 209.981600][ T2531] team0 (unregistering): Port device team_slave_0 removed [ 210.098957][ T5253] Bluetooth: hci1: command tx timeout [ 210.503177][ T9175] netlink: 'syz.1.1105': attribute type 4 has an invalid length. [ 210.568914][ T9126] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.576138][ T9126] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.607115][ T9126] bridge_slave_0: entered allmulticast mode [ 210.618424][ T9126] bridge_slave_0: entered promiscuous mode [ 210.656789][ T9126] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.680018][ T9126] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.694841][ T9126] bridge_slave_1: entered allmulticast mode [ 210.703203][ T9126] bridge_slave_1: entered promiscuous mode [ 210.748839][ T9192] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1109'. [ 210.774949][ T9196] xt_TPROXY: Can be used only with -p tcp or -p udp [ 210.782697][ T9194] netlink: set zone limit has 4 unknown bytes [ 210.849056][ T9194] netlink: set zone limit has 4 unknown bytes [ 210.876298][ T9126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.941392][ T9126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.162470][ T9208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.213129][ T9126] team0: Port device team_slave_0 added [ 211.239593][ T9210] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1113'. [ 211.273118][ T9126] team0: Port device team_slave_1 added [ 211.355165][ T9126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.363083][ T9126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.391340][ T9126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.415148][ T9126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.430986][ T9126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.457796][ T9126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.538605][ T5253] Bluetooth: hci3: command tx timeout [ 211.622744][ T2531] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.748804][ T9220] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 211.836737][ T2531] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.879811][ T9126] hsr_slave_0: entered promiscuous mode [ 211.899664][ T9126] hsr_slave_1: entered promiscuous mode [ 211.910665][ T9126] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.922935][ T9126] Cannot create hsr debugfs directory [ 211.929853][ T9235] netlink: 'syz.2.1119': attribute type 4 has an invalid length. [ 211.997084][ T2531] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.033299][ T9234] netlink: 'syz.2.1119': attribute type 4 has an invalid length. [ 212.079747][ T9241] xfrm1: entered allmulticast mode [ 212.169404][ T2531] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.181382][ T5253] Bluetooth: hci1: command tx timeout [ 212.312855][ T9249] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1124'. [ 212.324166][ T9246] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1123'. [ 212.357224][ T9249] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1124'. [ 212.494477][ T9254] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1126'. [ 212.529540][ T9257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.550010][ T9257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.564743][ T2531] bridge_slave_1: left allmulticast mode [ 212.579699][ T2531] bridge_slave_1: left promiscuous mode [ 212.585486][ T2531] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.599570][ T2531] bridge_slave_0: left allmulticast mode [ 212.605939][ T2531] bridge_slave_0: left promiscuous mode [ 212.612785][ T2531] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.855422][ T9261] nft_compat: unsupported protocol 0 [ 213.046571][ T2531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.059139][ T2531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.072226][ T2531] bond0 (unregistering): Released all slaves [ 213.118886][ T9182] chnl_net:caif_netlink_parms(): no params data found [ 213.287543][ T9267] x_tables: duplicate underflow at hook 1 [ 213.371114][ T9269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1130'. [ 213.435765][ T9269] team0: entered promiscuous mode [ 213.441365][ T9269] team_slave_0: entered promiscuous mode [ 213.447566][ T9269] team_slave_1: entered promiscuous mode [ 213.497827][ T9269] team_slave_0: entered allmulticast mode [ 213.529805][ T9269] team0: Port device team_slave_0 removed [ 213.599712][ T9268] team0: left promiscuous mode [ 213.605001][ T9268] team_slave_1: left promiscuous mode [ 213.618278][ T5253] Bluetooth: hci3: command tx timeout [ 213.666577][ T9182] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.696923][ T9182] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.728810][ T9182] bridge_slave_0: entered allmulticast mode [ 213.757285][ T9182] bridge_slave_0: entered promiscuous mode [ 213.766937][ T9282] netlink: 'syz.2.1133': attribute type 7 has an invalid length. [ 213.784620][ T9182] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.798429][ T9182] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.805756][ T9182] bridge_slave_1: entered allmulticast mode [ 213.824312][ T9182] bridge_slave_1: entered promiscuous mode [ 213.883800][ T9282] Êü: entered promiscuous mode [ 213.923415][ T9289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1135'. [ 213.951186][ T9289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1135'. [ 214.065881][ T9280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1134'. [ 214.170764][ T9182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.201970][ T9182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.258154][ T5253] Bluetooth: hci1: command tx timeout [ 214.390293][ T9182] team0: Port device team_slave_0 added [ 214.411676][ T9182] team0: Port device team_slave_1 added [ 214.488882][ T9126] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 214.525632][ T9126] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 214.539859][ T9182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.547712][ T9182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.589088][ T9182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.602823][ T9126] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 214.719053][ T9182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.726059][ T9182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.762167][ T9182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.785420][ T9126] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 214.817219][ T2531] hsr_slave_0: left promiscuous mode [ 214.827364][ T2531] hsr_slave_1: left promiscuous mode [ 214.834170][ T2531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.842389][ T2531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.852796][ T2531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.861307][ T2531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.894582][ T2531] veth1_macvtap: left promiscuous mode [ 214.902036][ T2531] veth0_macvtap: left promiscuous mode [ 214.907813][ T2531] veth1_vlan: left promiscuous mode [ 214.913641][ T2531] veth0_vlan: left promiscuous mode [ 215.561689][ T2531] team0 (unregistering): Port device team_slave_1 removed [ 215.612340][ T2531] team0 (unregistering): Port device team_slave_0 removed [ 215.708811][ T5253] Bluetooth: hci3: command tx timeout [ 216.272381][ T9182] hsr_slave_0: entered promiscuous mode [ 216.295243][ T9182] hsr_slave_1: entered promiscuous mode [ 216.304620][ T9182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.314341][ T9182] Cannot create hsr debugfs directory [ 216.383372][ T9314] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1141'. [ 216.874088][ T9323] macvtap0: entered promiscuous mode [ 216.889896][ T9323] macvtap0: left promiscuous mode [ 217.175364][ T9126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.316567][ T9126] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.356782][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.363990][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.437402][ T2531] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.444681][ T2531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.481881][ T9341] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 217.537451][ T9338] netlink: 'syz.3.1150': attribute type 10 has an invalid length. [ 217.546969][ T9338] netdevsim netdevsim3 ÿÿÿÿ: left promiscuous mode [ 217.561774][ T9338] bond0: (slave ÿÿÿÿ): Enslaving as an active interface with an up link [ 217.696075][ T9346] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1152'. [ 217.707129][ T9346] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1152'. [ 217.737768][ T9347] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1152'. [ 217.758839][ T9347] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1152'. [ 217.778285][ T5253] Bluetooth: hci3: command tx timeout [ 218.002750][ T9182] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 218.032743][ T9182] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 218.068004][ T9182] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 218.103610][ T9182] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 218.309961][ T9368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1158'. [ 218.427535][ T9126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.632515][ T9126] veth0_vlan: entered promiscuous mode [ 218.684066][ T9182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.704435][ T9126] veth1_vlan: entered promiscuous mode [ 218.757458][ T9182] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.801672][ T2519] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.808955][ T2519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.866665][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.873919][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.938342][ T9126] veth0_macvtap: entered promiscuous mode [ 218.961879][ T9126] veth1_macvtap: entered promiscuous mode [ 219.115250][ T9126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.146686][ T9126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.178684][ T9126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.209397][ T9126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.240851][ T9126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.269035][ T9126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.288025][ T9126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.319189][ T9126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.352157][ T9126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.387610][ T9126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.411124][ T9126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.422172][ T9126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.445598][ T9126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.456625][ T9126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.479316][ T9126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.506601][ T9126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.537318][ T9126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.579929][ T9126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.612351][ T9126] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.648243][ T9126] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.657018][ T9126] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.681359][ T9126] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.796323][ T9182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.947257][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.978163][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.055304][ T2531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.072708][ T2531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.585203][ T9451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1173'. [ 220.670622][ T9182] veth0_vlan: entered promiscuous mode [ 220.710710][ T9182] veth1_vlan: entered promiscuous mode [ 220.853690][ T9182] veth0_macvtap: entered promiscuous mode [ 220.883123][ T9182] veth1_macvtap: entered promiscuous mode [ 220.941690][ T9182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.952557][ T9182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.964560][ T9182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.976386][ T9182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.987532][ T9182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.001594][ T9182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.011559][ T9182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.025358][ T9182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.036419][ T9182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.050444][ T9182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.064993][ T9182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.107752][ T9465] ------------[ cut here ]------------ [ 221.113663][ T9465] WARNING: CPU: 1 PID: 9465 at kernel/softirq.c:362 __local_bh_enable_ip+0x1be/0x200 [ 221.123274][ T9465] Modules linked in: [ 221.127289][ T9465] CPU: 1 UID: 0 PID: 9465 Comm: syz.1.1176 Not tainted 6.11.0-rc6-syzkaller-00179-gb3c9e65eb227 #0 [ 221.137998][ T9465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 221.148087][ T9465] RIP: 0010:__local_bh_enable_ip+0x1be/0x200 [ 221.154094][ T9465] Code: 3b 44 24 60 75 52 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 90 0f 0b 90 e9 ca fe ff ff e8 55 00 00 00 eb 9c 90 <0f> 0b 90 e9 fa fe ff ff 48 c7 c1 cc a2 18 90 80 e1 07 80 c1 03 38 [ 221.173723][ T9465] RSP: 0018:ffffc9000258ef40 EFLAGS: 00010046 [ 221.179810][ T9465] RAX: 0000000000000000 RBX: 1ffff920004b1dec RCX: ffffc9000258ef03 [ 221.187788][ T9465] RDX: 0000000000000005 RSI: 0000000000000200 RDI: ffffffff89877b3a [ 221.195768][ T9465] RBP: ffffc9000258eff0 R08: ffffffff9018706f R09: 1ffffffff2030e0d [ 221.203753][ T9465] R10: dffffc0000000000 R11: fffffbfff2030e0e R12: dffffc0000000000 [ 221.212001][ T9465] R13: 1ffff1100fc76220 R14: ffffc9000258ef80 R15: 0000000000000200 [ 221.219987][ T9465] FS: 00007fdb97ecd6c0(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 221.228928][ T9465] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 221.235522][ T9465] CR2: 00007ff4e4d042d8 CR3: 000000002566e000 CR4: 00000000003506f0 [ 221.243512][ T9465] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 221.251519][ T9465] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 221.259501][ T9465] Call Trace: [ 221.262789][ T9465] [ 221.265726][ T9465] ? __warn+0x163/0x4e0 [ 221.269897][ T9465] ? __local_bh_enable_ip+0x1be/0x200 [ 221.275375][ T9465] ? report_bug+0x2b3/0x500 [ 221.279904][ T9465] ? __local_bh_enable_ip+0x1be/0x200 [ 221.285320][ T9465] ? handle_bug+0x3e/0x70 [ 221.289662][ T9465] ? exc_invalid_op+0x1a/0x50 [ 221.294373][ T9465] ? asm_exc_invalid_op+0x1a/0x20 [ 221.299422][ T9465] ? __dev_queue_xmit+0x2da/0x3e90 [ 221.304560][ T9465] ? __local_bh_enable_ip+0x1be/0x200 [ 221.309965][ T9465] ? dev_hard_start_xmit+0x773/0x7e0 [ 221.315267][ T9465] ? __dev_queue_xmit+0x2da/0x3e90 [ 221.320394][ T9465] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 221.326133][ T9465] ? __dev_queue_xmit+0x2da/0x3e90 [ 221.331259][ T9465] __dev_queue_xmit+0x1763/0x3e90 [ 221.336382][ T9465] ? kasan_save_track+0x51/0x80 [ 221.341282][ T9465] ? ieee80211_do_stop+0x13d9/0x1f40 [ 221.346579][ T9465] ? cfg80211_change_iface+0x782/0xf30 [ 221.352050][ T9465] ? wext_ioctl_dispatch+0x58e/0x640 [ 221.357357][ T9465] ? __dev_queue_xmit+0x2da/0x3e90 [ 221.362486][ T9465] ? __se_sys_ioctl+0xfc/0x170 [ 221.367265][ T9465] ? do_syscall_64+0xf3/0x230 [ 221.372040][ T9465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.378134][ T9465] ? __pfx___dev_queue_xmit+0x10/0x10 [ 221.383554][ T9465] ? __copy_skb_header+0x437/0x5b0 [ 221.388690][ T9465] ? __asan_memcpy+0x40/0x70 [ 221.393316][ T9465] ? skb_clone+0x240/0x390 [ 221.397835][ T9465] __netlink_deliver_tap+0x54d/0x7c0 [ 221.403149][ T9465] ? netlink_deliver_tap+0x2e/0x1b0 [ 221.408377][ T9465] netlink_deliver_tap+0x19d/0x1b0 [ 221.413515][ T9465] netlink_broadcast_filtered+0xe60/0x12a0 [ 221.419436][ T9465] genlmsg_multicast_netns+0x93/0xd0 [ 221.424781][ T9465] nl80211_frame_tx_status+0x8fa/0xda0 [ 221.430281][ T9465] ? __pfx_nl80211_frame_tx_status+0x10/0x10 [ 221.436274][ T9465] ? do_raw_spin_unlock+0x13c/0x8b0 [ 221.441489][ T9465] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 221.447409][ T9465] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 221.453859][ T9465] ? ieee80211_report_used_skb+0x1621/0x2470 [ 221.459860][ T9465] ieee80211_report_used_skb+0x19eb/0x2470 [ 221.465702][ T9465] ? __pfx_ieee80211_report_used_skb+0x10/0x10 [ 221.471879][ T9465] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 221.477360][ T9465] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 221.483281][ T9465] ieee80211_free_txskb+0x24/0x40 [ 221.488426][ T9465] ieee80211_do_stop+0x13d9/0x1f40 [ 221.493561][ T9465] ? __ieee80211_stop_queue+0x1fe/0x460 [ 221.499126][ T9465] ? _find_next_bit+0xec/0x120 [ 221.503915][ T9465] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 221.509395][ T9465] ? ieee80211_stop_vif_queues+0x15b/0x1a0 [ 221.515306][ T9465] ? __pfx_ieee80211_stop_vif_queues+0x10/0x10 [ 221.521481][ T9465] ? ieee80211_check_concurrent_iface+0x70e/0x7e0 [ 221.528013][ T9465] ieee80211_if_change_type+0x4cd/0xad0 [ 221.533611][ T9465] ieee80211_change_iface+0xd2/0x4f0 [ 221.538917][ T9465] ? cfg80211_mlme_purge_registrations+0x1fa/0x230 [ 221.545436][ T9465] cfg80211_change_iface+0x782/0xf30 [ 221.550746][ T9465] cfg80211_wext_siwmode+0x1bb/0x290 [ 221.556047][ T9465] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 221.561953][ T9465] ? __pfx___mutex_lock+0x10/0x10 [ 221.566993][ T9465] ? full_name_hash+0x93/0xe0 [ 221.571708][ T9465] ioctl_standard_call+0xe3/0x290 [ 221.576846][ T9465] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 221.582689][ T9465] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 221.588599][ T9465] wext_ioctl_dispatch+0x58e/0x640 [ 221.593730][ T9465] ? __pfx_ioctl_standard_call+0x10/0x10 [ 221.599373][ T9465] ? __pfx_ioctl_private_call+0x10/0x10 [ 221.604933][ T9465] ? __pfx_wext_ioctl_dispatch+0x10/0x10 [ 221.610587][ T9465] ? __might_fault+0xc6/0x120 [ 221.615300][ T9465] wext_handle_ioctl+0x15f/0x270 [ 221.620261][ T9465] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 221.625759][ T9465] sock_ioctl+0x17f/0x8e0 [ 221.630115][ T9465] ? __pfx_sock_ioctl+0x10/0x10 [ 221.634995][ T9465] ? __fget_files+0x29/0x470 [ 221.639602][ T9465] ? __fget_files+0x3f6/0x470 [ 221.644293][ T9465] ? __fget_files+0x29/0x470 [ 221.648908][ T9465] ? bpf_lsm_file_ioctl+0x9/0x10 [ 221.653866][ T9465] ? security_file_ioctl+0x87/0xb0 [ 221.658999][ T9465] ? __pfx_sock_ioctl+0x10/0x10 [ 221.663873][ T9465] __se_sys_ioctl+0xfc/0x170 [ 221.668484][ T9465] do_syscall_64+0xf3/0x230 [ 221.673003][ T9465] ? clear_bhb_loop+0x35/0x90 [ 221.677786][ T9465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.683697][ T9465] RIP: 0033:0x7fdb9717def9 [ 221.688123][ T9465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.707788][ T9465] RSP: 002b:00007fdb97ecd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 221.716239][ T9465] RAX: ffffffffffffffda RBX: 00007fdb97335f80 RCX: 00007fdb9717def9 [ 221.724225][ T9465] RDX: 0000000020000000 RSI: 0000000000008b06 RDI: 0000000000000003 [ 221.732205][ T9465] RBP: 00007fdb971f09f6 R08: 0000000000000000 R09: 0000000000000000 [ 221.740187][ T9465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.748167][ T9465] R13: 0000000000000000 R14: 00007fdb97335f80 R15: 00007ffd09c84868 [ 221.756169][ T9465] [ 221.759210][ T9465] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 221.766515][ T9465] CPU: 1 UID: 0 PID: 9465 Comm: syz.1.1176 Not tainted 6.11.0-rc6-syzkaller-00179-gb3c9e65eb227 #0 [ 221.777214][ T9465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 221.787328][ T9465] Call Trace: [ 221.790620][ T9465] [ 221.793562][ T9465] dump_stack_lvl+0x241/0x360 [ 221.798288][ T9465] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.803503][ T9465] ? __pfx__printk+0x10/0x10 [ 221.808116][ T9465] ? vscnprintf+0x5d/0x90 [ 221.812463][ T9465] panic+0x349/0x860 [ 221.816371][ T9465] ? __warn+0x172/0x4e0 [ 221.820547][ T9465] ? __pfx_panic+0x10/0x10 [ 221.824993][ T9465] __warn+0x346/0x4e0 [ 221.829165][ T9465] ? __local_bh_enable_ip+0x1be/0x200 [ 221.834571][ T9465] report_bug+0x2b3/0x500 [ 221.838924][ T9465] ? __local_bh_enable_ip+0x1be/0x200 [ 221.844329][ T9465] handle_bug+0x3e/0x70 [ 221.848496][ T9465] exc_invalid_op+0x1a/0x50 [ 221.853014][ T9465] asm_exc_invalid_op+0x1a/0x20 [ 221.857887][ T9465] RIP: 0010:__local_bh_enable_ip+0x1be/0x200 [ 221.863898][ T9465] Code: 3b 44 24 60 75 52 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 90 0f 0b 90 e9 ca fe ff ff e8 55 00 00 00 eb 9c 90 <0f> 0b 90 e9 fa fe ff ff 48 c7 c1 cc a2 18 90 80 e1 07 80 c1 03 38 [ 221.883606][ T9465] RSP: 0018:ffffc9000258ef40 EFLAGS: 00010046 [ 221.889691][ T9465] RAX: 0000000000000000 RBX: 1ffff920004b1dec RCX: ffffc9000258ef03 [ 221.897672][ T9465] RDX: 0000000000000005 RSI: 0000000000000200 RDI: ffffffff89877b3a [ 221.905649][ T9465] RBP: ffffc9000258eff0 R08: ffffffff9018706f R09: 1ffffffff2030e0d [ 221.913643][ T9465] R10: dffffc0000000000 R11: fffffbfff2030e0e R12: dffffc0000000000 [ 221.921621][ T9465] R13: 1ffff1100fc76220 R14: ffffc9000258ef80 R15: 0000000000000200 [ 221.929622][ T9465] ? __dev_queue_xmit+0x2da/0x3e90 [ 221.934759][ T9465] ? dev_hard_start_xmit+0x773/0x7e0 [ 221.940071][ T9465] ? __dev_queue_xmit+0x2da/0x3e90 [ 221.945218][ T9465] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 221.950978][ T9465] ? __dev_queue_xmit+0x2da/0x3e90 [ 221.956130][ T9465] __dev_queue_xmit+0x1763/0x3e90 [ 221.961217][ T9465] ? kasan_save_track+0x51/0x80 [ 221.966100][ T9465] ? ieee80211_do_stop+0x13d9/0x1f40 [ 221.971398][ T9465] ? cfg80211_change_iface+0x782/0xf30 [ 221.976874][ T9465] ? wext_ioctl_dispatch+0x58e/0x640 [ 221.982183][ T9465] ? __dev_queue_xmit+0x2da/0x3e90 [ 221.987316][ T9465] ? __se_sys_ioctl+0xfc/0x170 [ 221.992269][ T9465] ? do_syscall_64+0xf3/0x230 [ 221.996961][ T9465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.003049][ T9465] ? __pfx___dev_queue_xmit+0x10/0x10 [ 222.008453][ T9465] ? __copy_skb_header+0x437/0x5b0 [ 222.013587][ T9465] ? __asan_memcpy+0x40/0x70 [ 222.018215][ T9465] ? skb_clone+0x240/0x390 [ 222.022663][ T9465] __netlink_deliver_tap+0x54d/0x7c0 [ 222.028000][ T9465] ? netlink_deliver_tap+0x2e/0x1b0 [ 222.033319][ T9465] netlink_deliver_tap+0x19d/0x1b0 [ 222.038488][ T9465] netlink_broadcast_filtered+0xe60/0x12a0 [ 222.044375][ T9465] genlmsg_multicast_netns+0x93/0xd0 [ 222.049719][ T9465] nl80211_frame_tx_status+0x8fa/0xda0 [ 222.055228][ T9465] ? __pfx_nl80211_frame_tx_status+0x10/0x10 [ 222.061244][ T9465] ? do_raw_spin_unlock+0x13c/0x8b0 [ 222.066562][ T9465] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 222.072487][ T9465] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 222.078864][ T9465] ? ieee80211_report_used_skb+0x1621/0x2470 [ 222.084865][ T9465] ieee80211_report_used_skb+0x19eb/0x2470 [ 222.090705][ T9465] ? __pfx_ieee80211_report_used_skb+0x10/0x10 [ 222.096885][ T9465] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 222.102373][ T9465] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 222.108295][ T9465] ieee80211_free_txskb+0x24/0x40 [ 222.113358][ T9465] ieee80211_do_stop+0x13d9/0x1f40 [ 222.118683][ T9465] ? __ieee80211_stop_queue+0x1fe/0x460 [ 222.124262][ T9465] ? _find_next_bit+0xec/0x120 [ 222.129059][ T9465] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 222.134534][ T9465] ? ieee80211_stop_vif_queues+0x15b/0x1a0 [ 222.140484][ T9465] ? __pfx_ieee80211_stop_vif_queues+0x10/0x10 [ 222.146663][ T9465] ? ieee80211_check_concurrent_iface+0x70e/0x7e0 [ 222.153222][ T9465] ieee80211_if_change_type+0x4cd/0xad0 [ 222.158815][ T9465] ieee80211_change_iface+0xd2/0x4f0 [ 222.164206][ T9465] ? cfg80211_mlme_purge_registrations+0x1fa/0x230 [ 222.170743][ T9465] cfg80211_change_iface+0x782/0xf30 [ 222.176093][ T9465] cfg80211_wext_siwmode+0x1bb/0x290 [ 222.181415][ T9465] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 222.187245][ T9465] ? __pfx___mutex_lock+0x10/0x10 [ 222.192297][ T9465] ? full_name_hash+0x93/0xe0 [ 222.196997][ T9465] ioctl_standard_call+0xe3/0x290 [ 222.202035][ T9465] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 222.207854][ T9465] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 222.213709][ T9465] wext_ioctl_dispatch+0x58e/0x640 [ 222.218880][ T9465] ? __pfx_ioctl_standard_call+0x10/0x10 [ 222.224524][ T9465] ? __pfx_ioctl_private_call+0x10/0x10 [ 222.230091][ T9465] ? __pfx_wext_ioctl_dispatch+0x10/0x10 [ 222.236003][ T9465] ? __might_fault+0xc6/0x120 [ 222.240712][ T9465] wext_handle_ioctl+0x15f/0x270 [ 222.245712][ T9465] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 222.251203][ T9465] sock_ioctl+0x17f/0x8e0 [ 222.255555][ T9465] ? __pfx_sock_ioctl+0x10/0x10 [ 222.260427][ T9465] ? __fget_files+0x29/0x470 [ 222.265040][ T9465] ? __fget_files+0x3f6/0x470 [ 222.269749][ T9465] ? __fget_files+0x29/0x470 [ 222.274363][ T9465] ? bpf_lsm_file_ioctl+0x9/0x10 [ 222.279322][ T9465] ? security_file_ioctl+0x87/0xb0 [ 222.284448][ T9465] ? __pfx_sock_ioctl+0x10/0x10 [ 222.289319][ T9465] __se_sys_ioctl+0xfc/0x170 [ 222.293924][ T9465] do_syscall_64+0xf3/0x230 [ 222.298454][ T9465] ? clear_bhb_loop+0x35/0x90 [ 222.303160][ T9465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.309072][ T9465] RIP: 0033:0x7fdb9717def9 [ 222.313502][ T9465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.333145][ T9465] RSP: 002b:00007fdb97ecd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 222.341667][ T9465] RAX: ffffffffffffffda RBX: 00007fdb97335f80 RCX: 00007fdb9717def9 [ 222.349649][ T9465] RDX: 0000000020000000 RSI: 0000000000008b06 RDI: 0000000000000003 [ 222.357627][ T9465] RBP: 00007fdb971f09f6 R08: 0000000000000000 R09: 0000000000000000 [ 222.365602][ T9465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.373577][ T9465] R13: 0000000000000000 R14: 00007fdb97335f80 R15: 00007ffd09c84868 [ 222.381661][ T9465] [ 222.385188][ T9465] Kernel Offset: disabled [ 222.389642][ T9465] Rebooting in 86400 seconds..