last executing test programs: 58.5411396s ago: executing program 1 (id=2511): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f0000000300)={0x2, 0x0, @broadcast}, 0x10) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 64) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000868000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) mmap(&(0x7f00008a3000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0x0) mmap(&(0x7f00004e7000/0x2000)=nil, 0x2000, 0x0, 0x13, r5, 0x0) (async) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) (async, rerun: 64) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (rerun: 64) mmap(&(0x7f0000616000/0x3000)=nil, 0x3000, 0x0, 0x13, r6, 0x0) (async) mmap(&(0x7f0000867000/0x3000)=nil, 0x3000, 0x0, 0x11, r7, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) (async) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async, rerun: 32) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) connect$inet(r1, &(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$nfc(&(0x7f0000000c80), r0) (rerun: 64) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000b00), r0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x90) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000340)={0x0, 0xfffffffffffffcf7, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="0100000000200000000002000000080001"], 0x1c}}, 0x0) (async) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000040)) (async) ioctl$PPPIOCSACTIVE(r10, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) 58.440221091s ago: executing program 1 (id=2515): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bridge\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@RTM_GETMDB={0x18, 0x56, 0x1, 0x0, 0x0, {0x7, r2}}, 0x18}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r7, 0x65, 0x4, 0x0, 0x0) ioctl$SIOCSIFMTU(r6, 0x89b1, &(0x7f0000000040)={'bond0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000bc0)={'wpan1\x00'}) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$IP6T_SO_GET_REVISION_MATCH(r8, 0x29, 0x50, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000100)=0x1e) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev}, {@in=@loopback, 0x4d2, 0x32}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in6=@private1}}]}, 0x154}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r10, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)={0x58, r11, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'dvmrp0\x00'}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x2c008000}, 0x4000080) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r4) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)={0xa4, r5, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x8c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffffffff}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfff}, @NL802154_DEVKEY_ATTR_ID={0x6c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0xa4}}, 0x14000800) 49.508714916s ago: executing program 1 (id=2515): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bridge\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@RTM_GETMDB={0x18, 0x56, 0x1, 0x0, 0x0, {0x7, r2}}, 0x18}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r7, 0x65, 0x4, 0x0, 0x0) ioctl$SIOCSIFMTU(r6, 0x89b1, &(0x7f0000000040)={'bond0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000bc0)={'wpan1\x00'}) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$IP6T_SO_GET_REVISION_MATCH(r8, 0x29, 0x50, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000100)=0x1e) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev}, {@in=@loopback, 0x4d2, 0x32}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in6=@private1}}]}, 0x154}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r10, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)={0x58, r11, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'dvmrp0\x00'}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x2c008000}, 0x4000080) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r4) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)={0xa4, r5, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x8c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffffffff}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfff}, @NL802154_DEVKEY_ATTR_ID={0x6c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0xa4}}, 0x14000800) 40.50453359s ago: executing program 2 (id=2746): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg1\x00'}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x248d8}, 0x4054) r2 = socket$netlink(0x10, 0x3, 0x15) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r3, &(0x7f00000001c0)="dbd18d69d1f81fdb15f736f459b76f0f1fbcba4034c03ee1100062fb7e817c9c2c2678ab9c2a86a6ce407aa30c74ae5d9cbddc07d7aa68db17a55b8c2c45dd85ddee57974ee68ac260cd999c21cf6c319944f75ff9fb927b2c103dff67fa9748b10fcd5340797a1db1c55a6a3c8cc327dfbc844cd2d511d8e4bd06d3987420c939d4f9f30eacbaed6138f28c504d4daefbb503c740633449f761bca65172a27889e7fe36aad801bcf7415ed8099c9552279868b4103d9329bdb1f6", &(0x7f0000000280)=""/204, 0x4}, 0x20) write(r3, &(0x7f00000003c0)="036dd51504d4a9fba826d5accdf8335accb5277c56ab5e34a14bee8b4aca90d03fe937f6c6669f58ca3849ca6655307144288a033549f37369d80f4067160c849cabee9651b83fe8d8b739745c5162e40130829b18e51a96a65d718ac40ab5d41a5110fad411d2a1a19d974aa39f9e58e289c12f9c7293ad8c9ba0e246dcc1f952ed04fced265d5554b7ac255d8f9089dd46d2658e563d24dada31fbbe97a27a6a16883342e17e06d7548bf8015ee825c638709054927d5e38ba2d278f0c58daf458", 0xc2) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x4, 0x7, 0x3, 0x5, 0x50, @dev={0xfe, 0x80, '\x00', 0x16}, @remote, 0x7800, 0x700, 0x5, 0x31}}) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000600)={@broadcast, @multicast2, 0x0}, &(0x7f0000000640)=0xc) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f00000007c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xc8, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2cdcdde683cf78bd}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x2}, 0x4000000) (async) shutdown(r0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x9, 0x0, r3, 0xffffffff, '\x00', r5, 0xffffffffffffffff, 0x1, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r7 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r7, 0x9) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000008c0)=0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0) sendmsg$NL80211_CMD_SET_MPATH(r8, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40040}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x68, r9, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x5a}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000ac0), r0) sendmsg$TIPC_NL_PUBL_GET(r8, &(0x7f0000000c80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b00)={0x130, r10, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_NODE={0x100, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ID={0x9d, 0x3, "55f3bc506433fcab952f805b423e5f52173b7fb25b7afe90b0786acccefbb0f2f56aaa3bfda68f245082717f2e7566144e2cbd7d2f96c7d027cae8f4916edf4e52263b54b3d0e252f638b4dc8839b2e4881e5ec3b5148b53f1301c3763f7287093e9cd194afd9a53c1da6c90a5536ae4b327b5959f985bc4d56b902f3be737d353192a56c2130cc064b2d54a78eb9545ad901584b013b0fb98"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "60b752e3112027add1e5fd5eae54c96e0062897601459624dac030fce7b9"}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) syz_genetlink_get_family_id$gtp(&(0x7f0000000cc0), r0) r11 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000d00)={0x1f, 0x0, @fixed}, &(0x7f0000000d40)=0xe, 0x80000) getsockopt$bt_BT_DEFER_SETUP(r11, 0x112, 0x7, &(0x7f0000000d80)=0x1, &(0x7f0000000dc0)=0x4) (async) r12 = accept4$packet(0xffffffffffffffff, &(0x7f0000000e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000e40)=0x14, 0x0) getsockname$packet(r12, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000ec0)=0x14) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000f00), r2) ioctl$sock_TIOCOUTQ(r8, 0x5411, &(0x7f0000000f40)) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000fc0), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f00000020c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002080)={&(0x7f0000001000)={0x105c, r13, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x8}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x9}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x1004, 0xa9, @random="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"}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x7}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x105c}, 0x1, 0x0, 0x0, 0x90}, 0x0) 40.363777352s ago: executing program 2 (id=2748): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r4, 0x2, 0x2, 0x0, @void, @value}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$bt_l2cap(r6, &(0x7f0000000180)={0x1f, 0x1, @any, 0x5}, 0xe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r7, r5, 0x2, 0x6, 0x4000, @void, @value}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x300, 0x0, 0x25dfdbfc}, 0x20}, 0x1, 0x0, 0x0, 0x40041}, 0x0) 40.276985381s ago: executing program 2 (id=2750): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b800000019000000000087a812987373b1200000000000000000000000000001fe880000000000000000000000000001"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x8000}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ffffffffffffff000000000000000000000000000000000007000000000300000000000000000040"], 0xb8}}, 0x0) 39.973611896s ago: executing program 2 (id=2754): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'macvlan0\x00', {0x2, 0x4e24, @local}}) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) setsockopt$ax25_int(r0, 0x101, 0x7, &(0x7f0000000080)=0x100, 0x4) connect$ax25(r0, &(0x7f00000000c0)={{0x3, @default, 0x3}, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast, @null, @null]}, 0x48) r1 = socket(0x5, 0x6, 0x794) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0xe, 0x9, 0x7, 0x7}]}, 0x10) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f00000001c0)) socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$netlink(0x10, 0x3, 0x1f) getpeername$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_getnexthop={0x38, 0x6a, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_GROUPS={0x4}, @NHA_OIF={0x8, 0x5, r3}, @NHA_GROUPS={0x4}, @NHA_ID={0x8}]}, 0x38}}, 0x40) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)='%pB \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r4, &(0x7f00000004c0)="67a174710d9f0578b0631bd545df09603fe9a8825da99f5476524a02c19165d5cc2d31f77c397a8a92c997865d67a4dd89520378276688be895751cf4974be2e429a36dda1db99e62e6c66ec698c44c5c8bced67941f4560f3d1a0a926f6416fc2b16ea9506897647522f9b4cb7de019543b52ac74d9964b096b27bf1ece095e2006b05b8f5d3ef5dc8adb7acc5c082f2e89299b3e317a2f9a4b1d1ac7d2b2f2d746237514b0991f3806fa982bee538abb8c48d3f3d2034117fb110879", &(0x7f0000000580)=""/36}, 0x20) sendmsg$NFT_BATCH(r1, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x84, 0x3, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_USERDATA={0x4f, 0xc, "e183298539c48d1bde22fee53a1b3cd5017a91e1503d56cd58d9ec1c3b3f5ec6212b2246000e29bc51aa1b076e44e02e811704f8650d4fd42ec8a1e420938b0b4481a645d57eb4e746a559"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x6c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xd138469a7f166fba}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x62}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x97cd}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2f836f95}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}], {0x14}}, 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r2) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x78, r5, 0x400, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xfffffeff}, @ETHTOOL_A_RINGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x2}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xfffffffc}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000010}, 0x8080) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000009c0), r1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x64, r6, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x30}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fffffff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fffffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x387ba9d7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000042}, 0x20000000) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000b00)=0x4e7, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b40)={0xffffffffffffffff, 0x4, 0x18}, 0xc) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001f00)={0xffffffffffffffff, 0x20, &(0x7f0000001ec0)={&(0x7f0000000e00)=""/4096, 0x1000, 0x0, &(0x7f0000001e00)=""/159, 0x9f}}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002200)={0x11, 0x17, &(0x7f0000001f40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe}, @ldst={0x2, 0x1, 0x6, 0x0, 0x0, 0x30}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x8, 0x1, 0x0, r2}]}, &(0x7f0000002000)='syzkaller\x00', 0x5, 0xb1, &(0x7f0000002040)=""/177, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002100)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000002140)={0x5, 0x9, 0x2, 0x7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000002180)=[r4], &(0x7f00000021c0)=[{0x5, 0x4, 0xa}], 0x10, 0x80, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x19, 0x17, &(0x7f0000000b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x77c7fbb2, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @ldst={0x1, 0x0, 0x6, 0x1, 0xb, 0xffffffffffffffe0, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000c40)='GPL\x00', 0xd3, 0xd9, &(0x7f0000000c80)=""/217, 0x41000, 0x0, '\x00', r3, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000d80)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000dc0)={0x4, 0x0, 0xd4, 0x200}, 0x10, r8, r9, 0x7, &(0x7f00000022c0)=[r4, r2, r4, r4], &(0x7f0000002300)=[{0x4, 0x5, 0x9, 0xa}, {0x3, 0x2, 0x0, 0x8}, {0x1, 0x5, 0x10, 0x2}, {0x1, 0x2, 0xd, 0xa}, {0x2, 0x5, 0xe, 0x9}, {0x0, 0x5, 0x2, 0x8}, {0x3, 0x4, 0x1, 0xb}], 0x10, 0x1, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000002440)=@bloom_filter={0x1e, 0x101, 0x5, 0x6, 0x20c, r4, 0xffffffc0, '\x00', r3, 0xffffffffffffffff, 0x2, 0x1, 0x3, 0xe, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003680)={r10, 0x0, 0x7d, 0xea, &(0x7f00000024c0)="44542b2cb88c596d2abb7a6e2e67e56774e2af9da4bbae297ec6e3876ba30a627da000baf87b7d3de35080928dfaa093a15f6756351cdb27707c230dfbca06d6d842d605749d4dfb75633683b760a64cbc840c5d4641e28d82d8d4001ae9cb1f006bd86e9a514e043f96571fc33c71c63b0993c153675b5bcbbef163ff", &(0x7f0000002540)=""/234, 0x10000, 0x0, 0x1000, 0x0, &(0x7f0000002640)="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", &(0x7f0000003640), 0x6, 0x0, 0x8}, 0x50) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003740), r1) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000003940)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003900)={&(0x7f0000003780)={0x170, r11, 0x300, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1800000, @mcast2, 0xffff}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x9, @loopback, 0x2}}}}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x20000000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x753}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000042) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000003b80)={r4, &(0x7f0000003980)="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", &(0x7f0000003a80)=""/230}, 0x20) 36.280857923s ago: executing program 1 (id=2515): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bridge\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@RTM_GETMDB={0x18, 0x56, 0x1, 0x0, 0x0, {0x7, r2}}, 0x18}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r7, 0x65, 0x4, 0x0, 0x0) ioctl$SIOCSIFMTU(r6, 0x89b1, &(0x7f0000000040)={'bond0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000bc0)={'wpan1\x00'}) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$IP6T_SO_GET_REVISION_MATCH(r8, 0x29, 0x50, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000100)=0x1e) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev}, {@in=@loopback, 0x4d2, 0x32}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in6=@private1}}]}, 0x154}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r10, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)={0x58, r11, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'dvmrp0\x00'}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x2c008000}, 0x4000080) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r4) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)={0xa4, r5, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x8c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffffffff}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfff}, @NL802154_DEVKEY_ATTR_ID={0x6c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0xa4}}, 0x14000800) 22.873216135s ago: executing program 2 (id=2754): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'macvlan0\x00', {0x2, 0x4e24, @local}}) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) setsockopt$ax25_int(r0, 0x101, 0x7, &(0x7f0000000080)=0x100, 0x4) connect$ax25(r0, &(0x7f00000000c0)={{0x3, @default, 0x3}, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast, @null, @null]}, 0x48) r1 = socket(0x5, 0x6, 0x794) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0xe, 0x9, 0x7, 0x7}]}, 0x10) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f00000001c0)) socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$netlink(0x10, 0x3, 0x1f) getpeername$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_getnexthop={0x38, 0x6a, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_GROUPS={0x4}, @NHA_OIF={0x8, 0x5, r3}, @NHA_GROUPS={0x4}, @NHA_ID={0x8}]}, 0x38}}, 0x40) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)='%pB \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r4, &(0x7f00000004c0)="67a174710d9f0578b0631bd545df09603fe9a8825da99f5476524a02c19165d5cc2d31f77c397a8a92c997865d67a4dd89520378276688be895751cf4974be2e429a36dda1db99e62e6c66ec698c44c5c8bced67941f4560f3d1a0a926f6416fc2b16ea9506897647522f9b4cb7de019543b52ac74d9964b096b27bf1ece095e2006b05b8f5d3ef5dc8adb7acc5c082f2e89299b3e317a2f9a4b1d1ac7d2b2f2d746237514b0991f3806fa982bee538abb8c48d3f3d2034117fb110879", &(0x7f0000000580)=""/36}, 0x20) sendmsg$NFT_BATCH(r1, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x84, 0x3, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_USERDATA={0x4f, 0xc, "e183298539c48d1bde22fee53a1b3cd5017a91e1503d56cd58d9ec1c3b3f5ec6212b2246000e29bc51aa1b076e44e02e811704f8650d4fd42ec8a1e420938b0b4481a645d57eb4e746a559"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x6c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xd138469a7f166fba}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x62}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x97cd}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2f836f95}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}], {0x14}}, 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r2) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x78, r5, 0x400, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xfffffeff}, @ETHTOOL_A_RINGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x2}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xfffffffc}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000010}, 0x8080) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000009c0), r1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x64, r6, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x30}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fffffff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fffffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x387ba9d7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000042}, 0x20000000) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000b00)=0x4e7, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b40)={0xffffffffffffffff, 0x4, 0x18}, 0xc) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001f00)={0xffffffffffffffff, 0x20, &(0x7f0000001ec0)={&(0x7f0000000e00)=""/4096, 0x1000, 0x0, &(0x7f0000001e00)=""/159, 0x9f}}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002200)={0x11, 0x17, &(0x7f0000001f40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe}, @ldst={0x2, 0x1, 0x6, 0x0, 0x0, 0x30}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x8, 0x1, 0x0, r2}]}, &(0x7f0000002000)='syzkaller\x00', 0x5, 0xb1, &(0x7f0000002040)=""/177, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002100)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000002140)={0x5, 0x9, 0x2, 0x7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000002180)=[r4], &(0x7f00000021c0)=[{0x5, 0x4, 0xa}], 0x10, 0x80, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x19, 0x17, &(0x7f0000000b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x77c7fbb2, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @ldst={0x1, 0x0, 0x6, 0x1, 0xb, 0xffffffffffffffe0, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000c40)='GPL\x00', 0xd3, 0xd9, &(0x7f0000000c80)=""/217, 0x41000, 0x0, '\x00', r3, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000d80)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000dc0)={0x4, 0x0, 0xd4, 0x200}, 0x10, r8, r9, 0x7, &(0x7f00000022c0)=[r4, r2, r4, r4], &(0x7f0000002300)=[{0x4, 0x5, 0x9, 0xa}, {0x3, 0x2, 0x0, 0x8}, {0x1, 0x5, 0x10, 0x2}, {0x1, 0x2, 0xd, 0xa}, {0x2, 0x5, 0xe, 0x9}, {0x0, 0x5, 0x2, 0x8}, {0x3, 0x4, 0x1, 0xb}], 0x10, 0x1, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000002440)=@bloom_filter={0x1e, 0x101, 0x5, 0x6, 0x20c, r4, 0xffffffc0, '\x00', r3, 0xffffffffffffffff, 0x2, 0x1, 0x3, 0xe, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003680)={r10, 0x0, 0x7d, 0xea, &(0x7f00000024c0)="44542b2cb88c596d2abb7a6e2e67e56774e2af9da4bbae297ec6e3876ba30a627da000baf87b7d3de35080928dfaa093a15f6756351cdb27707c230dfbca06d6d842d605749d4dfb75633683b760a64cbc840c5d4641e28d82d8d4001ae9cb1f006bd86e9a514e043f96571fc33c71c63b0993c153675b5bcbbef163ff", &(0x7f0000002540)=""/234, 0x10000, 0x0, 0x1000, 0x0, &(0x7f0000002640)="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", &(0x7f0000003640), 0x6, 0x0, 0x8}, 0x50) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003740), r1) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000003940)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003900)={&(0x7f0000003780)={0x170, r11, 0x300, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1800000, @mcast2, 0xffff}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x9, @loopback, 0x2}}}}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x20000000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x753}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000042) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000003b80)={r4, &(0x7f0000003980)="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", &(0x7f0000003a80)=""/230}, 0x20) 21.501018474s ago: executing program 1 (id=2515): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bridge\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@RTM_GETMDB={0x18, 0x56, 0x1, 0x0, 0x0, {0x7, r2}}, 0x18}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r7, 0x65, 0x4, 0x0, 0x0) ioctl$SIOCSIFMTU(r6, 0x89b1, &(0x7f0000000040)={'bond0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000bc0)={'wpan1\x00'}) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$IP6T_SO_GET_REVISION_MATCH(r8, 0x29, 0x50, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000100)=0x1e) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev}, {@in=@loopback, 0x4d2, 0x32}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in6=@private1}}]}, 0x154}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r10, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)={0x58, r11, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'dvmrp0\x00'}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x2c008000}, 0x4000080) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r4) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)={0xa4, r5, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x8c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffffffff}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfff}, @NL802154_DEVKEY_ATTR_ID={0x6c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0xa4}}, 0x14000800) 5.735662675s ago: executing program 2 (id=2754): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'macvlan0\x00', {0x2, 0x4e24, @local}}) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) setsockopt$ax25_int(r0, 0x101, 0x7, &(0x7f0000000080)=0x100, 0x4) connect$ax25(r0, &(0x7f00000000c0)={{0x3, @default, 0x3}, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast, @null, @null]}, 0x48) r1 = socket(0x5, 0x6, 0x794) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0xe, 0x9, 0x7, 0x7}]}, 0x10) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f00000001c0)) socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$netlink(0x10, 0x3, 0x1f) getpeername$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_getnexthop={0x38, 0x6a, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_GROUPS={0x4}, @NHA_OIF={0x8, 0x5, r3}, @NHA_GROUPS={0x4}, @NHA_ID={0x8}]}, 0x38}}, 0x40) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)='%pB \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r4, &(0x7f00000004c0)="67a174710d9f0578b0631bd545df09603fe9a8825da99f5476524a02c19165d5cc2d31f77c397a8a92c997865d67a4dd89520378276688be895751cf4974be2e429a36dda1db99e62e6c66ec698c44c5c8bced67941f4560f3d1a0a926f6416fc2b16ea9506897647522f9b4cb7de019543b52ac74d9964b096b27bf1ece095e2006b05b8f5d3ef5dc8adb7acc5c082f2e89299b3e317a2f9a4b1d1ac7d2b2f2d746237514b0991f3806fa982bee538abb8c48d3f3d2034117fb110879", &(0x7f0000000580)=""/36}, 0x20) sendmsg$NFT_BATCH(r1, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x84, 0x3, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_USERDATA={0x4f, 0xc, "e183298539c48d1bde22fee53a1b3cd5017a91e1503d56cd58d9ec1c3b3f5ec6212b2246000e29bc51aa1b076e44e02e811704f8650d4fd42ec8a1e420938b0b4481a645d57eb4e746a559"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x6c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xd138469a7f166fba}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x62}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x97cd}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2f836f95}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}], {0x14}}, 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r2) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x78, r5, 0x400, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xfffffeff}, @ETHTOOL_A_RINGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x2}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xfffffffc}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000010}, 0x8080) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000009c0), r1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x64, r6, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x30}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fffffff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fffffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x387ba9d7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000042}, 0x20000000) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000b00)=0x4e7, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b40)={0xffffffffffffffff, 0x4, 0x18}, 0xc) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001f00)={0xffffffffffffffff, 0x20, &(0x7f0000001ec0)={&(0x7f0000000e00)=""/4096, 0x1000, 0x0, &(0x7f0000001e00)=""/159, 0x9f}}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002200)={0x11, 0x17, &(0x7f0000001f40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe}, @ldst={0x2, 0x1, 0x6, 0x0, 0x0, 0x30}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x8, 0x1, 0x0, r2}]}, &(0x7f0000002000)='syzkaller\x00', 0x5, 0xb1, &(0x7f0000002040)=""/177, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002100)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000002140)={0x5, 0x9, 0x2, 0x7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000002180)=[r4], &(0x7f00000021c0)=[{0x5, 0x4, 0xa}], 0x10, 0x80, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x19, 0x17, &(0x7f0000000b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x77c7fbb2, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @ldst={0x1, 0x0, 0x6, 0x1, 0xb, 0xffffffffffffffe0, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000c40)='GPL\x00', 0xd3, 0xd9, &(0x7f0000000c80)=""/217, 0x41000, 0x0, '\x00', r3, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000d80)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000dc0)={0x4, 0x0, 0xd4, 0x200}, 0x10, r8, r9, 0x7, &(0x7f00000022c0)=[r4, r2, r4, r4], &(0x7f0000002300)=[{0x4, 0x5, 0x9, 0xa}, {0x3, 0x2, 0x0, 0x8}, {0x1, 0x5, 0x10, 0x2}, {0x1, 0x2, 0xd, 0xa}, {0x2, 0x5, 0xe, 0x9}, {0x0, 0x5, 0x2, 0x8}, {0x3, 0x4, 0x1, 0xb}], 0x10, 0x1, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000002440)=@bloom_filter={0x1e, 0x101, 0x5, 0x6, 0x20c, r4, 0xffffffc0, '\x00', r3, 0xffffffffffffffff, 0x2, 0x1, 0x3, 0xe, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003680)={r10, 0x0, 0x7d, 0xea, &(0x7f00000024c0)="44542b2cb88c596d2abb7a6e2e67e56774e2af9da4bbae297ec6e3876ba30a627da000baf87b7d3de35080928dfaa093a15f6756351cdb27707c230dfbca06d6d842d605749d4dfb75633683b760a64cbc840c5d4641e28d82d8d4001ae9cb1f006bd86e9a514e043f96571fc33c71c63b0993c153675b5bcbbef163ff", &(0x7f0000002540)=""/234, 0x10000, 0x0, 0x1000, 0x0, &(0x7f0000002640)="0d59a5407cbca16c0b896dbfbf84103b7e28974969dc8f857919579653967058146366983c98c674e55bd99973fef413ee764d9268d13a6e6b278456f1829ff146b2528ff5b7dcf054a0dbb4e11ad30204f7b828430d7740fd586915af6cb2b74bc6658ec49052b26910d59694955c238a60e9fd2acfc8bd710bfa9e3d64e68982993a0c725ade3e061824c29333d8525885d5d8250de1b92625add502584ba31522729881a24c891c617fde52aeef0e1cc4d25abc5eec3878ff4ddf6a5bca46d6d472f62bc1fffb16472e6f2df5b5b4ad8efc273552aa11d89825dc91cca8ef04593f19f188ea8d64b36f8e4aca61331878a09cb1a4617a731fbf28b920de44b35eac6e3d8aef4d7d78e83382b7aac706ef834c92d7c3300c35632319d6e693952a895e1c09fa42e05d35b34728e28a4125c6d40c49e47dcc9af82eb8e4278b30499718ca864a2c0b369301dcdbbe9829b9494561aca10b7a20658ba6193c0bcdcddb1c639366d8503a02eab513df63d9b1ef42f4ef7d0e5302ee7970b47ae149998f7849d4f339671a91ef1070ec78fde1063f3084d94923fbb1b0ef31e63b0a2f35f70f038967f0955571633ecae736ce96a23bc0a68fdc5e4104bc6563e4a2a054446a4504a740221de9c23eb27f911453b5bfa90553264300bac99a20712e1cbc640d9dc68cc1763ce08aba4b6ed38bc4e22454058b8d1facea0c87aeb1b4ab069b3d4545c0e2ca54db03e0905b67c15977741363322483ed85807e2c0efd89a7e4f2de93483d697ca406a659bf68954472293c09661b4ff887014c6778e160e90346d385ee118ded608a14afe57c9349a4a7b5c3be8f05eb1638cbddcbf1cffac6010319ac94e7e02410b755ba33651644f8f218dff2a7d05681256cf4c73f492bdaba64636a2c9c627865c76858972bf74983435f60ec718371b062322b4f70fbf70c742eeaffaf92cac333eb33c3587904864487bf5aab05de16f615ae9b5d5b328e7310a0b1f5d69a1988ee458c9e7e13320376b33bc05b4ea8c73419cc21c5109de70c6c4a0693eea2ed78f603f4e271ee56edb26f4b3e38d65e60914624458470de22ec0dfdfe99fb96ca768606c3f9297dbec02faabe36ce27672fd9b88439730e797952f21a7b3632da9dfab1dd379cf06be062450d71ae965e18a7af36fb13ca6d198add4351628080f182fc9ba7a74df90dd0b5a680695863442901862f9703413677396ecde393e4ba751b8c9dc43325e2f80af9fbf74beae5bdc3334df235f83d275b187e64afad1a8d135574bf3830fd635b54469ff0f7b2efb0f67e94af4f95f4ed4e5f2f488cec7494d1a89818ef4e4f8a56ac07ce01b80edfbb0c6a5e94c1c2456018be7acfc79dde514ab09dc6138e2b658a14fad288d504e753076c6a90442ad1cc3a21c4151f0b5149e9e70b071dfaf5c4d4def7a72cfb03e5fb55478207e1af7d02bd952f28e860062b00bb802d12ba64fde0396bcaca7008fdd0bee0dd196cfde94eb97b828f772e3ec735bd7a0cbcb59ba861f6595ebe7afd28b2e11d43d0c8bd1d6ae9dd89d38b009e588dc574e9cbff14342bf81d3ae0ed6730c362acb98711c4bf259da0769a92c927c424fcbaecf9f2906e615a0d6b300d718e5e9c119f55b6b3802a30ec6f5758504836ae5c65e6dd910d04915929faad49beebc3e569f6856d8bfb9457ac41523e55800a26193dfb3a5be63a95d4c145add62f749b0e01c10166ce52d7ae254a503c9218c68684b2410f11c8b90cae1307f3aff0a3cb527d5269b3cc4e6b9666cd5602c89c812f6d4c14861a025ebe18d10ab7b0c5b9f8bf11ba00a5ff892a8215a22e0dbfc674186c308d841bee793ba06c7503acd4edeb26c60949dea30b7383f9a1396715c51d67859c479f14154b347fc30dfa5ea2139e64eb3cd0add1eadb212d5b7ca6261dafb00e230e436a228b658ac40ee561ca8bbb32bb16635eab275f6e21e387ae78f399dd22d9eaa90c4379b73e77f11fd48f8b203e91aa5b9bedd3d46c0ebf36b3cf5b2f602b003ac572da257900bfe567ce140a9f380076f3bb1a7492434fc15aca978d82c3eeaf8289b58eefd709ac21b5af7673d75a08e628a5e128709259eba7bf2902a0cae31d877798ab972a3632cdcf23663d7844df106a4f043743bc4a2f4219a94ae21be5fbc1445027cbcabb59c1a858c29b76ae6621950e5ccc87fa77209abbb16ae8bf43d7e78f257d4043e0090edecfcb8b404e2f98db8ec0cebf73fbcaf19ce50f7604c8247305a2368a338791ee9189fb2152517ab9d2ce3d9abbca5fef22cb02196de202dcd97f64bc4dd7986e29394425a2b87745280bc59b355585a2c314341c8c0578db1fccd667f47628545018b1dec9bd8673f3129980cae8eadeb98ed30e7d0b17a434cbdca09dace502ec2b9f9252374f0f44ffd41992c631447f2668a6b71dc72e195413807f6737031d56b8d747adb248dcd1fc3d8f170984de086779758641f2c8c5480d6cd1f01672f7233365be26f4107d08c73fd1607c9038268e9efb2d356d2dc92ad52bd771558c35593a7ccc6a6a65c6041640fb3e2d84e123849695301c5d8e896046727169d6b438fbd6efae15aa308253f1d2c7ea7ede9333fe203ca7e03e212927c7195c324cdccc0691c0f4340f839fbaa2944c50a1cd2b0a014072cb8e4e55bb705f794c4e17bb9cf0c2a24d98d0ecda5cb35ca375e49218bc241a15f7eb613f9f6446cf87b8162e3ee0f0e4ea3ded91bec7696663e65e8cca80d2962637e5b625bb8b8b79ae2faa66944a5be98c51abcff346574d2af8ddfc5df4a6ca5fd5c58248a8ded29006253eaab5c8cd061a5d8a10eec662fb51feeb2a39fba58bc9af569a2e3aa4554d49f250b2ff7818689b321b16acbd950e8b3726b4f5e5d6db4971997d062be2a9138e71842e8793c163ae9a60050fbe0fc96ba47417867cb38cb4d398356a09c866be05c2754935488a49133c4df43cb0938186d94bdcfe51765810402f5eeefd8202577f632a6d6342d012fc7718489e1157b98cbeef69444712652fc2fe08eec1185e0df9c5066eef7721c9610b92eea32b1540e39178dafbb82b7fe8e3c4142af44be5e8d56be62c303b4a55468c813ba14482276f1ec57e7f4f506587b638d9459d4f0f31e20244a547868ea4e79132874013af173663ea19f92d8a7cf0e36f232469b942ffb55a67465cdcfb5f967f005d778c30c17d42b1da29a0a52bb8d771df3dd27c7074b48e10290149216065ee261b8f9f16c44d9e1e47b63e0fcd5e9a7b26880f789d0d8ef1bfe6ade3007041a8c697af07fbf866cbf018dc566bc211487570551694bd1093dc00aee08f0a5887cb0b83b50738a1bb0b5f805afad6889104e1131cd0b2f3e84967befcea2bb76f84498d00993ab4269f31d153c46a7bc21e53c205a940853fe910e6839e84f134bc9c82264de161e1f87e990768de5141c07065e569adc3a3aa5d7b17c234669b2b2309fe92ae458d6e9632129212fb967992aa0ed86713cca0f132b3c03a19b768de5e869e72a41e93d5a5608381f52a8dab7f0310c09e769ca36f0e099f943d3a60a5a33f54bfae15e494118dd560f14261c91d533b091b418c8603b882584475640a6226996f1a9ba3af79ccc7f93981041bf1c19441e47595e037ecc9bc8e22f0e8e43d205636cf9176b4083f1bf770949ec9648509559253132e5457ed4b441afb1ec5ea583ece8056fc2a825a0a864423eb513954b768c8f58fe631fd3d87e9b8ef66414c71ef744a670f789d3c9e0cdc4f6347d5152caeefe11c300eefd9a4d076925d141e74541aaee95d89b4aa05d2cbb096f59d2eedba499bea652b8d9d6fb75bc2be04d3084c7999c48ce6ff56916d4163c1420486ded024eacc885468fbee56eacc428f9ef92174d99827b12ee4cc7616946d7f9e679404af97350d1f245affc9eb1d5f7f678339fdea79250fcb8cd0709009035c70154d2f19e218b27f8e9cd38a5a80c843beddfe20a853a6460da7cbe1f6a9408a40ac54070ce8983b7edbdb8e6f6ff285c3a70fee254864f09e3fa566b212caf00d33099d9283a0561b0b166032f5377fcc05c6362a1ec08a70d254fb813f17a2b66118a97699265ae839ef579b6ea7d7c2ed80ad23c5976156fcf4320b579d584ad8512064d34d13d847ca12c62d09055ba32d78835f2fba6434a3f0f01f2334a9b941e455c02dbbd903515200fdaf48b420237c690ca0b93f6a4eaa076c910536a55134112f8d572aa8f58a6073d6d9a33a9faceadb176ea52edc2ab553752198a5660d54c4335431aed7f78deb19a6cf7355f057a573048e07c36d967adb9629b8a099169d2f0e5e3b16fdfea0356f032848c59275c3c057f6af9f2a4cb27c04f8f7b58986b22de57f4bea74cb4ea10dc1a17e95b8689c4b3e79522a12de018f633b4d2986ee082ff3fe537c97a7dc7ee293fbdff34dbea9561531a1bf7c3b374e5e0bac8e2822b009426f9724ee906e7e5a522b7ab4171c7d7bd4cd304edec48caa0fd014ae7b9f76522b019dce516189f34891f87117775d5120a41941375ab29078bd9e5b4e804f8ce1be7075205e2c134c6a99e4190d125709bac8f23f2ee61d610353c58f2080b6bf997cb6f815af438dd21d0cdcbb727e0ab60f63b7f5d4498e868fab8e010343fa9f096d240af52f1ab85a96fe05c8a375267aa66341bad8817df5142b6050c5c7409ec65530ee4487986d2e9d4fc1fc5802857f0693eef4d11afb70b21642c2f22fc946d4f0dd911e67b76b7ea3fb14b86a1332e3a5bc58d68cb5ddc39c152a96b2aa7a623a8c4eb57339527ad8a0830856d808bd29adfc76149173dc5b7ce170b16a033a18366f065f53d535c97cea3818d8ae2f3cc286673bc4b633f2f70bea44bfb61185d47bcf5735044cbb44dc053ecb8edb856a2685cb324f8d228ebe8415dc990d3d21e9bb977e29cb21d54a0d21d6122c8177d589e690f3cc53fd6af377619fb52dae9441269ab51b8c15b2c21737d400d066d0a7612031e42485854438bf14be5b234dcdeeb64a10c2a4f43319c33d17dd4cd984dae6157002571aa372d6c25b846536418e1eaf5495affbcc33d1a3fdfa822256b726c45946444b5dcbd85e2241329adfad326a16e1f26c7746a4eade7956eae5e39a0c9d2d7bf3a1a483b90156fbadb07b00ba6bca5f82c0108d41a31bdb266452a347b0b6ee9d81a98c470be672738eecd752cbd20a1c0cbc64e607330fecf88d1180bbb515665f036779bcf0dd411c1fa46002726b4a35fd23c04575c021a456453d343fba97599ce6a80cbd1966067918f0f8e338bf5f449117d05c9b2c964abfa0dad56344e132106681aadcc900049ba80f49ced13823c63f6442d7bd6555d5165492de40b45fe588358ac4ae61a0d337a94275a52a5e7af66f71ec9c0a6b4904cb5f4e86b3a38ee39c43f199441dbf0022835a61d46c6415f142a1c63a9553adcfd44c6f9548eacab8ac3d10f573c3027fcbc44f016c2e9054f78ac0216e58c06b1924ed0b80b3c9f5d3a971a33f79991265d1f0191c4ae7fabc2e7d2aa5902b1abc9027c35fd6e272926062bfd280409672b2469f062892daf9da438d8a5d89690d94fc4bd50238d7e4c42e53aff89024b7c9ced073354a1f7948b3cdd1fc67fd179d01fce07786fbd2c37594dda8c015d4c3c2ee31a5a3d1bab9907a98ecf44b75c5a871ca47cc2f06cba28ce91ff56a56bf9b5cb9e13fa344314304c5bacf9a0754b916f8dad8c438bda6159a5922d1986f", &(0x7f0000003640), 0x6, 0x0, 0x8}, 0x50) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003740), r1) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000003940)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003900)={&(0x7f0000003780)={0x170, r11, 0x300, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1800000, @mcast2, 0xffff}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x9, @loopback, 0x2}}}}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x20000000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x753}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000042) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000003b80)={r4, &(0x7f0000003980)="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", &(0x7f0000003a80)=""/230}, 0x20) 4.541299358s ago: executing program 1 (id=2515): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bridge\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@RTM_GETMDB={0x18, 0x56, 0x1, 0x0, 0x0, {0x7, r2}}, 0x18}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r7, 0x65, 0x4, 0x0, 0x0) ioctl$SIOCSIFMTU(r6, 0x89b1, &(0x7f0000000040)={'bond0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000bc0)={'wpan1\x00'}) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$IP6T_SO_GET_REVISION_MATCH(r8, 0x29, 0x50, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000100)=0x1e) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev}, {@in=@loopback, 0x4d2, 0x32}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in6=@private1}}]}, 0x154}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r10, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)={0x58, r11, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'dvmrp0\x00'}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x2c008000}, 0x4000080) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r4) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)={0xa4, r5, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x8c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffffffff}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfff}, @NL802154_DEVKEY_ATTR_ID={0x6c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0xa4}}, 0x14000800) 3.231831733s ago: executing program 0 (id=3004): r0 = socket$kcm(0x10, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007"], 0x0, 0xb4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x69f5, @void, @value}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000380)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7a, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0xe0, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0xab8, '\x00', r3, r4, 0x0, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) 3.095143749s ago: executing program 0 (id=3006): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e28}, {&(0x7f00000000c0)=""/250, 0x2}], 0x2, 0x0, 0xd64}}], 0x300, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x14, r1, 0xfaac4106a1b87a7, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 1.473247881s ago: executing program 4 (id=3010): socket$inet(0x2, 0x200000002, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x80000, 0x3) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000000)) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x9}}}, 0x24}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000791240000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000010000300"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012800b0001007b656e65766500000400028004001a"], 0x38}, 0x1, 0x2}, 0x0) 1.241181824s ago: executing program 4 (id=3013): r0 = socket$inet(0x2, 0x3, 0x2) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @local}}}}) 1.134265831s ago: executing program 0 (id=3014): r0 = socket$kcm(0x10, 0x2, 0x4) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) (async) r2 = socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async, rerun: 32) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e0000000300000000000004050006"], 0x70}}, 0x0) (rerun: 32) sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x1b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 989.428834ms ago: executing program 4 (id=3016): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000001600156f000000000000000009000000", @ANYRES32=0x0, @ANYBLOB="140007"], 0x2c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000e4ff0000000000020202000900030073797a320000000005000400020000000900010073"], 0x34}, 0x1, 0x40030000000000}, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="000425bd7000ffdbdf25010000000900030073797a310000000005000400020000000900010073797a32000000000900010073797a3000000000050004000200000005000400020000000900030073797a3000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x40080) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000280)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r9, @ANYBLOB="06972d3ac9be5310ead28ded001500070000000c0000ecff00000000000000"], 0x38}}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r11) sendmsg$NLBL_CIPSOV4_C_ADD(r11, &(0x7f0000000200)={0x0, 0xfec9, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000c3b8576f23cfc54dec40345292643ff01f33518f01131bccaa2037177260beb8a0b1161d9b4eda90fb6d93b560f5ca505987fa5f33dd8aefb1343521d12802ece90c918753b564b6baaf99b08a7af33befa1cb08992087d5dbda048054c80000000000004e5f92dc44bbf1f9b669497e9836c4b5834a56a84963756b643cf80709fdaf9970b2199905ff6fe1cfb18962607417e8b8b1f2939499901b649905186d54d018f30ca697804718bd871fe2b9be3f8ef5d177fbe5c81be21600080812e2a325ebfced48c2c7", @ANYRES16=r12, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030001000000050003000000000005000300000000000500034d219f513417eda2c5df0001000000050003000700"], 0x50}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000001180)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800483a00fe8000000000000000000a3c13c306b28beb98d00000000000bbfe8000000006000000000000000000aa0802907800000000600008100000000000000000000000000000ffff00000000fc0200000000000000000000000000001100ff2067000000325c49000000"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r14, 0x10e, 0x2, &(0x7f00000002c0)=0x16, 0x4) r15 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r15, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$sock_int(r15, 0x1, 0x2c, &(0x7f0000000040)=0x9b, 0x4) setsockopt$packet_fanout_data(r15, 0x107, 0x16, 0x0, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r13, @ANYBLOB="080002002e0414001ccc9cedd6eb77a9ebdfa0"], 0x24}, 0x1, 0x6c00}, 0x0) 944.017171ms ago: executing program 0 (id=3017): socket$kcm(0x10, 0x3, 0x10) socket$packet(0x11, 0x0, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x10) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) (async) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000080)=0xa40, 0x4) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000380), 0xfff, 0xffffffffffffffff, 0x0, 0xa0028000}, 0x38) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x700}, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x38, 0x4, &(0x7f0000000d40)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socket$kcm(0x10, 0x2, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f00000010c0)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r4, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f0000001080)=0x9c) (async) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={r4, 0x8}, &(0x7f0000000280)=0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ad000000000085100000020000008500000005000000953ef6b76dcb831d9e39853b0f000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000000901000000000000000000e9000002"], 0x20}}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f0000b9000001000000040000000c000180cafc089d0e000073080002"], 0x78}}, 0x0) 733.728544ms ago: executing program 0 (id=3019): r0 = socket(0x40000000015, 0x5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000005500000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) getsockopt(r0, 0x200000000114, 0x8, 0x0, &(0x7f0000000240)) syz_emit_ethernet(0x20, &(0x7f0000000540)={@multicast, @multicast, @void, {@llc_tr={0x11, {@llc={0xaa, 0xf4, "1e", "bf8d139514f513bcc2aff00f0894e8"}}}}}, 0x0) 732.541664ms ago: executing program 3 (id=3020): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000000000000000020000001c0004801800018011000100666c6f775f6f66666c6f61640000005a19673afbc4937f7f0aadf9000900010073797a30000000000900020073797a3200000000e8b8ece6e111000740007c48d446eae1a8a3bd6482240000001400000011000100"], 0x84}}, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x12, 0x3, 0x0, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01070000000000000000060000000800030049"], 0x1c}}, 0x4000000) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) recvmsg$can_raw(r5, &(0x7f0000002600)={&(0x7f0000000340), 0x80, &(0x7f0000001580)=[{&(0x7f00000003c0)=""/91, 0x5b}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/12, 0xc}, {&(0x7f0000001480)=""/123, 0x7b}, {&(0x7f0000001500)=""/66, 0x42}], 0x5, &(0x7f0000001600)=""/4096, 0x1000}, 0x40000140) socket$inet6(0xa, 0x200000000003, 0x87) (async) syz_emit_ethernet(0xa2, &(0x7f00000005c0)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x6c, 0x2b, 0x0, @private2, @local, {[@hopopts={0x87}], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c18462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="14000000100001000000deff000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a30000000007c000000060a010400000000000000000100000008000b40000000000900010073797a3000000000540004802c"], 0x104}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000002980)={'wg2\x00', 0x0}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002a40)={r5, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002b40)={0x11, 0x5, &(0x7f0000002840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@jmp={0x5, 0x0, 0x6, 0x1, 0x7, 0xfffffffffffffffe, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000002880)='GPL\x00', 0x1, 0xb6, &(0x7f00000028c0)=""/182, 0x41000, 0x4, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000029c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000002a00)={0x5, 0x4, 0xcb6, 0x8001}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000002a80)=[r5, r5, r5, r5, r5, r5, r8, r5], &(0x7f0000002ac0)=[{0x4, 0x2, 0x2, 0x1}, {0x2, 0x4, 0xd, 0x3}, {0x1, 0x2, 0x5, 0x8}, {0x5, 0x4, 0x1, 0x9}, {0x2, 0x1, 0xc, 0x4}, {0x5, 0x5, 0x8, 0x8}], 0x10, 0x8, @void, @value}, 0x94) syz_emit_ethernet(0x32, &(0x7f00000027c0)={@local, @empty, @val={@val={0x88a8, 0x6}, {0x8100, 0x6, 0x0, 0x4}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @random="3ac62e84a521", @dev={0xac, 0x14, 0x14, 0x3d}, @empty, @private=0xa010101}}}}, &(0x7f0000002800)={0x1, 0x1, [0x8a4, 0xaad, 0xbfe, 0xbf6]}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000020605000000000000000000000000000900020073797a31000000000d000300686173683a6e6574000000000500040000000000050005000a00000005000100060000000c0007800800068000"], 0x54}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl1\x00', r9, 0x29, 0x7, 0xc, 0x6b4, 0x62, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x10, 0x1, 0x8381, 0x6}}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x5c}}, 0x0) socket(0x22, 0x2, 0x7f6) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f0000002780)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="6800000002020102000000000000000000000008000940000000040800084000000003080009400000000713000b0063616c6c66736970000a000b00512e393331000000080008400000000200"/89], 0x68}, 0x1, 0x0, 0x0, 0x4008040}, 0x40000) 693.645478ms ago: executing program 4 (id=3021): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x80000004}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0xfffc}, 0x8) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) r4 = socket(0x18, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000440)=""/130, 0x82}, {&(0x7f00000005c0)=""/180, 0xb4}, {&(0x7f0000000240)=""/21, 0x15}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000000340)=""/42, 0x2a}, {&(0x7f0000000680)=""/129, 0x81}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f0000000740)=""/145, 0x91}], 0x8, &(0x7f0000000a40)=[@rdma_args={0x48, 0x114, 0x1, {{0xfffffff7, 0xfffffffa}, {&(0x7f0000000800)=""/162, 0xa2}, &(0x7f0000000900)=[{&(0x7f00000008c0)=""/33, 0x21}, {&(0x7f0000001d80)=""/4096, 0x1000}], 0x2, 0x40, 0x100000000}}, @mask_fadd={0x58, 0x114, 0x8, {{0x10, 0x2}, &(0x7f0000000940)=0x9, &(0x7f0000000980)=0x100, 0x5, 0x1, 0xfffffffffffffffd, 0x3, 0x62, 0x6}}, @fadd={0x58, 0x114, 0x6, {{0x0, 0x5}, &(0x7f00000009c0)=0x1, &(0x7f0000000a00)=0x4, 0xff, 0x8, 0x3ff, 0x1, 0x4, 0xa}}], 0xf8, 0x400c1}, 0x1) r6 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r6, 0x10d, 0x82, &(0x7f0000000000), &(0x7f0000000080)=0x4) syz_emit_ethernet(0x7a, &(0x7f0000000280)={@random="856b934629fa", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x1}}}}}}}}}, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x2, @local, 'geneve1\x00'}}, 0x1e) r7 = socket$inet6(0xa, 0x3, 0x9) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r8, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1, 0x8014) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x6, &(0x7f0000000140)={0x14, {{0x29, 0x0, 0x8000000, @private2}}}, 0x88) syz_emit_ethernet(0x11f, &(0x7f0000000c40)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xe9, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', [{0x5, 0x1a, "b378b4ab7e6dec5a1bae2cabd9103dd505a4386e8716ff04a2f49e69485a91d1ff1a1fb0e3f2e0a68f507561d6a3f31d51ad78b4b8b0e81ef6ea021f561712d79e77c6b552fbaa4835d8b7ab763f33a96e5f8af87c5b64d51ea7bb6a01fb8d0f33f70755673c52b570661399f764fc770c5d88ecb6e516acacda6e3c75ec17351059b22af4887d6659c0e2daec240c6656dcd17718814a0808766225500115c2f274e13c40b5005b76dfa6583c9d0b682bf1e028287faea12c2b4c6be79c950510ccda59d6da46ff2b084d7ee085ee"}]}}}}}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40850) bind$qrtr(r4, &(0x7f00000000c0)={0x2a, 0xffffffff, 0x2}, 0xc) ioctl$F2FS_IOC_DEFRAGMENT(r4, 0xc010f508, &(0x7f0000000000)={0x100, 0x800000000000000}) 650.564555ms ago: executing program 0 (id=3022): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x14, 0x0, 0x2, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x8c0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) accept$inet6(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r6}, 0x38) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, 0x0, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x5d, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r8 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000000500)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)='[', 0x1}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r8, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 540.317298ms ago: executing program 3 (id=3023): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000128bd7000fcdbdf251400000005000b0001000000080005005f00000008000700010000000800100002000000740009000000000008000f00ffff00000800110001"], 0x4c}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00b30000000000000000ff030000771a3bfdc81d46339a8d7f3d7f0bed000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000300)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) socket(0x1d, 0x2, 0x6) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000740)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) epoll_create1(0x0) socket$pppoe(0x18, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYRES16=r1], 0x20}, 0x1, 0xc00000000000000}, 0x0) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r2, 0x84, 0x80, 0x0, &(0x7f0000000000)) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="4c00030007"], 0xd) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000890}, 0xc0) 482.128386ms ago: executing program 3 (id=3024): r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = socket$inet(0x2, 0x2, 0x7) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x2c) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000bc0)={'sit0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x7800, 0x700, 0x9, 0x7, {{0x5, 0x4, 0x2, 0xf, 0x14, 0x64, 0x0, 0xa, 0x4, 0x0, @rand_addr=0x64010101, @broadcast}}}}) 457.891834ms ago: executing program 4 (id=3025): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}, 0x5c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@in6=@empty, 0x0, 0x33}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_auth={0x48, 0x1, {{'digest_null\x00'}}}]}, 0x138}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c9, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0x2, 0x4, 0x400, 0x210, 0x0, 0x108, 0x318, 0x318, 0x318, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x108, 0x71000000, {0x15b}}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@arp={@rand_addr, @empty, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8, 0x0, {0x1d000000}}, {0x28}}}}, 0x450) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r6, @ANYBLOB="200001"], 0x38}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x0, 0x0, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x89b1, &(0x7f0000000040)={'wlan1\x00', 0x8000003}) r8 = socket(0x10, 0x803, 0x0) write$binfmt_script(r8, 0x0, 0xfffffe5d) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockname$packet(r8, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x204000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r9, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [""]}, 0x1c}}, 0x4004) r10 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0xd) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r11, &(0x7f0000000200)=ANY=[@ANYBLOB='\''], 0xd) 221.235973ms ago: executing program 3 (id=3026): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003001000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b0000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xce) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000010000000000000000000000000000000000000000020000"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000060a00ffffff7f0000000000010000000000050000000900010073797a310000000048000000030a0101000000000000000080000000080007006e61740014000480080002400000000008000140000000010900010073797a31000000000900030073797a3200000000140000001100010000000000000000000000000a"], 0xa4}}, 0x1) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000980), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRESHEX=r0, @ANYRES32=r2, @ANYRESHEX=r0, @ANYRES16=0x0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r5}, 0x20) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000300)={0x12}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000500000000000000ffff000018110000", @ANYRES32=r2, @ANYRES16=r6], &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x69, &(0x7f0000000500)=""/105, 0x40f00, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0x2, 0x3, 0x4}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000600)=[r5, r1], &(0x7f0000000640)=[{0x3, 0x2, 0x2, 0xa}, {0x0, 0x4, 0x3, 0x2}, {0x5, 0x5, 0xb, 0xb}, {0x2, 0x3, 0x5, 0x1}, {0x2, 0x3, 0x8, 0x6}, {0x2, 0x2, 0xb, 0x6}], 0x10, 0xd, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r8, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x800}, 0x50) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r10 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x4e24, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xeb, 0x8ae}}, 0xe8) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000ac0)={0x108, 0x0, 0x1, 0x401, 0x0, 0x0, {0x5}, [@CTA_NAT_DST={0x4}, @CTA_TUPLE_REPLY={0xbc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x11}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_TIMEOUT={0x8}, @CTA_MARK={0x8}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_TSOFF={0x8}]}]}, 0x108}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) ioctl$EXT4_IOC_GET_ES_CACHE(r13, 0xc020662a, &(0x7f0000000340)={0x0, 0x2, 0x2, 0x7fff, 0x2, [{0x5, 0x8, 0x8201, '\x00', 0x2000}, {0x7, 0x1f, 0x7f, '\x00', 0x2482}]}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x40, r12, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r14}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1671}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x36f}]]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0x4, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="28001010", @ANYRES16=r11, @ANYBLOB="100c28bd7000fddbdf251c05000008000300", @ANYRES32=r14, @ANYBLOB="0c009900ff01000061000000"], 0x28}}, 0x2008092) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 207.111086ms ago: executing program 4 (id=3027): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x40, r5, 0xb7a006d1969b963b, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @probe_request={{{}, {}, @broadcast, @device_b}, @void, @void, @void, @void, @val={0x72, 0x6}}}]}, 0x40}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x503, 0xff03, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x808c}, 0x0) 132.885067ms ago: executing program 3 (id=3028): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r0}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000040)=""/141, &(0x7f0000000500), &(0x7f0000000280), 0x4, r1}, 0x38) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) setsockopt$packet_int(r2, 0x107, 0x3, &(0x7f0000000280)=0x3, 0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f00000000c0)=0x1f, 0x4) sendto$inet(r3, &(0x7f0000000100)="1ce0", 0xffeb, 0x900, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r0}, 0x38) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r1}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000040)=""/141, &(0x7f0000000500), &(0x7f0000000280), 0x4, r1}, 0x38) (async) accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) (async) setsockopt$packet_int(r2, 0x107, 0x3, &(0x7f0000000280)=0x3, 0x4) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f00000000c0)=0x1f, 0x4) (async) sendto$inet(r3, &(0x7f0000000100)="1ce0", 0xffeb, 0x900, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) (async) 0s ago: executing program 3 (id=3029): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x28, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x128, r2, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x114, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70701682}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c35f7a9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55f15118}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2ad00da1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2120f920}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c4798a6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67014097}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a3d00bb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xea}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6857bfd9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x69}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41637ca9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x69}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xed}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18df43b2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4321449}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f892490}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a27c49e}]}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'virt_wifi0\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "548a849791a6c2cd031d5e0bac875ee3cee1067a7920f3f8add598f2cb765f8d", "99d021ef7e1c27b2ed8780c88a9cd5726633478165772093165f37988bef0408", "fc7727ad93663ae759f5709acdeb0b2eb7de8715d8c65baec61db9723a5a11e6", "71a70031508ef6deec26a1be1412e1bb3038ac04cf978d1692813dd10c9b2ebe", "047ec990a49da6a616df1b75d41ff03e93df1f57759db8d89f627376065b11aa", "ff07d5400000e5ffffff00"}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x7800, 0x8, 0x8d, 0x5, {{0x1e, 0x4, 0x3, 0x3b, 0x78, 0x67, 0x0, 0x5, 0x0, 0x0, @multicast1, @rand_addr=0x64010101, {[@lsrr={0x83, 0x27, 0x9d, [@dev={0xac, 0x14, 0x14, 0xb}, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x19}, @rand_addr=0x3, @multicast1, @multicast1, @loopback, @local]}, @ssrr={0x89, 0x7, 0x79, [@local]}, @noop, @generic={0x82, 0x5, "a801c4"}, @timestamp_addr={0x44, 0x24, 0xbc, 0x1, 0x4, [{@empty, 0x200000}, {@loopback, 0x7ff}, {@multicast2, 0x6}, {@private=0xa010102, 0x5}]}, @cipso={0x86, 0xb, 0x3, [{0x2, 0x5, "473ddf"}]}]}}}}}) bind$packet(r0, &(0x7f0000000280)={0x11, 0x1b, r4, 0x1, 0x91, 0x6, @remote}, 0x14) sendmsg$netlink(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4000800) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x28, 0x1, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), 0xffffffffffffffff) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x128, r2, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x114, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70701682}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c35f7a9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55f15118}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2ad00da1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2120f920}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c4798a6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67014097}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a3d00bb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xea}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6857bfd9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x69}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41637ca9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x69}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xed}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18df43b2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4321449}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f892490}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a27c49e}]}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'virt_wifi0\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "548a849791a6c2cd031d5e0bac875ee3cee1067a7920f3f8add598f2cb765f8d", "99d021ef7e1c27b2ed8780c88a9cd5726633478165772093165f37988bef0408", "fc7727ad93663ae759f5709acdeb0b2eb7de8715d8c65baec61db9723a5a11e6", "71a70031508ef6deec26a1be1412e1bb3038ac04cf978d1692813dd10c9b2ebe", "047ec990a49da6a616df1b75d41ff03e93df1f57759db8d89f627376065b11aa", "ff07d5400000e5ffffff00"}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x7800, 0x8, 0x8d, 0x5, {{0x1e, 0x4, 0x3, 0x3b, 0x78, 0x67, 0x0, 0x5, 0x0, 0x0, @multicast1, @rand_addr=0x64010101, {[@lsrr={0x83, 0x27, 0x9d, [@dev={0xac, 0x14, 0x14, 0xb}, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x19}, @rand_addr=0x3, @multicast1, @multicast1, @loopback, @local]}, @ssrr={0x89, 0x7, 0x79, [@local]}, @noop, @generic={0x82, 0x5, "a801c4"}, @timestamp_addr={0x44, 0x24, 0xbc, 0x1, 0x4, [{@empty, 0x200000}, {@loopback, 0x7ff}, {@multicast2, 0x6}, {@private=0xa010102, 0x5}]}, @cipso={0x86, 0xb, 0x3, [{0x2, 0x5, "473ddf"}]}]}}}}}) (async) bind$packet(r0, &(0x7f0000000280)={0x11, 0x1b, r4, 0x1, 0x91, 0x6, @remote}, 0x14) (async) sendmsg$netlink(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4000800) (async) kernel console output (not intermixed with test programs): node identity twice [ 189.581933][ T9876] raw_sendmsg: syz.4.1272 forgot to set AF_INET. Fix it! [ 189.623396][ T9872] tipc: Cannot configure node identity twice [ 189.647202][ T9872] tipc: Cannot configure node identity twice [ 190.546512][ T9919] __nla_validate_parse: 11 callbacks suppressed [ 190.546531][ T9919] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1288'. [ 190.576694][ T9919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1288'. [ 190.748170][ T9931] netlink: 'syz.3.1292': attribute type 10 has an invalid length. [ 190.794590][ T9931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.834532][ T9931] team0: Port device batadv0 added [ 190.952830][ T9940] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1293'. [ 191.001811][ T9942] gtp0: entered promiscuous mode [ 191.015632][ T9942] gtp0: entered allmulticast mode [ 191.075862][ T9946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1294'. [ 191.281255][ T9957] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1297'. [ 191.528663][ T5239] Bluetooth: hci3: command 0x0405 tx timeout [ 191.674858][ T9989] sctp: [Deprecated]: syz.2.1306 (pid 9989) Use of struct sctp_assoc_value in delayed_ack socket option. [ 191.674858][ T9989] Use struct sctp_sack_info instead [ 191.691986][ T9987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1304'. [ 191.717079][ T9987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1304'. [ 191.795681][ T9996] netlink: 'syz.0.1309': attribute type 4 has an invalid length. [ 191.866958][ T9999] netem: unknown loss type 0 [ 191.874065][ T9999] netem: change failed [ 191.884520][ T9996] netlink: 'syz.0.1309': attribute type 7 has an invalid length. [ 191.907163][ T9996] netlink: 'syz.0.1309': attribute type 8 has an invalid length. [ 192.534582][T10016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1315'. [ 192.568266][T10019] netlink: 'syz.1.1316': attribute type 21 has an invalid length. [ 192.589351][T10019] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1316'. [ 193.103774][T10039] netlink: 'syz.3.1323': attribute type 10 has an invalid length. [ 193.121776][T10039] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1323'. [ 193.489566][T10057] IPv6: sit1: Disabled Multicast RS [ 193.802280][T10074] 0: renamed from hsr_slave_1 (while UP) [ 193.838862][T10074] 0: entered allmulticast mode [ 193.850365][T10074] net_ratelimit: 325 callbacks suppressed [ 193.850386][T10074] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 193.901357][T10080] netlink: 'syz.0.1339': attribute type 4 has an invalid length. [ 193.912706][T10078] nlmon0: Master is either lo or non-ether device [ 193.926469][ T5322] IPVS: starting estimator thread 0... [ 194.030882][T10087] IPVS: using max 20 ests per chain, 48000 per kthread [ 194.207025][T10098] netlink: 'syz.0.1345': attribute type 4 has an invalid length. [ 194.654585][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.814401][T10138] macsec0: entered promiscuous mode [ 195.420860][T10177] netlink: 'syz.3.1368': attribute type 1 has an invalid length. [ 195.658248][T10194] netlink: 'syz.0.1373': attribute type 10 has an invalid length. [ 195.692637][T10194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.718063][T10194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.754395][T10194] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 195.770709][T10199] netlink: 'syz.0.1373': attribute type 10 has an invalid length. [ 196.209485][T10212] x_tables: duplicate underflow at hook 1 [ 196.448348][T10233] __nla_validate_parse: 14 callbacks suppressed [ 196.448367][T10233] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1386'. [ 196.853291][T10259] validate_nla: 1 callbacks suppressed [ 196.853311][T10259] netlink: 'syz.4.1395': attribute type 11 has an invalid length. [ 196.919591][T10256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1394'. [ 197.185583][T10284] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 197.224518][T10285] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 197.367148][T10288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1403'. [ 197.594627][T10305] macvlan0: entered promiscuous mode [ 197.604818][T10305] macvlan0: entered allmulticast mode [ 197.622380][T10305] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 197.639199][T10305] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 197.677860][T10305] team0: Port device macvlan0 added [ 197.697804][T10306] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1411'. [ 197.745942][T10305] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1410'. [ 197.809477][T10305] openvswitch: netlink: Tunnel attr 5 has unexpected len 1 expected 0 [ 197.839277][T10309] netlink: 'syz.3.1410': attribute type 2 has an invalid length. [ 197.864425][T10309] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1410'. [ 198.072074][T10323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1417'. [ 199.002036][T10361] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1428'. [ 199.478976][T10383] netlink: 'syz.2.1436': attribute type 7 has an invalid length. [ 199.507092][T10384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1437'. [ 199.523459][T10383] : entered promiscuous mode [ 199.586279][T10387] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1438'. [ 199.818611][T10399] netlink: 'syz.4.1442': attribute type 9 has an invalid length. [ 199.924003][T10402] netlink: 'syz.4.1442': attribute type 9 has an invalid length. [ 199.976544][T10399] ip6_vti0: entered promiscuous mode [ 200.021430][T10399] vlan2: entered promiscuous mode [ 200.057291][T10399] ip6_vti0: left promiscuous mode [ 201.025419][T10440] netlink: 'syz.4.1454': attribute type 9 has an invalid length. [ 201.073358][T10440] bond_slave_0: entered promiscuous mode [ 201.079770][T10440] bond_slave_1: entered promiscuous mode [ 201.105381][T10440] macvlan0: entered promiscuous mode [ 201.121513][T10440] bond0: entered promiscuous mode [ 201.145301][T10440] macvlan0: entered allmulticast mode [ 201.165354][T10440] bond0: entered allmulticast mode [ 201.185283][T10440] bond_slave_0: entered allmulticast mode [ 201.209809][T10440] bond_slave_1: entered allmulticast mode [ 201.222744][T10440] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 201.835881][T10478] __nla_validate_parse: 7 callbacks suppressed [ 201.835900][T10478] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1465'. [ 202.023140][T10481] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1462'. [ 202.370866][T10503] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1472'. [ 202.858542][T10521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1477'. [ 202.910330][T10526] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1477'. [ 203.001969][T10521] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1477'. [ 203.077392][ T46] IPVS: starting estimator thread 0... [ 203.177199][T10536] IPVS: using max 20 ests per chain, 48000 per kthread [ 203.289952][T10546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.309029][T10542] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1481'. [ 203.407213][T10549] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1481'. [ 203.451420][T10552] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1484'. [ 203.661690][T10560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1487'. [ 203.816285][T10566] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 203.965662][T10572] batadv0: entered promiscuous mode [ 204.565320][T10597] netlink: 'syz.4.1497': attribute type 7 has an invalid length. [ 204.599618][T10597] netlink: 'syz.4.1497': attribute type 6 has an invalid length. [ 204.679939][T10603] netlink: 'syz.4.1497': attribute type 25 has an invalid length. [ 206.607469][T10705] xt_cgroup: invalid path, errno=-2 [ 206.751039][T10712] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 206.777561][T10712] netlink: 'syz.0.1528': attribute type 14 has an invalid length. [ 206.967578][ T5239] Bluetooth: hci4: command 0x0405 tx timeout [ 206.992081][T10721] __nla_validate_parse: 10 callbacks suppressed [ 206.992100][T10721] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1534'. [ 207.162520][T10726] delete_channel: no stack [ 207.189350][T10729] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1538'. [ 207.247263][T10734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1538'. [ 207.350110][T10738] tipc: Can't bind to reserved service type 1 [ 207.382770][T10738] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1540'. [ 207.521693][T10750] netlink: 'syz.3.1543': attribute type 10 has an invalid length. [ 207.534110][T10750] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1543'. [ 207.571135][T10750] net veth1_virt_wifi virt_wifi0 (unregistering): left allmulticast mode [ 207.580158][T10751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1539'. [ 207.605397][T10750] net veth1_virt_wifi virt_wifi0 (unregistering): left promiscuous mode [ 207.689835][T10750] team0: Port device macvlan0 removed [ 207.708641][T10765] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1546'. [ 207.751374][T10770] netlink: 1044 bytes leftover after parsing attributes in process `syz.0.1544'. [ 208.001065][T10785] netlink: 'syz.3.1551': attribute type 13 has an invalid length. [ 208.036124][T10785] veth0_macvtap: left promiscuous mode [ 208.056559][T10785] macvtap0: entered allmulticast mode [ 208.062763][T10795] x_tables: duplicate underflow at hook 1 [ 208.078487][T10785] macvtap0: refused to change device tx_queue_len [ 208.103574][T10793] xt_bpf: check failed: parse error [ 208.186289][T10800] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1558'. [ 208.241310][T10800] bond0: (slave macvlan3): Enslaving as an active interface with an up link [ 208.284828][T10800] bond0: (slave macvlan3): Releasing backup interface [ 208.392427][T10812] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1561'. [ 208.404927][T10812] netlink: 'syz.2.1561': attribute type 5 has an invalid length. [ 208.674121][T10823] netlink: 'syz.2.1565': attribute type 9 has an invalid length. [ 209.408551][T10857] netlink: 'syz.0.1575': attribute type 1 has an invalid length. [ 209.416339][T10857] netlink: 'syz.0.1575': attribute type 1 has an invalid length. [ 209.688246][T10865] IPVS: set_ctl: invalid protocol: 46 0.0.0.0:20001 [ 210.141749][T10899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.271747][T10892] infiniband syz2: set active [ 210.279101][T10892] infiniband syz2: added bond_slave_0 [ 210.338707][T10892] RDS/IB: syz2: added [ 210.369787][T10892] smc: adding ib device syz2 with port count 1 [ 210.386945][T10892] smc: ib device syz2 port 1 has pnetid [ 211.206108][T10935] xt_ipvs: protocol family 7 not supported [ 212.912459][T10952] __nla_validate_parse: 10 callbacks suppressed [ 212.912479][T10952] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1602'. [ 213.408876][T10982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1614'. [ 214.060633][T11010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1622'. [ 214.062608][T11011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1623'. [ 214.155543][T11018] validate_nla: 7 callbacks suppressed [ 214.155563][T11018] netlink: 'syz.0.1624': attribute type 3 has an invalid length. [ 214.232922][T11020] netlink: 'syz.4.1625': attribute type 10 has an invalid length. [ 214.246317][T11020] team0: Port device netdevsim0 added [ 214.255797][T11020] netlink: 'syz.4.1625': attribute type 10 has an invalid length. [ 214.289808][T11020] team0: Failed to send options change via netlink (err -105) [ 214.301944][T11020] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 214.316582][T11020] team0: Port device netdevsim0 removed [ 214.361618][T11020] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1625'. [ 214.469526][T11027] netlink: 'syz.0.1627': attribute type 10 has an invalid length. [ 215.337165][T11079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1644'. [ 215.515305][T11091] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1645'. [ 215.640993][T11091] tipc: Enabled bearer , priority 0 [ 215.712468][T11091] tipc: Disabling bearer [ 215.738850][T11104] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1648'. [ 215.827900][T11108] netlink: 'syz.3.1649': attribute type 1 has an invalid length. [ 215.852305][T11108] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1649'. [ 215.876816][T11108] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1649'. [ 216.383252][T11145] ax25_connect(): syz.3.1660 uses autobind, please contact jreuter@yaina.de [ 216.578100][T11152] bridge0: port 1(vlan3) entered blocking state [ 216.605779][T11152] bridge0: port 1(vlan3) entered disabled state [ 216.634394][T11152] vlan3: entered allmulticast mode [ 216.652846][T11152] vlan3: left allmulticast mode [ 216.937546][T11170] netlink: 'syz.4.1667': attribute type 4 has an invalid length. [ 216.946328][T11170] netlink: 'syz.4.1667': attribute type 1 has an invalid length. [ 217.026871][T11174] IPVS: set_ctl: invalid protocol: 255 0.0.0.0:4 [ 217.142294][T11181] Bluetooth: MGMT ver 1.23 [ 217.387542][T11192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.401380][T11192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.417467][T11192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.430619][T11192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.493528][T11192] team0: Port device batadv0 removed [ 217.660755][T11203] batadv_slave_1: entered promiscuous mode [ 217.683693][T11202] batadv_slave_1: left promiscuous mode [ 217.920543][T11215] netlink: 'syz.3.1685': attribute type 11 has an invalid length. [ 218.123518][ C1] vxcan0: j1939_tp_txtimer: 0xffff888022b01000: tx aborted with unknown reason: -2 [ 218.133478][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888022b03400: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 218.153834][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888022b01000: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 218.296037][T11229] __nla_validate_parse: 9 callbacks suppressed [ 218.296055][T11229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1688'. [ 218.542509][T11242] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1691'. [ 218.881154][T11263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1697'. [ 218.929048][T11265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.004324][T11267] netlink: 'syz.2.1699': attribute type 7 has an invalid length. [ 219.012469][T11267] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1699'. [ 219.094895][T11269] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 219.156343][T11269] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 219.176583][T11269] gretap1: entered promiscuous mode [ 219.190219][T11276] ipt_rpfilter: unknown options [ 219.200714][T11269] gretap1: entered allmulticast mode [ 219.574374][T11305] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1711'. [ 219.597688][T11305] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1711'. [ 219.644644][T11299] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1709'. [ 219.714964][T11299] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 219.747383][T11299] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 219.764732][T11299] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 219.799002][T11310] syzkaller1: entered promiscuous mode [ 219.804528][T11310] syzkaller1: entered allmulticast mode [ 219.819058][T11312] netlink: 'syz.1.1713': attribute type 21 has an invalid length. [ 219.939948][T11323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1716'. [ 220.290218][T11339] syzkaller1: entered promiscuous mode [ 220.295909][T11339] syzkaller1: entered allmulticast mode [ 222.754493][T11383] netlink: 'syz.1.1737': attribute type 2 has an invalid length. [ 222.911278][T11395] netlink: 'syz.3.1740': attribute type 1 has an invalid length. [ 222.992169][T11403] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1742'. [ 223.014106][T11398] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1743'. [ 223.310669][T11414] __nla_validate_parse: 1 callbacks suppressed [ 223.310688][T11414] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.1746'. [ 223.333373][T11414] netlink: zone id is out of range [ 223.343028][T11414] netlink: zone id is out of range [ 223.355492][T11414] netlink: zone id is out of range [ 223.382417][T11414] netlink: zone id is out of range [ 223.397595][T11414] netlink: zone id is out of range [ 223.409984][T11414] netlink: zone id is out of range [ 223.431732][T11414] netlink: zone id is out of range [ 223.444551][T11414] netlink: zone id is out of range [ 223.464754][T11414] netlink: zone id is out of range [ 223.803357][T11432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1752'. [ 224.393155][T11451] tap0: tun_chr_ioctl cmd 1074025677 [ 224.413391][T11451] tap0: linktype set to 65534 [ 224.514199][T11454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1757'. [ 224.764108][T11463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1762'. [ 224.857843][T11473] netlink: 'syz.0.1765': attribute type 3 has an invalid length. [ 225.220294][T11500] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1773'. [ 225.247634][T11501] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1773'. [ 225.280330][T11507] netlink: 'syz.3.1774': attribute type 1 has an invalid length. [ 225.297125][T11507] netlink: 512 bytes leftover after parsing attributes in process `syz.3.1774'. [ 225.328092][T11500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1773'. [ 225.394200][T11511] team0: Device ipvlan1 failed to register rx_handler [ 225.515300][T11514] netlink: 'syz.0.1776': attribute type 10 has an invalid length. [ 225.532586][T11521] xt_l2tp: v2 sid > 0xffff: 262144 [ 225.742466][T11537] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1784'. [ 226.220752][T11573] netlink: 'syz.3.1792': attribute type 7 has an invalid length. [ 226.333952][T11577] bridge0: port 1(vlan3) entered blocking state [ 226.344873][T11577] bridge0: port 1(vlan3) entered disabled state [ 226.352506][T11577] vlan3: entered allmulticast mode [ 226.367476][T11577] vlan3: left allmulticast mode [ 226.747116][T11606] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 226.748449][T11611] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1804'. [ 226.777992][T11611] netem: invalid attributes len -24 [ 227.377427][T11636] tun0: tun_chr_ioctl cmd 1074025681 [ 227.574388][T11651] dummy0: entered promiscuous mode [ 227.588870][T11651] dummy0: left promiscuous mode [ 227.619059][T11653] netlink: 'syz.2.1818': attribute type 1 has an invalid length. [ 227.696555][T11657] netlink: 'syz.1.1820': attribute type 29 has an invalid length. [ 227.841117][T11662] bond0: option updelay: invalid value (18446744073709551615) [ 227.869869][T11662] bond0: option updelay: allowed values 0 - 2147483647 [ 228.673799][T11691] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.682934][T11691] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.692009][T11691] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.700884][T11691] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.775844][T11699] ip6t_REJECT: ECHOREPLY is not supported [ 228.908438][T11706] netlink: 'syz.0.1839': attribute type 10 has an invalid length. [ 229.645854][T11740] __nla_validate_parse: 3 callbacks suppressed [ 229.645876][T11740] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1848'. [ 229.745927][T11744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1850'. [ 229.786316][T11698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.835142][T11748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1851'. [ 229.928652][T11753] netlink: 2044 bytes leftover after parsing attributes in process `syz.2.1853'. [ 230.015192][T11761] ieee802154 phy0 wpan0: encryption failed: -22 [ 230.031503][T11760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1854'. [ 230.047420][T11762] FAULT_INJECTION: forcing a failure. [ 230.047420][T11762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.074272][T11762] CPU: 1 UID: 0 PID: 11762 Comm: syz.1.1856 Not tainted 6.11.0-rc6-syzkaller-00215-g6513eb3d3191 #0 [ 230.085092][T11762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 230.095171][T11762] Call Trace: [ 230.098475][T11762] [ 230.101422][T11762] dump_stack_lvl+0x241/0x360 [ 230.106125][T11762] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.111348][T11762] ? __pfx__printk+0x10/0x10 [ 230.115960][T11762] ? __pfx_lock_release+0x10/0x10 [ 230.121019][T11762] should_fail_ex+0x3b0/0x4e0 [ 230.125733][T11762] _copy_from_user+0x2f/0xe0 [ 230.130357][T11762] copy_msghdr_from_user+0xae/0x680 [ 230.135582][T11762] ? _parse_integer_limit+0x1b5/0x200 [ 230.141099][T11762] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 230.146956][T11762] __sys_sendmmsg+0x374/0x740 [ 230.151667][T11762] ? __pfx___sys_sendmmsg+0x10/0x10 [ 230.156933][T11762] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 230.162863][T11762] ? ksys_write+0x23e/0x2c0 [ 230.167391][T11762] ? __pfx_lock_release+0x10/0x10 [ 230.172458][T11762] ? vfs_write+0x7c4/0xc90 [ 230.176997][T11762] ? __mutex_unlock_slowpath+0x21d/0x750 [ 230.182659][T11762] ? __pfx_vfs_write+0x10/0x10 [ 230.187478][T11762] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 230.193479][T11762] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 230.199835][T11762] ? do_syscall_64+0x100/0x230 [ 230.204633][T11762] __x64_sys_sendmmsg+0xa0/0xb0 [ 230.209511][T11762] do_syscall_64+0xf3/0x230 [ 230.214039][T11762] ? clear_bhb_loop+0x35/0x90 [ 230.218749][T11762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.224670][T11762] RIP: 0033:0x7f4f9077def9 [ 230.229104][T11762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.248743][T11762] RSP: 002b:00007f4f901de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 230.257199][T11762] RAX: ffffffffffffffda RBX: 00007f4f90936058 RCX: 00007f4f9077def9 [ 230.265193][T11762] RDX: 0000000000000002 RSI: 0000000020004900 RDI: 0000000000000006 [ 230.273211][T11762] RBP: 00007f4f901de090 R08: 0000000000000000 R09: 0000000000000000 [ 230.281215][T11762] R10: 0000000000008004 R11: 0000000000000246 R12: 0000000000000001 [ 230.289217][T11762] R13: 0000000000000001 R14: 00007f4f90936058 R15: 00007ffc421f0f48 [ 230.297204][T11762] [ 230.403669][T11783] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1863'. [ 230.469505][T11785] bond_slave_0: entered promiscuous mode [ 230.475265][T11785] bond_slave_1: entered promiscuous mode [ 230.482822][T11785] bond_slave_0: left promiscuous mode [ 230.488845][T11785] bond_slave_1: left promiscuous mode [ 230.582704][T11789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1867'. [ 230.700077][T11794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1868'. [ 230.709688][T11796] net_ratelimit: 275 callbacks suppressed [ 230.709707][T11796] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 231.013278][T11813] netlink: 'syz.0.1874': attribute type 3 has an invalid length. [ 231.085354][T11817] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1876'. [ 231.310730][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1879'. [ 232.481144][T11885] netlink: 'syz.3.1897': attribute type 1 has an invalid length. [ 232.490188][T11885] netlink: 'syz.3.1897': attribute type 1 has an invalid length. [ 232.834149][T11904] netlink: 'syz.3.1904': attribute type 6 has an invalid length. [ 233.049366][T11916] netlink: 'syz.2.1908': attribute type 1 has an invalid length. [ 233.068874][T11916] IPVS: Unknown mcast interface: vcan0 [ 233.275129][T11923] xt_CT: No such helper "pptp" [ 233.292750][T11930] xt_CT: No such helper "pptp" [ 233.462306][T11944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.520535][T11948] hsr0: entered promiscuous mode [ 233.525557][T11944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.526494][T11948] macsec5: entered allmulticast mode [ 233.542683][T11948] hsr0: entered allmulticast mode [ 233.548303][T11948] hsr_slave_0: entered allmulticast mode [ 233.554107][T11948] hsr_slave_1: entered allmulticast mode [ 233.565326][T11948] hsr0: left allmulticast mode [ 233.571922][T11948] hsr_slave_0: left allmulticast mode [ 233.577458][T11948] hsr_slave_1: left allmulticast mode [ 233.688815][T11951] netlink: 'syz.0.1919': attribute type 10 has an invalid length. [ 233.701009][T11951] ipvlan1: entered promiscuous mode [ 233.706290][T11951] ipvlan1: entered allmulticast mode [ 233.712050][T11951] veth0_vlan: entered allmulticast mode [ 233.720941][T11951] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 234.355084][T11989] pim6reg: entered allmulticast mode [ 234.608405][T12009] netlink: 'syz.1.1934': attribute type 3 has an invalid length. [ 235.016076][T12029] __nla_validate_parse: 13 callbacks suppressed [ 235.016094][T12029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1939'. [ 235.044278][T12029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1939'. [ 235.054713][T12029] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 235.079921][T12029] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 235.288635][T12045] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1943'. [ 235.322996][T12045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1943'. [ 235.471340][T12062] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1947'. [ 235.486155][T12062] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1947'. [ 235.523167][T12062] : entered promiscuous mode [ 235.705215][T12074] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1950'. [ 235.715262][T12075] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1950'. [ 235.730418][T12076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1949'. [ 235.742457][T12076] netlink: 'syz.2.1949': attribute type 15 has an invalid length. [ 235.895613][T12080] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1951'. [ 236.460858][T12099] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 236.584900][ T8844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.635656][ T8844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.664895][T12102] netlink: 'syz.4.1957': attribute type 1 has an invalid length. [ 237.057516][T12116] pim6reg: entered allmulticast mode [ 237.103252][T12116] pim6reg: left allmulticast mode [ 237.486411][T12131] Cannot find del_set index 4 as target [ 237.688605][ T5239] Bluetooth: hci2: command 0x0406 tx timeout [ 237.702354][T12144] ip6gretap0: mtu less than device minimum [ 238.057953][T12148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.404612][T12179] netlink: set zone limit has 8 unknown bytes [ 238.608679][T12191] netlink: 'syz.2.1984': attribute type 1 has an invalid length. [ 238.849953][T12200] ipt_REJECT: TCP_RESET invalid for non-tcp [ 240.121983][T12254] SET target dimension over the limit! [ 240.834286][T12279] __nla_validate_parse: 15 callbacks suppressed [ 240.834305][T12279] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2010'. [ 242.140524][T12327] netlink: 'syz.4.2025': attribute type 11 has an invalid length. [ 242.193268][T12332] ieee802154 phy0 wpan0: encryption failed: -22 [ 242.200795][T12327] netlink: 211132 bytes leftover after parsing attributes in process `syz.4.2025'. [ 242.478520][T12351] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2032'. [ 242.505081][T12353] netlink: 'syz.2.2033': attribute type 1 has an invalid length. [ 242.746382][T12361] netlink: 'syz.1.2036': attribute type 1 has an invalid length. [ 243.003889][T12381] netlink: 'syz.3.2042': attribute type 10 has an invalid length. [ 243.018793][T12381] bond0: (slave bond_slave_0): Releasing backup interface [ 243.053429][T12383] syzkaller1: entered promiscuous mode [ 243.062590][T12383] syzkaller1: entered allmulticast mode [ 243.076346][T12383] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2043'. [ 243.275524][T12394] netlink: 'syz.1.2047': attribute type 21 has an invalid length. [ 243.488064][T12398] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 243.561438][T12405] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2050'. [ 243.691368][T12412] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2054'. [ 243.703188][T12416] netlink: 892 bytes leftover after parsing attributes in process `syz.2.2055'. [ 243.784501][T12423] netlink: 'syz.4.2054': attribute type 8 has an invalid length. [ 243.813904][T12426] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2057'. [ 243.865343][T12421] netlink: 5296 bytes leftover after parsing attributes in process `syz.0.2056'. [ 243.897963][T12421] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 244.074929][T12438] netlink: 4272 bytes leftover after parsing attributes in process `syz.1.2060'. [ 244.190044][T12443] delete_channel: no stack [ 244.444495][T12463] x_tables: duplicate underflow at hook 1 [ 244.614396][T12466] bridge_slave_0: entered promiscuous mode [ 244.648153][T12466] bridge_slave_0: entered allmulticast mode [ 245.719830][T12530] netlink: 'syz.1.2089': attribute type 10 has an invalid length. [ 246.106812][T12557] __nla_validate_parse: 5 callbacks suppressed [ 246.106831][T12557] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2095'. [ 246.328156][T12572] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2097'. [ 246.440224][T12575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2099'. [ 246.515880][T12583] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2099'. [ 246.824591][T12605] netlink: 'syz.0.2107': attribute type 4 has an invalid length. [ 246.909280][T12612] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2108'. [ 246.921693][T12610] netlink: 2060 bytes leftover after parsing attributes in process `syz.4.2106'. [ 246.938750][T12610] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2106'. [ 247.492245][T12646] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 247.530464][T12648] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2120'. [ 247.751358][T12659] netlink: 'syz.4.2124': attribute type 5 has an invalid length. [ 247.798603][T12659] netlink: 'syz.4.2124': attribute type 5 has an invalid length. [ 247.854670][T12673] xt_hashlimit: size too large, truncated to 1048576 [ 247.876795][T12673] xt_hashlimit: max too large, truncated to 1048576 [ 247.902785][T12673] xt_hashlimit: overflow, try lower: 0/0 [ 247.967429][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 248.279608][T12689] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2131'. [ 248.305203][T12696] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2131'. [ 248.979216][T12736] syz.4.2146 uses old SIOCAX25GETINFO [ 249.239004][T12753] bond0: entered promiscuous mode [ 249.255987][T12753] bond_slave_1: entered promiscuous mode [ 249.399472][T12750] bond0: left promiscuous mode [ 249.405503][T12750] bond_slave_1: left promiscuous mode [ 249.722441][T12782] netlink: 'syz.4.2162': attribute type 1 has an invalid length. [ 249.754722][ T8845] tipc: Subscription rejected, illegal request [ 249.760364][T12783] delete_channel: no stack [ 249.875042][T12785] netlink: 'syz.2.2164': attribute type 11 has an invalid length. [ 250.055872][T12796] No such timeout policy "syz0" [ 250.267830][T12809] netlink: 'syz.2.2171': attribute type 11 has an invalid length. [ 251.146573][T12863] __nla_validate_parse: 12 callbacks suppressed [ 251.165033][T12863] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2190'. [ 251.181045][T12866] netlink: 'syz.2.2192': attribute type 21 has an invalid length. [ 251.202860][T12866] netlink: 'syz.2.2192': attribute type 6 has an invalid length. [ 251.217285][T12866] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2192'. [ 251.305303][T12870] syzkaller1: entered promiscuous mode [ 251.317768][T12870] syzkaller1: entered allmulticast mode [ 251.357371][T12881] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2198'. [ 251.665825][T12896] netlink: 9392 bytes leftover after parsing attributes in process `syz.4.2203'. [ 251.693179][T12896] netlink: 'syz.4.2203': attribute type 1 has an invalid length. [ 251.722552][T12900] netlink: 9392 bytes leftover after parsing attributes in process `syz.4.2203'. [ 251.736355][T12898] (unnamed net_device) (uninitialized): option ad_select: invalid value (253) [ 251.759354][T12900] netlink: 'syz.4.2203': attribute type 1 has an invalid length. [ 251.781726][T12903] atomic_op ffff88807d883198 conn xmit_atomic 0000000000000000 [ 251.880535][T12906] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2207'. [ 251.895641][T12908] netlink: 'syz.4.2208': attribute type 1 has an invalid length. [ 251.909010][T12908] netlink: 9116 bytes leftover after parsing attributes in process `syz.4.2208'. [ 251.920067][T12908] netlink: 'syz.4.2208': attribute type 1 has an invalid length. [ 251.935817][T12908] netlink: 209 bytes leftover after parsing attributes in process `syz.4.2208'. [ 251.965491][T12913] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.2208'. [ 251.983244][T12915] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2210'. [ 252.062823][T12919] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 252.084129][T12919] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 252.095452][T12919] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 252.114980][T12919] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 252.282265][T12927] ipt_REJECT: ECHOREPLY no longer supported. [ 252.819601][T12953] validate_nla: 4 callbacks suppressed [ 252.819620][T12953] netlink: 'syz.0.2222': attribute type 2 has an invalid length. [ 252.862625][T12955] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 252.999736][T12964] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 253.064473][T12968] netlink: 'syz.4.2227': attribute type 1 has an invalid length. [ 253.132676][T12968] bond3: (slave bridge3): Enslaving as a backup interface with an up link [ 253.154789][T12968] 8021q: adding VLAN 0 to HW filter on device bond3 [ 253.163790][ T8845] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 253.420806][T12968] bond3 (unregistering): (slave bridge3): Removing an active aggregator [ 253.430317][T12968] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 253.446472][T12968] bond3 (unregistering): Released all slaves [ 253.482397][T12985] veth10: entered allmulticast mode [ 253.771763][T13005] netlink: 'syz.0.2238': attribute type 1 has an invalid length. [ 254.347454][T13043] xt_TCPMSS: Only works on TCP SYN packets [ 254.420213][T13047] vlan3: entered allmulticast mode [ 254.491414][T13050] netlink: 'syz.0.2251': attribute type 10 has an invalid length. [ 254.559600][T13050] bond0: (slave ): Enslaving as an active interface with an up link [ 254.710493][T13059] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.722880][T13059] infiniband syz2: set active [ 254.740451][T13059] infiniband syz2: set active [ 255.341616][T13111] netlink: 'syz.0.2267': attribute type 1 has an invalid length. [ 255.358686][T13106] sctp: [Deprecated]: syz.2.2265 (pid 13106) Use of struct sctp_assoc_value in delayed_ack socket option. [ 255.358686][T13106] Use struct sctp_sack_info instead [ 255.478013][T13106] IPVS: Scheduler module ip_vs_sip not found [ 255.511182][T13119] vcan0: MTU too low for tipc bearer [ 255.517398][T13119] tipc: Enabling of bearer rejected, failed to enable media [ 256.095669][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.292375][T13177] netlink: 'syz.0.2287': attribute type 11 has an invalid length. [ 256.412488][T13184] __nla_validate_parse: 22 callbacks suppressed [ 256.412509][T13184] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2291'. [ 256.463419][T13188] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2292'. [ 256.723235][T13203] netlink: 'syz.2.2296': attribute type 11 has an invalid length. [ 256.741799][T13207] bridge2: entered promiscuous mode [ 256.770203][T13208] bridge3: entered promiscuous mode [ 256.996406][T13217] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2301'. [ 257.202442][T13232] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2303'. [ 257.223619][T13232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2303'. [ 257.244247][T13235] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2307'. [ 257.255735][T13232] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2303'. [ 257.340471][T13231] syzkaller0: entered promiscuous mode [ 257.353466][T13231] syzkaller0: entered allmulticast mode [ 259.393183][T13262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2315'. [ 259.403429][T13262] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 259.412947][T13262] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 259.630402][T13280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2321'. [ 259.632325][T13282] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2322'. [ 259.670202][T13280] batadv_slave_1: entered promiscuous mode [ 259.704250][T13280] netlink: 'syz.3.2321': attribute type 1 has an invalid length. [ 259.721736][T13280] netlink: 'syz.3.2321': attribute type 3 has an invalid length. [ 259.732620][T13280] NCSI netlink: No device for ifindex 0 [ 259.794007][T13279] batadv_slave_1: left promiscuous mode [ 260.040566][T13305] ipvlan0: entered promiscuous mode [ 260.217342][T13308] netlink: 'syz.0.2327': attribute type 10 has an invalid length. [ 260.225320][T13308] batadv0: left promiscuous mode [ 260.233184][T13308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.249666][T13308] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 260.259084][T13306] netlink: 'syz.0.2327': attribute type 10 has an invalid length. [ 260.509516][T13334] ip6t_srh: unknown srh match flags 4020 [ 260.761032][T13345] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.779639][T13345] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.909422][T13345] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.921722][T13345] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.073386][T13345] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.099154][T13345] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.131295][T13366] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 261.239094][T13345] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.283059][T13345] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.641574][T13345] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.674669][T13345] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.722433][T13345] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.765271][T13345] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.819098][T13345] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.846965][T13345] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.878878][T13345] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.902988][T13405] __nla_validate_parse: 10 callbacks suppressed [ 261.903010][T13405] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2362'. [ 261.910314][T13345] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.013955][T13412] netlink: 'syz.4.2363': attribute type 1 has an invalid length. [ 262.031819][T13406] No such timeout policy "syz0" [ 262.044874][T13412] netlink: 'syz.4.2363': attribute type 4 has an invalid length. [ 262.086325][T13412] netlink: 15334 bytes leftover after parsing attributes in process `syz.4.2363'. [ 262.239037][T13423] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2366'. [ 262.257663][ T8844] wlan1: Trigger new scan to find an IBSS to join [ 262.355723][T13431] netlink: 'syz.2.2368': attribute type 1 has an invalid length. [ 262.372212][T13431] netlink: 'syz.2.2368': attribute type 2 has an invalid length. [ 262.601752][T13445] netlink: 'syz.2.2374': attribute type 29 has an invalid length. [ 262.665835][T13450] x_tables: unsorted entry at hook 3 [ 262.680662][T13451] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2376'. [ 263.529228][T13490] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2385'. [ 263.552664][T13490] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 263.570678][T13490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2385'. [ 263.822976][T13498] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2388'. [ 264.126055][T13511] "syz.1.2392" (13511) uses obsolete ecb(arc4) skcipher [ 264.234098][T13530] netlink: 'syz.3.2397': attribute type 3 has an invalid length. [ 264.242658][T13530] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2397'. [ 264.251334][T13532] netlink: 9348 bytes leftover after parsing attributes in process `syz.0.2398'. [ 264.362680][T13536] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 264.439959][T13540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2402'. [ 264.649112][T13549] batadv_slave_1: default FDB implementation only supports local addresses [ 265.094131][T13577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.116418][T13576] veth0_vlan: left promiscuous mode [ 265.130969][T13576] veth0_vlan: entered promiscuous mode [ 265.726451][T13607] xt_NFQUEUE: number of total queues is 0 [ 265.861025][T13616] validate_nla: 3 callbacks suppressed [ 265.861039][T13616] netlink: 'syz.4.2425': attribute type 1 has an invalid length. [ 265.904921][T13616] tap0: tun_chr_ioctl cmd 2148553947 [ 265.913367][T13616] tap0: tun_chr_ioctl cmd 35092 [ 266.249349][ T8844] wlan1: Trigger new scan to find an IBSS to join [ 266.372994][T13638] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 266.381677][T13638] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 266.663764][T13655] netlink: 'syz.0.2436': attribute type 7 has an invalid length. [ 266.969071][T13674] macsec1: entered promiscuous mode [ 266.984624][T13674] macsec1: entered allmulticast mode [ 267.375219][T13699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.418841][T13699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.525451][T13712] __nla_validate_parse: 14 callbacks suppressed [ 267.525472][T13712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2453'. [ 267.643857][T13721] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2456'. [ 267.702620][T13726] lo: entered promiscuous mode [ 267.716373][T13726] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 267.750257][T13723] netlink: 'syz.0.2457': attribute type 5 has an invalid length. [ 267.809778][T13729] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2460'. [ 267.840399][T13729] openvswitch: netlink: Message has 3074 unknown bytes. [ 268.129591][T13755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2465'. [ 268.157245][T13755] netlink: 'syz.2.2465': attribute type 11 has an invalid length. [ 268.175338][T13755] netlink: 'syz.2.2465': attribute type 12 has an invalid length. [ 268.232046][T13755] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2465'. [ 268.250858][T12003] wlan1: Creating new IBSS network, BSSID 1a:bb:c1:66:d9:26 [ 268.286955][T13755] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2465'. [ 268.343046][T13764] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2469'. [ 268.447451][T13772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2471'. [ 268.944803][T13795] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 269.069624][T13803] netlink: 'syz.1.2482': attribute type 10 has an invalid length. [ 269.098076][T13803] batman_adv: batadv0: Adding interface: team0 [ 269.104361][T13803] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 269.467141][T13834] dvmrp0: entered allmulticast mode [ 269.495433][T13836] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2492'. [ 269.505844][T13836] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2492'. [ 269.899882][T13865] IPv6: sit2: Disabled Multicast RS [ 270.104571][T13874] netlink: 'syz.4.2504': attribute type 10 has an invalid length. [ 270.138695][T13874] team0: Port device netdevsim0 added [ 270.349389][T13887] netlink: 'syz.0.2508': attribute type 15 has an invalid length. [ 270.857860][T13910] netlink: 'syz.0.2516': attribute type 5 has an invalid length. [ 271.409723][T13938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.427877][ T5239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 271.451965][ T5239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 271.461273][ T5239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 271.470296][ T5239] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 271.487330][ T5239] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 271.494814][ T5239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 271.508699][T13946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.931565][T13959] netlink: 'syz.4.2531': attribute type 25 has an invalid length. [ 271.939929][T13959] netlink: 'syz.4.2531': attribute type 7 has an invalid length. [ 272.015026][T13940] chnl_net:caif_netlink_parms(): no params data found [ 272.210731][T13970] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 272.217291][T13970] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 272.270700][T13940] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.298181][T13940] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.317799][T13940] bridge_slave_0: entered allmulticast mode [ 272.325252][T13940] bridge_slave_0: entered promiscuous mode [ 272.354791][T13940] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.397834][T13940] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.405128][T13940] bridge_slave_1: entered allmulticast mode [ 272.453048][T13940] bridge_slave_1: entered promiscuous mode [ 272.552232][T13940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.586015][T13940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.713758][T13940] team0: Port device team_slave_0 added [ 272.731284][T13940] team0: Port device team_slave_1 added [ 272.777520][T14001] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 272.784102][T14001] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 272.845766][T14001] hsr_slave_0: left promiscuous mode [ 272.881172][T14001] hsr_slave_1: left promiscuous mode [ 272.949803][T13940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.958855][T13940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.988974][T13940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.003178][T14007] netlink: 'syz.0.2545': attribute type 27 has an invalid length. [ 273.012159][T14007] __nla_validate_parse: 7 callbacks suppressed [ 273.012177][T14007] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2545'. [ 273.028263][T14007] A link change request failed with some changes committed already. Interface may have been left with an inconsistent configuration, please check. [ 273.117445][T13940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.124619][T13940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.152969][T13940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.200252][T14019] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2550'. [ 273.280026][T13940] hsr_slave_0: entered promiscuous mode [ 273.300308][T13940] hsr_slave_1: entered promiscuous mode [ 273.312710][T14019] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2550'. [ 273.339418][T14026] bridge0: port 1(bridge_slave_1) entered blocking state [ 273.357910][T14026] bridge0: port 1(bridge_slave_1) entered disabled state [ 273.365190][T14026] bridge_slave_1: entered allmulticast mode [ 273.392777][T14026] bridge_slave_1: entered promiscuous mode [ 273.400742][T14026] bridge0: port 1(bridge_slave_1) entered blocking state [ 273.407943][T14026] bridge0: port 1(bridge_slave_1) entered forwarding state [ 273.465484][T14019] bridge0: port 2(veth1_to_bond) entered blocking state [ 273.473818][T14019] bridge0: port 2(veth1_to_bond) entered disabled state [ 273.481237][T14019] veth1_to_bond: entered allmulticast mode [ 273.488416][T14019] veth1_to_bond: entered promiscuous mode [ 273.494831][T14019] bridge0: port 2(veth1_to_bond) entered blocking state [ 273.501956][T14019] bridge0: port 2(veth1_to_bond) entered forwarding state [ 273.527102][T14026] ɶƣ0GC: entered promiscuous mode [ 273.612051][ T5249] Bluetooth: hci4: command tx timeout [ 273.771995][T14041] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2556'. [ 273.809314][T14041] (unnamed net_device) (uninitialized): (slave 00XD): Device is not bonding slave [ 273.827367][T14041] (unnamed net_device) (uninitialized): option active_slave: invalid value (00XD) [ 274.015090][T13940] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.150341][T14071] xt_TCPMSS: Only works on TCP SYN packets [ 274.252719][T13940] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.262158][T14079] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2568'. [ 274.324282][T14076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2567'. [ 274.346095][T14072] netlink: 'syz.3.2565': attribute type 96 has an invalid length. [ 274.500166][T13940] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.534958][T14076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2567'. [ 274.545015][T14076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2567'. [ 274.689912][T13940] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.806123][T14096] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2574'. [ 274.964439][T14110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2577'. [ 275.071314][T13940] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 275.103110][T13940] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 275.137264][T13940] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 275.170960][T13940] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 275.546493][T13940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.612027][T13940] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.623449][T14138] can: request_module (can-proto-0) failed. [ 275.659115][T12002] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.666337][T12002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.686948][ T5249] Bluetooth: hci4: command tx timeout [ 275.694071][ T8845] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.702188][ T8845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.729703][T14144] geneve2: entered promiscuous mode [ 275.734967][T14144] geneve2: entered allmulticast mode [ 276.080881][T13940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.260270][T13940] veth0_vlan: entered promiscuous mode [ 276.291711][T13940] veth1_vlan: entered promiscuous mode [ 276.363074][T13940] veth0_macvtap: entered promiscuous mode [ 276.416315][T13940] veth1_macvtap: entered promiscuous mode [ 276.560659][T13940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.579516][T13940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.591991][T13940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.640306][T13940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.675311][T13940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.695319][T14189] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 276.697304][T13940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.705731][T14189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.733730][T13940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.744303][T13940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.755808][T13940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.775889][T13940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.799774][T13940] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.814663][T13940] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.824129][T13940] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.846395][T13940] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.946465][T14195] bridge6: entered promiscuous mode [ 276.990732][ T8844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.017157][ T8844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.045857][T12003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.071486][T12003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.109590][T14198] netlink: 'syz.2.2603': attribute type 1 has an invalid length. [ 277.129962][T14200] netlink: 'syz.3.2604': attribute type 11 has an invalid length. [ 277.415457][T14204] xt_l2tp: invalid flags combination: 4 [ 277.472833][T14204] can: request_module (can-proto-3) failed. [ 277.981531][T14230] syzkaller0: entered promiscuous mode [ 277.988163][T14230] syzkaller0: entered allmulticast mode [ 278.135340][T14244] __nla_validate_parse: 15 callbacks suppressed [ 278.135358][T14244] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2619'. [ 278.237688][T14249] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2621'. [ 278.421187][T14259] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2624'. [ 278.688297][T14269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2628'. [ 278.821956][T14277] netlink: 1320 bytes leftover after parsing attributes in process `syz.4.2630'. [ 278.877125][T14277] openvswitch: netlink: Unknown nsh attribute 0 [ 279.061820][T14290] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2636'. [ 279.566025][ T8845] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.776214][T14328] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2651'. [ 279.805905][T14326] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2648'. [ 279.907737][T14336] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2652'. [ 280.158924][T14351] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2656'. [ 280.255417][ T5239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 280.281691][ T5239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 280.297628][ T5239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 280.306021][ T5239] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 280.318406][ T5239] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 280.327164][ T5239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 280.445832][T14367] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 280.881779][T14387] mac80211_hwsim hwsim15 wlan0: entered promiscuous mode [ 280.891171][T14387] macvtap1: entered promiscuous mode [ 280.897242][T14387] macvtap1: entered allmulticast mode [ 280.902745][T14387] mac80211_hwsim hwsim15 wlan0: entered allmulticast mode [ 280.914706][T14387] mac80211_hwsim hwsim15 wlan0: left allmulticast mode [ 280.922029][T14387] mac80211_hwsim hwsim15 wlan0: left promiscuous mode [ 281.133489][T14352] chnl_net:caif_netlink_parms(): no params data found [ 281.137508][T14403] netlink: 'syz.2.2673': attribute type 1 has an invalid length. [ 281.214957][T14407] netlink: 'syz.2.2673': attribute type 1 has an invalid length. [ 281.408945][T14352] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.416153][T14352] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.441902][T14352] bridge_slave_0: entered allmulticast mode [ 281.450312][T14422] xt_CT: You must specify a L4 protocol and not use inversions on it [ 281.467314][T14352] bridge_slave_0: entered promiscuous mode [ 281.552595][ T8845] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.608507][T14352] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.619622][T14352] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.627140][T14352] bridge_slave_1: entered allmulticast mode [ 281.634582][T14352] bridge_slave_1: entered promiscuous mode [ 281.734585][ T8845] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.848533][T14451] netlink: 'syz.0.2686': attribute type 7 has an invalid length. [ 281.899249][ T8845] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.934413][T14447] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 281.959339][T14352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.014965][T14352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.123213][T14352] team0: Port device team_slave_0 added [ 282.156160][T14352] team0: Port device team_slave_1 added [ 282.211429][T14352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.219028][T14352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.245534][T14352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.272571][T14465] macvtap0: entered promiscuous mode [ 282.280183][T14465] macvtap0: left promiscuous mode [ 282.303696][T14352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.332211][T14352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.374565][T14352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.407033][ T5249] Bluetooth: hci4: command tx timeout [ 282.582206][T14352] hsr_slave_0: entered promiscuous mode [ 282.592710][T14352] hsr_slave_1: entered promiscuous mode [ 282.601534][T14352] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.609713][T14352] Cannot create hsr debugfs directory [ 282.660926][T14479] GUP no longer grows the stack in syz.3.2693 (14479): 20006000-20007000 (20005000) [ 282.674514][T14479] CPU: 0 UID: 0 PID: 14479 Comm: syz.3.2693 Not tainted 6.11.0-rc6-syzkaller-00215-g6513eb3d3191 #0 [ 282.685319][T14479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 282.695406][T14479] Call Trace: [ 282.698692][T14479] [ 282.701627][T14479] dump_stack_lvl+0x241/0x360 [ 282.706305][T14479] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.711510][T14479] ? __pfx__printk+0x10/0x10 [ 282.716094][T14479] ? find_vma+0xf9/0x170 [ 282.720346][T14479] ? vma_is_secretmem+0xd/0x50 [ 282.725105][T14479] ? check_vma_flags+0x500/0x5a0 [ 282.730069][T14479] __get_user_pages+0x114d/0x16a0 [ 282.735125][T14479] ? __pfx___get_user_pages+0x10/0x10 [ 282.740516][T14479] __gup_longterm_locked+0xed7/0x17d0 [ 282.745896][T14479] ? sanity_check_pinned_pages+0x12bb/0x13c0 [ 282.751879][T14479] gup_fast_fallback+0x2742/0x2b50 [ 282.757007][T14479] ? __pfx_gup_fast_fallback+0x10/0x10 [ 282.762459][T14479] ? __pfx_validate_chain+0x10/0x10 [ 282.767656][T14479] ? __pfx_validate_chain+0x10/0x10 [ 282.772851][T14479] ? validate_chain+0x11e/0x5900 [ 282.777811][T14479] ? __lock_acquire+0x137a/0x2040 [ 282.782861][T14479] ? __pfx_validate_chain+0x10/0x10 [ 282.788058][T14479] ? is_valid_gup_args+0x124/0x200 [ 282.793171][T14479] pin_user_pages_fast+0xcc/0x160 [ 282.798197][T14479] ? mark_lock+0x9a/0x350 [ 282.802529][T14479] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 282.808158][T14479] ? __lock_acquire+0x137a/0x2040 [ 282.813180][T14479] iov_iter_extract_pages+0x3db/0x720 [ 282.818559][T14479] extract_iter_to_sg+0x890/0x22b0 [ 282.823671][T14479] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 282.829996][T14479] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 282.835534][T14479] ? __local_bh_enable_ip+0x168/0x200 [ 282.840900][T14479] ? lockdep_hardirqs_on+0x99/0x150 [ 282.846088][T14479] ? __local_bh_enable_ip+0x168/0x200 [ 282.851454][T14479] ? hash_sendmsg+0xac/0x1110 [ 282.856502][T14479] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 282.862325][T14479] ? do_raw_spin_unlock+0x13c/0x8b0 [ 282.867547][T14479] ? __asan_memset+0x23/0x50 [ 282.872152][T14479] hash_sendmsg+0x513/0x1110 [ 282.876784][T14479] ? __pfx_hash_sendmsg+0x10/0x10 [ 282.881821][T14479] __sock_sendmsg+0x221/0x270 [ 282.886503][T14479] ____sys_sendmsg+0x525/0x7d0 [ 282.891297][T14479] ? __pfx_____sys_sendmsg+0x10/0x10 [ 282.896603][T14479] ? __might_fault+0xaa/0x120 [ 282.901296][T14479] __sys_sendmmsg+0x3b2/0x740 [ 282.905983][T14479] ? __pfx___sys_sendmmsg+0x10/0x10 [ 282.911204][T14479] ? wake_up_q+0xdc/0x120 [ 282.915543][T14479] ? futex_wait+0x285/0x360 [ 282.920050][T14479] ? __pfx_futex_wait+0x10/0x10 [ 282.924914][T14479] ? do_futex+0x33b/0x560 [ 282.929263][T14479] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 282.935246][T14479] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 282.941569][T14479] ? do_syscall_64+0x100/0x230 [ 282.946329][T14479] __x64_sys_sendmmsg+0xa0/0xb0 [ 282.951177][T14479] do_syscall_64+0xf3/0x230 [ 282.955675][T14479] ? clear_bhb_loop+0x35/0x90 [ 282.960351][T14479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.966248][T14479] RIP: 0033:0x7f3e6ed7def9 [ 282.970660][T14479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.990278][T14479] RSP: 002b:00007f3e6e7ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 282.998686][T14479] RAX: ffffffffffffffda RBX: 00007f3e6ef35f80 RCX: 00007f3e6ed7def9 [ 283.006646][T14479] RDX: 0000000004000070 RSI: 0000000020003b80 RDI: 0000000000000008 [ 283.014608][T14479] RBP: 00007f3e6edf0b76 R08: 0000000000000000 R09: 0000000000000000 [ 283.022570][T14479] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000000 [ 283.030533][T14479] R13: 0000000000000000 R14: 00007f3e6ef35f80 R15: 00007ffec5c65d18 [ 283.038511][T14479] [ 283.073453][T14484] netlink: 'syz.3.2693': attribute type 3 has an invalid length. [ 283.121557][ T8845] bridge_slave_1: left allmulticast mode [ 283.135124][ T8845] bridge_slave_1: left promiscuous mode [ 283.147078][ T8845] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.163341][ T8845] bridge_slave_0: left allmulticast mode [ 283.174882][ T8845] bridge_slave_0: left promiscuous mode [ 283.177560][T14492] siw: device registration error -23 [ 283.183827][ T8845] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.477621][T14499] netlink: 'syz.4.2697': attribute type 1 has an invalid length. [ 283.523514][T14499] netlink: 'syz.4.2697': attribute type 3 has an invalid length. [ 283.550506][T14499] __nla_validate_parse: 6 callbacks suppressed [ 283.550528][T14499] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2697'. [ 283.576204][T14499] NCSI netlink: No device for ifindex 262152 [ 283.821732][ T8845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.833864][ T8845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.846355][ T8845] bond0 (unregistering): Released all slaves [ 283.873065][T14490] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2697'. [ 283.911511][T14504] gtp0: entered promiscuous mode [ 283.916506][T14504] gtp0: entered allmulticast mode [ 284.216169][T14521] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2705'. [ 284.342404][T14523] netlink: 'syz.0.2704': attribute type 1 has an invalid length. [ 284.366295][T14523] netlink: 9340 bytes leftover after parsing attributes in process `syz.0.2704'. [ 284.383571][T14523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2704'. [ 284.398609][T14525] siw: device registration error -23 [ 284.487891][ T5249] Bluetooth: hci4: command tx timeout [ 284.759889][T14537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2709'. [ 284.913769][ T8845] hsr_slave_0: left promiscuous mode [ 284.930010][ T8845] hsr_slave_1: left promiscuous mode [ 284.952435][ T8845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.970394][ T8845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.981514][T14544] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2713'. [ 284.992098][ T8845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.000165][ T8845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.039659][ T8845] veth1_macvtap: left promiscuous mode [ 285.045340][ T8845] veth0_macvtap: left promiscuous mode [ 285.053056][ T8845] veth1_vlan: left promiscuous mode [ 285.064629][ T8845] veth0_vlan: left promiscuous mode [ 285.621690][ T8845] team0 (unregistering): Port device team_slave_1 removed [ 285.676966][ T8845] team0 (unregistering): Port device team_slave_0 removed [ 286.154062][T14546] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 286.167552][T14549] netlink: 'syz.2.2714': attribute type 4 has an invalid length. [ 286.390712][T14352] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 286.431492][T14352] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 286.465780][T14352] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 286.473971][T14562] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2717'. [ 286.499373][T14352] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 286.567918][ T5249] Bluetooth: hci4: command tx timeout [ 286.861188][T14574] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2720'. [ 286.895216][T14582] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2723'. [ 286.920464][T14352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.946313][T14352] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.013455][T12002] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.020656][T12002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.058482][T12002] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.065687][T12002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.088484][T14590] xt_nfacct: accounting object `syz0' does not exists [ 287.115133][T14590] x_tables: duplicate underflow at hook 1 [ 287.159155][T14590] netlink: 'syz.3.2724': attribute type 10 has an invalid length. [ 287.254498][T14352] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 287.606092][T14624] sctp: [Deprecated]: syz.4.2735 (pid 14624) Use of int in max_burst socket option. [ 287.606092][T14624] Use struct sctp_assoc_value instead [ 287.749286][T14352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.761436][T14632] netlink: 'syz.4.2737': attribute type 11 has an invalid length. [ 287.900499][T14352] veth0_vlan: entered promiscuous mode [ 287.941029][T14352] veth1_vlan: entered promiscuous mode [ 288.012416][T14352] veth0_macvtap: entered promiscuous mode [ 288.054347][T14352] veth1_macvtap: entered promiscuous mode [ 288.085542][T14652] netlink: 'syz.4.2740': attribute type 1 has an invalid length. [ 288.190574][T14652] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 288.210085][T14652] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 288.231061][T14652] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 288.240630][T14652] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 288.252047][T14652] geneve3: entered promiscuous mode [ 288.258471][T14652] geneve3: entered allmulticast mode [ 288.265842][T14652] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 288.275234][T14652] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 288.285829][T14652] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 288.295255][T14652] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 288.419026][T14352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.447389][T14352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.461478][T14352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.528402][T14352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.546317][T14352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.572092][T14352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.586490][T14352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.610838][T14352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.635061][T14352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.649552][ T5249] Bluetooth: hci4: command tx timeout [ 288.661561][T14352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.774310][T14352] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.784095][T14352] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.794220][T14352] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.803590][T14352] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.988381][T14684] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 289.542924][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 289.553509][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 289.562690][ T5239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 289.578250][ T5239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 289.600345][ T5239] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 289.608533][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 291.062785][ T8845] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.104570][ T8845] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.154382][T12006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.182632][T12006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.221701][ T8845] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.232979][ T8845] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.277125][T12003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.318466][T12003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.365639][ T8845] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.386409][ T8845] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.556016][ T8845] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.584451][ T8845] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.689617][ T5239] Bluetooth: hci2: command tx timeout [ 291.876276][T14729] netlink: 'syz.0.2766': attribute type 10 has an invalid length. [ 291.904010][T14729] wlan1: mtu less than device minimum [ 291.916744][T14729] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 291.941532][T14732] __nla_validate_parse: 4 callbacks suppressed [ 291.941557][T14732] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2767'. [ 291.986753][T14734] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2767'. [ 291.995753][T14734] netlink: 'syz.3.2767': attribute type 7 has an invalid length. [ 292.010771][T14734] netlink: 'syz.3.2767': attribute type 8 has an invalid length. [ 292.012614][T14736] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2768'. [ 292.019730][T14734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2767'. [ 292.082707][T14737] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2767'. [ 292.108151][T14737] unsupported nlmsg_type 40 [ 292.163882][ T8845] bridge_slave_1: left allmulticast mode [ 292.184926][ T8845] bridge_slave_1: left promiscuous mode [ 292.193750][ T8845] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.218230][ T8845] bridge_slave_0: left allmulticast mode [ 292.223919][ T8845] bridge_slave_0: left promiscuous mode [ 292.237585][ T8845] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.035498][ T5249] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 293.054134][ T5249] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 293.062881][ T5249] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 293.083196][ T5249] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 293.091310][ T5249] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 293.108730][ T5249] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 293.203862][ T8845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.214662][ T8845] infiniband syz2: set down [ 293.221593][ T8845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.233159][ T8845] bond0 (unregistering): Released all slaves [ 293.288934][T14760] team_slave_0: entered promiscuous mode [ 293.295108][T14760] team_slave_1: entered promiscuous mode [ 293.300896][T14760] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 293.319319][T14760] vlan3: entered promiscuous mode [ 293.324596][T14760] team0: entered promiscuous mode [ 293.331864][T14760] vlan3: entered allmulticast mode [ 293.341452][T14760] team0: entered allmulticast mode [ 293.350640][T14760] team_slave_0: entered allmulticast mode [ 293.376762][T14760] team_slave_1: entered allmulticast mode [ 293.382583][T14760] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 293.404920][T14760] bond0: (slave vlan3): Enslaving as an active interface with an up link [ 293.437805][ T8845] ɶƣ0G0w: left promiscuous mode [ 293.488772][T14689] chnl_net:caif_netlink_parms(): no params data found [ 293.534309][T14769] hsr_slave_0: left promiscuous mode [ 293.549264][T14769] 0: left promiscuous mode [ 293.563823][T14775] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2778'. [ 293.586216][ T8845] : left promiscuous mode [ 293.652364][T14779] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 293.678283][T14779] tipc: Trying to set illegal importance in message [ 293.767126][ T5239] Bluetooth: hci2: command tx timeout [ 293.901118][ T8845] IPVS: stopping master sync thread 8468 ... [ 293.914574][T14790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2783'. [ 293.958473][T14790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2783'. [ 294.001919][T14689] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.021015][ T5239] block nbd2: Receive control failed (result -107) [ 294.022644][T14689] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.050056][T14689] bridge_slave_0: entered allmulticast mode [ 294.057500][T14790] nbd2: detected capacity change from 0 to 256 [ 294.074902][T14689] bridge_slave_0: entered promiscuous mode [ 294.145122][T14689] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.168547][T14689] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.175829][T14689] bridge_slave_1: entered allmulticast mode [ 294.184919][T14689] bridge_slave_1: entered promiscuous mode [ 294.443879][T14814] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2789'. [ 294.473658][T14689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.497756][T14689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.942252][T14689] team0: Port device team_slave_0 added [ 294.966960][ T8845] hsr_slave_0: left promiscuous mode [ 294.977518][ T8845] hsr_slave_1: left promiscuous mode [ 294.991944][ T8845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.003089][ T8845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.016378][ T8845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.055079][ T8845] veth1_macvtap: left promiscuous mode [ 295.060821][ T8845] veth0_macvtap: left promiscuous mode [ 295.070091][ T8845] veth1_vlan: left promiscuous mode [ 295.075997][ T8845] veth0_vlan: left promiscuous mode [ 295.208381][ T5239] Bluetooth: hci4: command tx timeout [ 295.652480][ T8845] team0 (unregistering): Port device team_slave_1 removed [ 295.687852][ T5239] Bluetooth: hci0: command tx timeout [ 295.711499][ T8845] team0 (unregistering): Port device team_slave_0 removed [ 295.847662][ T5239] Bluetooth: hci2: command tx timeout [ 295.885843][T12003] smc: removing ib device syz2 [ 296.178107][T14861] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2802'. [ 296.970739][T14689] team0: Port device team_slave_1 added [ 297.075414][T14863] __nla_validate_parse: 1 callbacks suppressed [ 297.075437][T14863] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2803'. [ 297.093486][T14864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2803'. [ 297.296834][ T5239] Bluetooth: hci4: command tx timeout [ 297.319800][T14876] IPVS: length: 4096 != 8 [ 297.535835][T14689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.569039][T14689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.606382][T14689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.625015][T14689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.632392][T14689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.659817][T14689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.686030][T14879] C: renamed from lo [ 297.743515][T14879] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 297.928403][ T5239] Bluetooth: hci2: command tx timeout [ 297.957369][T14897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2812'. [ 297.973474][T14897] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2812'. [ 298.040068][T14762] chnl_net:caif_netlink_parms(): no params data found [ 298.142177][T14689] hsr_slave_0: entered promiscuous mode [ 298.158483][T14689] hsr_slave_1: entered promiscuous mode [ 298.228851][T14912] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2814'. [ 298.270618][T14916] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2816'. [ 298.315407][T14910] netlink: 'syz.3.2815': attribute type 21 has an invalid length. [ 298.324308][T14910] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2815'. [ 298.395735][ T8845] IPVS: stop unused estimator thread 0... [ 298.422997][T14922] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.2817'. [ 298.453446][T14922] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2817'. [ 298.500104][T14762] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.509085][T14762] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.516258][T14762] bridge_slave_0: entered allmulticast mode [ 298.523765][T14762] bridge_slave_0: entered promiscuous mode [ 298.556567][T14762] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.566291][T14762] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.574570][T14762] bridge_slave_1: entered allmulticast mode [ 298.582640][T14762] bridge_slave_1: entered promiscuous mode [ 298.653215][T14762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.674186][T14762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.754436][T14762] team0: Port device team_slave_0 added [ 298.793701][ T8845] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.814921][T14762] team0: Port device team_slave_1 added [ 298.840669][T14927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2819'. [ 298.850392][T14927] netlink: 'syz.3.2819': attribute type 25 has an invalid length. [ 298.865304][T14927] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.874413][T14927] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.883535][T14927] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.893312][T14927] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.948048][ T8845] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.970551][T14762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.983772][T14762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.021894][T14762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.067181][ T8845] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.084780][T14762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.092480][T14762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.125551][T14762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.192570][ T8845] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.355494][T14762] hsr_slave_0: entered promiscuous mode [ 299.368020][ T5239] Bluetooth: hci4: command tx timeout [ 299.375127][T14762] hsr_slave_1: entered promiscuous mode [ 299.382095][T14762] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.390146][T14762] Cannot create hsr debugfs directory [ 299.473106][T14950] netlink: 'syz.0.2825': attribute type 4 has an invalid length. [ 299.491245][T14689] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 299.521813][T14689] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 299.538890][T14689] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 299.627291][T14689] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 299.731257][ T8845] bridge_slave_1: left allmulticast mode [ 299.747315][ T8845] bridge_slave_1: left promiscuous mode [ 299.753114][ T8845] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.765718][ T8845] bridge_slave_0: left allmulticast mode [ 299.775406][ T8845] bridge_slave_0: left promiscuous mode [ 299.784572][ T8845] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.313521][ T8845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.325163][ T8845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.339240][ T8845] bond0 (unregistering): Released all slaves [ 300.750080][ T8845] hsr_slave_0: left promiscuous mode [ 300.756261][ T8845] hsr_slave_1: left promiscuous mode [ 300.771409][ T8845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.785706][ T8845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.795049][ T8845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.803897][ T8845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.828437][ T8845] veth1_macvtap: left promiscuous mode [ 300.834017][ T8845] veth0_macvtap: left promiscuous mode [ 300.840039][ T8845] veth1_vlan: left promiscuous mode [ 300.845368][ T8845] veth0_vlan: left promiscuous mode [ 301.424863][T14993] cannot load conntrack support for proto=3 [ 301.447408][ T5239] Bluetooth: hci4: command tx timeout [ 301.523865][ T8845] team0 (unregistering): Port device team_slave_1 removed [ 301.554561][T14996] sock: sock_set_timeout: `syz.0.2837' (pid 14996) tries to set negative timeout [ 301.595623][ T8845] team0 (unregistering): Port device team_slave_0 removed [ 302.184415][T14689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.254423][T14689] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.343796][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.351034][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.398374][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.398967][T15002] __nla_validate_parse: 6 callbacks suppressed [ 302.398983][T15002] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2839'. [ 302.405546][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.463266][T15006] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2841'. [ 302.604744][T14762] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 302.631385][T14762] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 302.644077][T15009] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2842'. [ 302.661568][T14762] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 302.693518][T14762] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 302.818281][T14689] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 302.856480][T15023] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.864990][T15023] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 303.100099][T14762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.124306][T15034] bridge_slave_0: default FDB implementation only supports local addresses [ 303.210663][T14762] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.234336][ T8847] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.241502][ T8847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.255369][T15037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2851'. [ 303.278120][T14689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.305899][ T8847] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.313095][ T8847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.329700][T15037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2851'. [ 303.474151][T15043] tipc: New replicast peer: 255.255.255.255 [ 303.491655][T15043] tipc: Enabled bearer , priority 10 [ 303.544753][T14689] veth0_vlan: entered promiscuous mode [ 303.584652][T14689] veth1_vlan: entered promiscuous mode [ 303.681041][T14689] veth0_macvtap: entered promiscuous mode [ 303.721885][T14689] veth1_macvtap: entered promiscuous mode [ 303.896124][T14689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.911129][T14689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.925064][T14689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.968225][T14689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.004225][T14689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.021636][T14689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.035563][T14689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.063000][T14689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.101325][T14762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.158713][T14689] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.175298][T14689] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.184451][T14689] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.187845][T15070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2860'. [ 304.194284][T14689] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.312360][T15070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2860'. [ 304.427118][T14762] veth0_vlan: entered promiscuous mode [ 304.460401][T14762] veth1_vlan: entered promiscuous mode [ 304.468961][T12003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.491818][T12003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.583639][T12004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.600574][T12004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.610509][ T5313] tipc: Node number set to 4278255617 [ 304.658189][T14762] veth0_macvtap: entered promiscuous mode [ 304.678256][T14762] veth1_macvtap: entered promiscuous mode [ 304.852085][T14762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.870702][T14762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.883639][T14762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.896121][T14762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.909490][T14762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.935914][T14762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.953697][T14762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.979465][T14762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.983777][T15091] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2867'. [ 304.991421][T14762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.010783][T14762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.021568][T14762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.034355][T14762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.051282][T14762] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.061243][T14762] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.071336][T14762] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.080121][T14762] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.237244][T12004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.245359][T12004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.294255][ T8847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.305625][ T8847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.500828][T15101] netlink: 'syz.4.2870': attribute type 33 has an invalid length. [ 305.511614][T15101] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2870'. [ 305.631964][T15108] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.2873'. [ 305.865767][T15119] netlink: 'syz.3.2875': attribute type 1 has an invalid length. [ 305.948601][T15120] --map-set only usable from mangle table [ 306.104760][T12003] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.564751][ T5249] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 306.580718][ T5249] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 306.589113][ T5249] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 306.598811][ T5249] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 306.608839][ T5249] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 306.616230][ T5249] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 306.698488][T15141] netlink: 'syz.0.2880': attribute type 7 has an invalid length. [ 307.106522][T12003] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.324868][T12003] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.343341][T15177] netlink: 'syz.0.2890': attribute type 3 has an invalid length. [ 307.438773][T12003] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.465111][T15132] chnl_net:caif_netlink_parms(): no params data found [ 307.739635][T12003] bridge_slave_1: left allmulticast mode [ 307.745387][T12003] bridge_slave_1: left promiscuous mode [ 307.754070][T12003] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.763457][T12003] bridge_slave_0: left allmulticast mode [ 307.770089][T12003] bridge_slave_0: left promiscuous mode [ 307.775803][T12003] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.234020][T12003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.251601][T12003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.293069][T12003] bond0 (unregistering): Released all slaves [ 308.334054][T15132] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.352374][T15132] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.370191][T15132] bridge_slave_0: entered allmulticast mode [ 308.385045][T15132] bridge_slave_0: entered promiscuous mode [ 308.421306][T15132] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.446163][T15132] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.455427][T15132] bridge_slave_1: entered allmulticast mode [ 308.463278][T15132] bridge_slave_1: entered promiscuous mode [ 308.470919][T15194] __nla_validate_parse: 8 callbacks suppressed [ 308.470936][T15194] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2893'. [ 308.667843][ T5249] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 308.680328][ T5249] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 308.683663][T15132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.697918][ T5249] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 308.727899][ T5249] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 308.734985][ T5242] Bluetooth: hci2: command tx timeout [ 308.744265][ T5249] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 308.751797][ T5249] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 308.765984][T15132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.854334][T15132] team0: Port device team_slave_0 added [ 308.908240][T15132] team0: Port device team_slave_1 added [ 308.924198][T15213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2898'. [ 308.942461][T15213] tc_dump_action: action bad kind [ 309.063513][T12003] hsr_slave_0: left promiscuous mode [ 309.071084][T12003] hsr_slave_1: left promiscuous mode [ 309.077685][T12003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.085240][T12003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.097523][T12003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.104938][T12003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.129338][T12003] veth1_macvtap: left promiscuous mode [ 309.135611][T12003] veth0_macvtap: left promiscuous mode [ 309.141301][T12003] veth1_vlan: left promiscuous mode [ 309.146565][T12003] veth0_vlan: left promiscuous mode [ 309.935896][T12003] team0 (unregistering): Port device team_slave_1 removed [ 309.994950][T12003] team0 (unregistering): Port device team_slave_0 removed [ 310.058067][T15236] ip6t_rpfilter: unknown options [ 310.807958][ T5239] Bluetooth: hci4: command tx timeout [ 310.825804][ T5249] Bluetooth: hci2: command tx timeout [ 311.145015][T15132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.162718][T15132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.197712][T15132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.246009][T15232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2904'. [ 311.271950][T15232] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 311.291364][T15248] netlink: 'syz.0.2906': attribute type 30 has an invalid length. [ 311.300500][T15248] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 311.390702][T15132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.446333][T15132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.485114][T15132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.901421][T15132] hsr_slave_0: entered promiscuous mode [ 311.970388][T15132] hsr_slave_1: entered promiscuous mode [ 312.444241][T15205] chnl_net:caif_netlink_parms(): no params data found [ 312.540189][T12003] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.796350][T12003] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.843422][T15295] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2918'. [ 312.863760][T15296] pimreg: left allmulticast mode [ 312.891465][ T5249] Bluetooth: hci2: command tx timeout [ 312.892798][ T5239] Bluetooth: hci4: command tx timeout [ 312.929511][T12003] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.953979][T15300] bridge_slave_1: left allmulticast mode [ 312.959948][T15300] bridge_slave_1: left promiscuous mode [ 312.965683][T15300] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.977932][T15303] netlink: 'syz.4.2919': attribute type 11 has an invalid length. [ 312.989271][T15300] bridge7: port 1(bridge_slave_1) entered blocking state [ 312.996472][T15303] netlink: 145792 bytes leftover after parsing attributes in process `syz.4.2919'. [ 313.001548][T15300] bridge7: port 1(bridge_slave_1) entered disabled state [ 313.013730][T15300] bridge_slave_1: entered allmulticast mode [ 313.021663][T15300] bridge_slave_1: entered promiscuous mode [ 313.029774][T15300] bridge7: port 1(bridge_slave_1) entered blocking state [ 313.036985][T15300] bridge7: port 1(bridge_slave_1) entered forwarding state [ 313.066319][T15295] bridge7: port 2(veth1_to_bond) entered blocking state [ 313.074063][T15295] bridge7: port 2(veth1_to_bond) entered disabled state [ 313.081583][T15295] veth1_to_bond: entered allmulticast mode [ 313.089310][T15295] veth1_to_bond: entered promiscuous mode [ 313.095644][T15295] bridge7: port 2(veth1_to_bond) entered blocking state [ 313.102697][T15295] bridge7: port 2(veth1_to_bond) entered forwarding state [ 313.149067][T15205] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.156243][T15205] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.187724][T15205] bridge_slave_0: entered allmulticast mode [ 313.195584][T15205] bridge_slave_0: entered promiscuous mode [ 313.230971][T12003] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.253233][T15205] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.261889][T15205] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.270563][T15205] bridge_slave_1: entered allmulticast mode [ 313.281511][T15205] bridge_slave_1: entered promiscuous mode [ 313.400351][T15309] syzkaller0: entered allmulticast mode [ 313.407605][T15317] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2924'. [ 313.424488][T15309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2922'. [ 313.495556][T15205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.540621][T15205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.637099][T15205] team0: Port device team_slave_0 added [ 313.666929][T15205] team0: Port device team_slave_1 added [ 313.771416][T15330] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2928'. [ 313.792034][T15205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.799703][T15205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.826216][T15205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.839953][T12003] bridge_slave_1: left allmulticast mode [ 313.846158][T12003] bridge_slave_1: left promiscuous mode [ 313.857574][T12003] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.872055][T12003] bridge_slave_0: left allmulticast mode [ 313.884161][T12003] bridge_slave_0: left promiscuous mode [ 313.893309][T12003] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.312886][T12003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.334099][T12003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.350821][T12003] bond0 (unregistering): Released all slaves [ 314.395555][T15335] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2930'. [ 314.395925][T15205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.414406][T15335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2930'. [ 314.436972][T15205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.465712][T15205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.967957][ T5249] Bluetooth: hci4: command tx timeout [ 314.977272][ T5249] Bluetooth: hci2: command tx timeout [ 316.342526][T15335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2930'. [ 316.412692][T15132] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 316.460598][T15132] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 316.531678][T15132] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 316.595653][T15205] hsr_slave_0: entered promiscuous mode [ 316.612473][T15205] hsr_slave_1: entered promiscuous mode [ 316.624053][T15205] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.645704][T15205] Cannot create hsr debugfs directory [ 316.688100][T15132] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 316.790375][T12003] hsr_slave_0: left promiscuous mode [ 316.834764][T12003] hsr_slave_1: left promiscuous mode [ 316.857370][T12003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.879746][T12003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.905348][T12003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.913501][T12003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.960768][T12003] veth1_macvtap: left promiscuous mode [ 316.966353][T12003] veth0_macvtap: left promiscuous mode [ 316.981521][T12003] veth1_vlan: left promiscuous mode [ 316.989731][T12003] veth0_vlan: left promiscuous mode [ 317.049788][ T5249] Bluetooth: hci4: command tx timeout [ 317.532302][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.794366][T12003] team0 (unregistering): Port device team_slave_1 removed [ 317.843495][T12003] team0 (unregistering): Port device team_slave_0 removed [ 318.314465][T15373] netlink: 'syz.0.2937': attribute type 11 has an invalid length. [ 318.347725][T15373] netlink: 'syz.0.2937': attribute type 11 has an invalid length. [ 318.356407][T15373] netlink: 209800 bytes leftover after parsing attributes in process `syz.0.2937'. [ 318.867765][T15408] netlink: 'syz.0.2947': attribute type 2 has an invalid length. [ 318.932077][T15408] tipc: Enabling of bearer rejected, already enabled [ 318.961034][T15132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.014265][T15132] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.042022][T12003] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.049234][T12003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.081132][T12003] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.088443][T12003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.178810][T15416] tunl0: entered promiscuous mode [ 319.201597][T15418] netlink: 'syz.3.2952': attribute type 11 has an invalid length. [ 319.206053][T15416] netlink: 'syz.4.2951': attribute type 3 has an invalid length. [ 319.209867][T15418] netlink: 211132 bytes leftover after parsing attributes in process `syz.3.2952'. [ 319.234304][T15416] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2951'. [ 319.323283][T15205] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 319.335106][T15205] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 319.365096][T15205] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 319.398199][T15205] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 319.555274][T15429] openvswitch: netlink: Unknown key attributes 2 [ 319.645895][T15132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.685161][T15205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.752451][T15205] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.787387][T15441] xt_limit: Overflow, try lower: 2147483649/128 [ 319.811413][T12003] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.817582][T15441] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2958'. [ 319.818584][T12003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.866134][T12003] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.873368][T12003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.002515][T15132] veth0_vlan: entered promiscuous mode [ 320.032785][T15132] veth1_vlan: entered promiscuous mode [ 320.104701][T15132] veth0_macvtap: entered promiscuous mode [ 320.125915][T15132] veth1_macvtap: entered promiscuous mode [ 320.165248][T15132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.190147][T15132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.202007][T15132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.220492][T15132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.236319][T15132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.247023][T15132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.258435][T15132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.288688][T15132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.298898][T15453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2961'. [ 320.343263][T15132] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.373225][T15132] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.396951][T15132] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.405694][T15132] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.504782][T15205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.678367][T12004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.696439][T12004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.743265][T15467] netlink: 'syz.0.2962': attribute type 12 has an invalid length. [ 320.766814][T15467] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.2962'. [ 320.778700][T12005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.786550][T12005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.854890][T15205] veth0_vlan: entered promiscuous mode [ 320.976094][T15205] veth1_vlan: entered promiscuous mode [ 321.154016][T15480] batadv_slave_1: entered promiscuous mode [ 321.167976][T15480] batadv_slave_1: left promiscuous mode [ 321.285364][T15205] veth0_macvtap: entered promiscuous mode [ 321.312121][T15205] veth1_macvtap: entered promiscuous mode [ 321.344292][T15494] dccp_invalid_packet: P.Data Offset(100) too large [ 321.372848][T15205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.412668][T15205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.445531][T15205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.462560][T15205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.484486][T15205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.512202][T15205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.530711][T15205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.542966][T15205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.554729][T15205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.573388][T15205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.591865][T15205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.603941][T15205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.619599][T15506] netlink: 'syz.3.2973': attribute type 10 has an invalid length. [ 321.636153][T15499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.659309][T15205] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.669197][T15205] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.680008][T15205] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.691172][T15205] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.790218][ T8847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.800295][ T8847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.828755][T12005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.838519][T12005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.380829][T15521] gretap0: left allmulticast mode [ 322.385940][T15521] gretap0: left promiscuous mode [ 322.391745][T15521] bridge0: port 3(gretap0) entered disabled state [ 322.404057][T15521] bridge_slave_0: left allmulticast mode [ 322.409838][T15521] bridge_slave_0: left promiscuous mode [ 322.410040][T15521] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.435177][T15521] bridge_slave_1: left allmulticast mode [ 322.444185][T15521] bridge_slave_1: left promiscuous mode [ 322.452122][T15521] bridge7: port 1(bridge_slave_1) entered disabled state [ 322.473863][T15521] veth1_to_bond: left allmulticast mode [ 322.482766][T15521] veth1_to_bond: left promiscuous mode [ 322.515633][T15521] bridge7: port 2(veth1_to_bond) entered disabled state [ 322.533987][T15521] bond0: (slave bond_slave_1): Releasing backup interface [ 322.582171][T15521] team0: Port device team_slave_0 removed [ 322.623730][T15521] team0: Port device team_slave_1 removed [ 322.634855][T15521] bond0: (slave geneve0): Releasing backup interface [ 322.673129][T15521] bond2: (slave gretap1): Releasing backup interface [ 322.725967][T15521] team0: Port device bridge4 removed [ 322.837956][T15523] team0: Cannot enslave team device to itself [ 322.844118][T15523] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 322.890586][T15528] gtp1: entered promiscuous mode [ 322.896528][T15528] gtp1: entered allmulticast mode [ 323.306126][T15552] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2986'. [ 323.357717][T15554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2987'. [ 323.432151][T15555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2987'. [ 323.548226][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.889967][T15582] xt_cgroup: xt_cgroup: no path or classid specified [ 324.004018][T15586] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2993'. [ 324.047409][T15586] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 324.188974][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 324.202379][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 324.221867][ T5239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 324.249793][ T5239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 324.262047][ T5239] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 324.270135][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 324.329534][T15605] team_slave_1: entered promiscuous mode [ 324.401733][T15605] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. [ 324.483834][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.563112][T15608] pimreg: entered allmulticast mode [ 324.591428][T15611] syzkaller1: entered promiscuous mode [ 324.607572][T15611] syzkaller1: entered allmulticast mode [ 324.679608][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.768947][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.915522][T15593] chnl_net:caif_netlink_parms(): no params data found [ 324.937386][ T11] bridge_slave_1: left allmulticast mode [ 324.943061][ T11] bridge_slave_1: left promiscuous mode [ 324.949270][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.959265][ T11] bridge_slave_0: left allmulticast mode [ 324.964922][ T11] bridge_slave_0: left promiscuous mode [ 324.971660][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.281458][T15624] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3000'. [ 325.362026][T15629] netlink: 'syz.3.3001': attribute type 30 has an invalid length. [ 325.505598][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.532657][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.568412][ T11] bond0 (unregistering): Released all slaves [ 325.602499][ T5239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 325.614954][ T5239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 325.628003][ T5239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 325.658178][ T5239] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 325.679009][ T5239] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 325.690236][ T5239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 325.943111][T15593] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.953177][T15593] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.962081][T15593] bridge_slave_0: entered allmulticast mode [ 325.978116][T15593] bridge_slave_0: entered promiscuous mode [ 325.998195][T15593] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.005286][T15593] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.022875][T15593] bridge_slave_1: entered allmulticast mode [ 326.030601][T15593] bridge_slave_1: entered promiscuous mode [ 326.090495][ T11] hsr_slave_0: left promiscuous mode [ 326.112373][ T11] hsr_slave_1: left promiscuous mode [ 326.138661][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.146130][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.175996][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.189794][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.221477][ T11] veth1_macvtap: left promiscuous mode [ 326.227636][ T11] veth0_macvtap: left promiscuous mode [ 326.235028][ T11] veth1_vlan: left promiscuous mode [ 326.242712][ T11] veth0_vlan: left promiscuous mode [ 326.332204][ T5249] Bluetooth: hci2: command tx timeout [ 326.783205][ T11] team0 (unregistering): Port device team_slave_1 removed [ 326.831758][ T11] team0 (unregistering): Port device team_slave_0 removed [ 327.322846][T15656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3008'. [ 327.336428][T15656] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 327.395228][T15593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.443951][T15593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.545217][T15593] team0: Port device team_slave_0 added [ 327.566225][T15593] team0: Port device team_slave_1 added [ 327.673546][T15593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.681043][T15593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.707949][T15593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.741562][T15593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.750832][T15593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.778742][ T5249] Bluetooth: hci4: command tx timeout [ 327.787146][T15593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.054388][T15688] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3016'. [ 328.069703][T15688] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 328.076974][T15688] IPv6: NLM_F_CREATE should be set when creating new route [ 328.087265][T15695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3018'. [ 328.102797][T15593] hsr_slave_0: entered promiscuous mode [ 328.114614][T15593] hsr_slave_1: entered promiscuous mode [ 328.251998][T15702] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3020'. [ 328.293510][T15635] chnl_net:caif_netlink_parms(): no params data found [ 328.366285][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.373033][T15711] Bluetooth: hci3: invalid length 1, exp 2 for type 30 [ 328.413893][ T5249] Bluetooth: hci2: command tx timeout [ 328.447861][T15714] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3022'. [ 328.466936][T15714] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3022'. [ 328.475943][T15714] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3022'. [ 328.505713][T15714] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3022'. [ 328.563205][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.719852][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.833558][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.848857][T15635] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.872415][T15635] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.881082][T15635] bridge_slave_0: entered allmulticast mode [ 328.894740][T15635] bridge_slave_0: entered promiscuous mode [ 328.904640][T15635] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.916725][T15635] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.924073][T15635] bridge_slave_1: entered allmulticast mode [ 328.937488][T15635] bridge_slave_1: entered promiscuous mode [ 328.965074][T15737] ------------[ cut here ]------------ [ 328.971213][T15737] WARNING: CPU: 1 PID: 15737 at kernel/softirq.c:362 __local_bh_enable_ip+0x1be/0x200 [ 328.980790][T15737] Modules linked in: [ 328.984692][T15737] CPU: 1 UID: 0 PID: 15737 Comm: syz.4.3027 Not tainted 6.11.0-rc6-syzkaller-00215-g6513eb3d3191 #0 [ 328.995478][T15737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 329.005562][T15737] RIP: 0010:__local_bh_enable_ip+0x1be/0x200 [ 329.011583][T15737] Code: 3b 44 24 60 75 52 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 90 0f 0b 90 e9 ca fe ff ff e8 55 00 00 00 eb 9c 90 <0f> 0b 90 e9 fa fe ff ff 48 c7 c1 cc a2 18 90 80 e1 07 80 c1 03 38 [ 329.031206][T15737] RSP: 0018:ffffc900049bef40 EFLAGS: 00010046 [ 329.037280][T15737] RAX: 0000000000000000 RBX: 1ffff92000937dec RCX: ffffc900049bef03 [ 329.045260][T15737] RDX: 0000000000000005 RSI: 0000000000000200 RDI: ffffffff8987822a [ 329.053251][T15737] RBP: ffffc900049beff0 R08: ffffffff9018706f R09: 1ffffffff2030e0d [ 329.061241][T15737] R10: dffffc0000000000 R11: fffffbfff2030e0e R12: dffffc0000000000 [ 329.069213][T15737] R13: 1ffff110053c7520 R14: ffffc900049bef80 R15: 0000000000000200 [ 329.077198][T15737] FS: 00007f5f11df66c0(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 329.086151][T15737] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 329.092731][T15737] CR2: 00007f3e6fa67d60 CR3: 000000006f4e0000 CR4: 00000000003506f0 [ 329.100706][T15737] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 329.108675][T15737] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 329.116652][T15737] Call Trace: [ 329.119937][T15737] [ 329.122872][T15737] ? __warn+0x163/0x4e0 [ 329.127068][T15737] ? __local_bh_enable_ip+0x1be/0x200 [ 329.132486][T15737] ? report_bug+0x2b3/0x500 [ 329.136997][T15737] ? __local_bh_enable_ip+0x1be/0x200 [ 329.142388][T15737] ? handle_bug+0x3e/0x70 [ 329.146716][T15737] ? exc_invalid_op+0x1a/0x50 [ 329.151418][T15737] ? asm_exc_invalid_op+0x1a/0x20 [ 329.156443][T15737] ? __dev_queue_xmit+0x2da/0x3e90 [ 329.161551][T15737] ? __local_bh_enable_ip+0x1be/0x200 [ 329.166933][T15737] ? dev_hard_start_xmit+0x773/0x7e0 [ 329.172231][T15737] ? __dev_queue_xmit+0x2da/0x3e90 [ 329.177339][T15737] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 329.183070][T15737] ? __dev_queue_xmit+0x2da/0x3e90 [ 329.188223][T15737] __dev_queue_xmit+0x1763/0x3e90 [ 329.193239][T15737] ? kasan_save_track+0x51/0x80 [ 329.198093][T15737] ? ieee80211_do_stop+0x13d9/0x1f40 [ 329.203376][T15737] ? cfg80211_change_iface+0x782/0xf30 [ 329.208849][T15737] ? wext_ioctl_dispatch+0x58e/0x640 [ 329.214124][T15737] ? __dev_queue_xmit+0x2da/0x3e90 [ 329.219227][T15737] ? __se_sys_ioctl+0xfc/0x170 [ 329.223978][T15737] ? do_syscall_64+0xf3/0x230 [ 329.228642][T15737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.234789][T15737] ? __pfx___dev_queue_xmit+0x10/0x10 [ 329.240165][T15737] ? __copy_skb_header+0x437/0x5b0 [ 329.245273][T15737] ? __asan_memcpy+0x40/0x70 [ 329.249866][T15737] ? skb_clone+0x240/0x390 [ 329.254296][T15737] __netlink_deliver_tap+0x54d/0x7c0 [ 329.259585][T15737] ? netlink_deliver_tap+0x2e/0x1b0 [ 329.264787][T15737] netlink_deliver_tap+0x19d/0x1b0 [ 329.269896][T15737] netlink_broadcast_filtered+0xe60/0x12a0 [ 329.275709][T15737] genlmsg_multicast_netns+0x93/0xd0 [ 329.280989][T15737] nl80211_frame_tx_status+0x8fa/0xda0 [ 329.286637][T15737] ? __pfx_nl80211_frame_tx_status+0x10/0x10 [ 329.292629][T15737] ? do_raw_spin_unlock+0x13c/0x8b0 [ 329.297824][T15737] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 329.303715][T15737] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 329.310042][T15737] ? ieee80211_report_used_skb+0x1621/0x2470 [ 329.316040][T15737] ieee80211_report_used_skb+0x19eb/0x2470 [ 329.321858][T15737] ? __pfx_ieee80211_report_used_skb+0x10/0x10 [ 329.328014][T15737] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 329.333468][T15737] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 329.339365][T15737] ieee80211_free_txskb+0x24/0x40 [ 329.344407][T15737] ieee80211_do_stop+0x13d9/0x1f40 [ 329.349535][T15737] ? __ieee80211_stop_queue+0x1fe/0x460 [ 329.355090][T15737] ? _find_next_bit+0xec/0x120 [ 329.359849][T15737] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 329.365299][T15737] ? ieee80211_stop_vif_queues+0x15b/0x1a0 [ 329.371103][T15737] ? __pfx_ieee80211_stop_vif_queues+0x10/0x10 [ 329.377275][T15737] ? ieee80211_check_concurrent_iface+0x70e/0x7e0 [ 329.383703][T15737] ieee80211_if_change_type+0x4cd/0xad0 [ 329.389280][T15737] ieee80211_change_iface+0xd2/0x4f0 [ 329.394559][T15737] ? cfg80211_mlme_purge_registrations+0x1fa/0x230 [ 329.401098][T15737] cfg80211_change_iface+0x782/0xf30 [ 329.406387][T15737] cfg80211_wext_siwmode+0x1bb/0x290 [ 329.411667][T15737] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 329.417481][T15737] ? __pfx___mutex_lock+0x10/0x10 [ 329.422499][T15737] ? full_name_hash+0x93/0xe0 [ 329.427170][T15737] ioctl_standard_call+0xe3/0x290 [ 329.432187][T15737] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 329.438005][T15737] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 329.443800][T15737] wext_ioctl_dispatch+0x58e/0x640 [ 329.448918][T15737] ? __pfx_ioctl_standard_call+0x10/0x10 [ 329.454565][T15737] ? __pfx_ioctl_private_call+0x10/0x10 [ 329.460104][T15737] ? __pfx_wext_ioctl_dispatch+0x10/0x10 [ 329.465731][T15737] ? __might_fault+0xc6/0x120 [ 329.470411][T15737] wext_handle_ioctl+0x15f/0x270 [ 329.475342][T15737] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 329.480800][T15737] sock_ioctl+0x17f/0x8e0 [ 329.485134][T15737] ? __pfx_sock_ioctl+0x10/0x10 [ 329.490003][T15737] ? __fget_files+0x29/0x470 [ 329.494602][T15737] ? __fget_files+0x3f6/0x470 [ 329.499264][T15737] ? __fget_files+0x29/0x470 [ 329.503845][T15737] ? bpf_lsm_file_ioctl+0x9/0x10 [ 329.508775][T15737] ? security_file_ioctl+0x87/0xb0 [ 329.513904][T15737] ? __pfx_sock_ioctl+0x10/0x10 [ 329.518752][T15737] __se_sys_ioctl+0xfc/0x170 [ 329.523355][T15737] do_syscall_64+0xf3/0x230 [ 329.527872][T15737] ? clear_bhb_loop+0x35/0x90 [ 329.532560][T15737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.538441][T15737] RIP: 0033:0x7f5f10f7def9 [ 329.542842][T15737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.562437][T15737] RSP: 002b:00007f5f11df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 329.570844][T15737] RAX: ffffffffffffffda RBX: 00007f5f11136058 RCX: 00007f5f10f7def9 [ 329.578900][T15737] RDX: 0000000020000000 RSI: 0000000000008b06 RDI: 0000000000000003 [ 329.586872][T15737] RBP: 00007f5f10ff0b76 R08: 0000000000000000 R09: 0000000000000000 [ 329.594887][T15737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 329.602876][T15737] R13: 0000000000000001 R14: 00007f5f11136058 R15: 00007fff710f4da8 [ 329.610884][T15737] [ 329.613902][T15737] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 329.621169][T15737] CPU: 1 UID: 0 PID: 15737 Comm: syz.4.3027 Not tainted 6.11.0-rc6-syzkaller-00215-g6513eb3d3191 #0 [ 329.631913][T15737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 329.641962][T15737] Call Trace: [ 329.645228][T15737] [ 329.648155][T15737] dump_stack_lvl+0x241/0x360 [ 329.653003][T15737] ? __pfx_dump_stack_lvl+0x10/0x10 [ 329.658200][T15737] ? __pfx__printk+0x10/0x10 [ 329.662792][T15737] ? vscnprintf+0x5d/0x90 [ 329.667142][T15737] panic+0x349/0x860 [ 329.671030][T15737] ? __warn+0x172/0x4e0 [ 329.675171][T15737] ? __pfx_panic+0x10/0x10 [ 329.679612][T15737] __warn+0x346/0x4e0 [ 329.683629][T15737] ? __local_bh_enable_ip+0x1be/0x200 [ 329.689005][T15737] report_bug+0x2b3/0x500 [ 329.693349][T15737] ? __local_bh_enable_ip+0x1be/0x200 [ 329.698719][T15737] handle_bug+0x3e/0x70 [ 329.702865][T15737] exc_invalid_op+0x1a/0x50 [ 329.707360][T15737] asm_exc_invalid_op+0x1a/0x20 [ 329.712198][T15737] RIP: 0010:__local_bh_enable_ip+0x1be/0x200 [ 329.718172][T15737] Code: 3b 44 24 60 75 52 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 90 0f 0b 90 e9 ca fe ff ff e8 55 00 00 00 eb 9c 90 <0f> 0b 90 e9 fa fe ff ff 48 c7 c1 cc a2 18 90 80 e1 07 80 c1 03 38 [ 329.737770][T15737] RSP: 0018:ffffc900049bef40 EFLAGS: 00010046 [ 329.743828][T15737] RAX: 0000000000000000 RBX: 1ffff92000937dec RCX: ffffc900049bef03 [ 329.751803][T15737] RDX: 0000000000000005 RSI: 0000000000000200 RDI: ffffffff8987822a [ 329.759771][T15737] RBP: ffffc900049beff0 R08: ffffffff9018706f R09: 1ffffffff2030e0d [ 329.767731][T15737] R10: dffffc0000000000 R11: fffffbfff2030e0e R12: dffffc0000000000 [ 329.775693][T15737] R13: 1ffff110053c7520 R14: ffffc900049bef80 R15: 0000000000000200 [ 329.783663][T15737] ? __dev_queue_xmit+0x2da/0x3e90 [ 329.788788][T15737] ? dev_hard_start_xmit+0x773/0x7e0 [ 329.794170][T15737] ? __dev_queue_xmit+0x2da/0x3e90 [ 329.799273][T15737] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 329.804985][T15737] ? __dev_queue_xmit+0x2da/0x3e90 [ 329.810094][T15737] __dev_queue_xmit+0x1763/0x3e90 [ 329.815130][T15737] ? kasan_save_track+0x51/0x80 [ 329.819977][T15737] ? ieee80211_do_stop+0x13d9/0x1f40 [ 329.825252][T15737] ? cfg80211_change_iface+0x782/0xf30 [ 329.830709][T15737] ? wext_ioctl_dispatch+0x58e/0x640 [ 329.836037][T15737] ? __dev_queue_xmit+0x2da/0x3e90 [ 329.841147][T15737] ? __se_sys_ioctl+0xfc/0x170 [ 329.845905][T15737] ? do_syscall_64+0xf3/0x230 [ 329.850575][T15737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.856643][T15737] ? __pfx___dev_queue_xmit+0x10/0x10 [ 329.862036][T15737] ? __copy_skb_header+0x437/0x5b0 [ 329.867153][T15737] ? __asan_memcpy+0x40/0x70 [ 329.871745][T15737] ? skb_clone+0x240/0x390 [ 329.876155][T15737] __netlink_deliver_tap+0x54d/0x7c0 [ 329.881438][T15737] ? netlink_deliver_tap+0x2e/0x1b0 [ 329.886633][T15737] netlink_deliver_tap+0x19d/0x1b0 [ 329.891750][T15737] netlink_broadcast_filtered+0xe60/0x12a0 [ 329.897605][T15737] genlmsg_multicast_netns+0x93/0xd0 [ 329.902904][T15737] nl80211_frame_tx_status+0x8fa/0xda0 [ 329.908372][T15737] ? __pfx_nl80211_frame_tx_status+0x10/0x10 [ 329.914343][T15737] ? do_raw_spin_unlock+0x13c/0x8b0 [ 329.919533][T15737] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 329.925511][T15737] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 329.931922][T15737] ? ieee80211_report_used_skb+0x1621/0x2470 [ 329.937937][T15737] ieee80211_report_used_skb+0x19eb/0x2470 [ 329.943756][T15737] ? __pfx_ieee80211_report_used_skb+0x10/0x10 [ 329.949914][T15737] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 329.955387][T15737] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 329.961329][T15737] ieee80211_free_txskb+0x24/0x40 [ 329.966367][T15737] ieee80211_do_stop+0x13d9/0x1f40 [ 329.971497][T15737] ? __ieee80211_stop_queue+0x1fe/0x460 [ 329.977045][T15737] ? _find_next_bit+0xec/0x120 [ 329.981827][T15737] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 329.987276][T15737] ? ieee80211_stop_vif_queues+0x15b/0x1a0 [ 329.993083][T15737] ? __pfx_ieee80211_stop_vif_queues+0x10/0x10 [ 329.999270][T15737] ? ieee80211_check_concurrent_iface+0x70e/0x7e0 [ 330.005677][T15737] ieee80211_if_change_type+0x4cd/0xad0 [ 330.011245][T15737] ieee80211_change_iface+0xd2/0x4f0 [ 330.016560][T15737] ? cfg80211_mlme_purge_registrations+0x1fa/0x230 [ 330.023078][T15737] cfg80211_change_iface+0x782/0xf30 [ 330.028384][T15737] cfg80211_wext_siwmode+0x1bb/0x290 [ 330.033661][T15737] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 330.039470][T15737] ? __pfx___mutex_lock+0x10/0x10 [ 330.044482][T15737] ? full_name_hash+0x93/0xe0 [ 330.049151][T15737] ioctl_standard_call+0xe3/0x290 [ 330.054168][T15737] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 330.059969][T15737] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 330.065760][T15737] wext_ioctl_dispatch+0x58e/0x640 [ 330.070868][T15737] ? __pfx_ioctl_standard_call+0x10/0x10 [ 330.076490][T15737] ? __pfx_ioctl_private_call+0x10/0x10 [ 330.082032][T15737] ? __pfx_wext_ioctl_dispatch+0x10/0x10 [ 330.087767][T15737] ? __might_fault+0xc6/0x120 [ 330.092499][T15737] wext_handle_ioctl+0x15f/0x270 [ 330.097458][T15737] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 330.102952][T15737] sock_ioctl+0x17f/0x8e0 [ 330.107307][T15737] ? __pfx_sock_ioctl+0x10/0x10 [ 330.112148][T15737] ? __fget_files+0x29/0x470 [ 330.116738][T15737] ? __fget_files+0x3f6/0x470 [ 330.121449][T15737] ? __fget_files+0x29/0x470 [ 330.126035][T15737] ? bpf_lsm_file_ioctl+0x9/0x10 [ 330.130966][T15737] ? security_file_ioctl+0x87/0xb0 [ 330.136075][T15737] ? __pfx_sock_ioctl+0x10/0x10 [ 330.140962][T15737] __se_sys_ioctl+0xfc/0x170 [ 330.145543][T15737] do_syscall_64+0xf3/0x230 [ 330.150036][T15737] ? clear_bhb_loop+0x35/0x90 [ 330.154707][T15737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.160588][T15737] RIP: 0033:0x7f5f10f7def9 [ 330.164999][T15737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.184600][T15737] RSP: 002b:00007f5f11df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 330.193006][T15737] RAX: ffffffffffffffda RBX: 00007f5f11136058 RCX: 00007f5f10f7def9 [ 330.200968][T15737] RDX: 0000000020000000 RSI: 0000000000008b06 RDI: 0000000000000003 [ 330.209027][T15737] RBP: 00007f5f10ff0b76 R08: 0000000000000000 R09: 0000000000000000 [ 330.217008][T15737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.224988][T15737] R13: 0000000000000001 R14: 00007f5f11136058 R15: 00007fff710f4da8 [ 330.233037][T15737] [ 330.236290][T15737] Kernel Offset: disabled [ 330.240750][T15737] Rebooting in 86400 seconds..