last executing test programs: 58.32632677s ago: executing program 3 (id=2172): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000000400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000210000280012800b00010067656e65766500001800028014000700ff02"], 0x17}, 0x9}, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0, 0xfffffff8}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) 58.023126613s ago: executing program 3 (id=2178): r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x2c0, r0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x198, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36e8082e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2879581d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5881}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5542}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77458af0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb512}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3f7f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x577ef557}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x110f}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb3b4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79ed6945}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3bb4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x683c225}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7c9f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75ef466e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7cb4507e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x750d814}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63d042d1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x10d49e4f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2fda}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc9c99d6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf649}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf1e2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb30f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xde28}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a99}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70866b2c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13e5856a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa605}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2bae}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x519e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4161f82}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb9ba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa389}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49a8befe}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6830c190}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2277cbba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcb1}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3040}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b6808bd}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9dc0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1488}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x57e6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x77c8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4192}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ce6b9a}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2831bf87}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1cad3bc6}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x279a52dd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa82397}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41df47fb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4dea519e}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x5c, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3cee6bb4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb7f8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4889cab6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d82}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3bae}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6901}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xed10}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa50f}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa1a}]}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r2, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x44081}, 0x40404) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r5, 0x20, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8045}, 0x4040) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000680)={0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r6, &(0x7f0000000a00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000740)={0x24c, r7, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf203}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}]}, @TIPC_NLA_MEDIA={0xe0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6bb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7464}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xce}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x4820}, 0x4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r6) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xa8, r8, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7f}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x4}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}]}, 0xa8}, 0x1, 0x0, 0x0, 0x15}, 0x4040051) sendmsg$AUDIT_TTY_GET(r6, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x10, 0x3f8, 0x200, 0x70bd27, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000d00), r1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000d40), r3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001040)={0xffffffffffffffff, 0xe0, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc5, &(0x7f0000000e40)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000e80), &(0x7f0000000ec0), 0x8, 0x88, 0x8, 0x8, &(0x7f0000000f00)}}, 0x10) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001080)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=@bloom_filter={0x1e, 0x5, 0x8001, 0x6, 0x90, 0x1, 0x6, '\x00', r9, r10, 0x1, 0x0, 0x0, 0x3, @void, @value, @void, @value}, 0x50) syz_genetlink_get_family_id$nl802154(&(0x7f0000001140), r3) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000001240)={&(0x7f0000001180), 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x3c, r8, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x25, 0x5b, "15ae457f98bc4c6f9fa6e663e4ab357ee4167ca3312733f38e7f46c114bdc42fa7"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008011}, 0x40000) syz_genetlink_get_family_id$nl802154(&(0x7f0000001280), r1) connect$pppoe(r6, &(0x7f00000012c0)={0x18, 0x0, {0x4, @broadcast, 'bond_slave_1\x00'}}, 0x1e) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001340), r4) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x4c, r11, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r12, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x6c, 0x0, 0x12, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x4) 45.357388685s ago: executing program 3 (id=2178): r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x2c0, r0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x198, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36e8082e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2879581d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5881}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5542}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77458af0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb512}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3f7f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x577ef557}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x110f}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb3b4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79ed6945}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3bb4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x683c225}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7c9f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75ef466e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7cb4507e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x750d814}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63d042d1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x10d49e4f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2fda}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc9c99d6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf649}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf1e2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb30f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xde28}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a99}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70866b2c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13e5856a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa605}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2bae}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x519e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4161f82}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb9ba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa389}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49a8befe}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6830c190}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2277cbba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcb1}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3040}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b6808bd}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9dc0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1488}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x57e6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x77c8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4192}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ce6b9a}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2831bf87}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1cad3bc6}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x279a52dd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa82397}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41df47fb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4dea519e}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x5c, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3cee6bb4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb7f8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4889cab6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d82}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3bae}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6901}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xed10}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa50f}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa1a}]}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r2, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x44081}, 0x40404) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r5, 0x20, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8045}, 0x4040) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000680)={0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r6, &(0x7f0000000a00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000740)={0x24c, r7, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf203}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}]}, @TIPC_NLA_MEDIA={0xe0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6bb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7464}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xce}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x4820}, 0x4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r6) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xa8, r8, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7f}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x4}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}]}, 0xa8}, 0x1, 0x0, 0x0, 0x15}, 0x4040051) sendmsg$AUDIT_TTY_GET(r6, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x10, 0x3f8, 0x200, 0x70bd27, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000d00), r1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000d40), r3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001040)={0xffffffffffffffff, 0xe0, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc5, &(0x7f0000000e40)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000e80), &(0x7f0000000ec0), 0x8, 0x88, 0x8, 0x8, &(0x7f0000000f00)}}, 0x10) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001080)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=@bloom_filter={0x1e, 0x5, 0x8001, 0x6, 0x90, 0x1, 0x6, '\x00', r9, r10, 0x1, 0x0, 0x0, 0x3, @void, @value, @void, @value}, 0x50) syz_genetlink_get_family_id$nl802154(&(0x7f0000001140), r3) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000001240)={&(0x7f0000001180), 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x3c, r8, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x25, 0x5b, "15ae457f98bc4c6f9fa6e663e4ab357ee4167ca3312733f38e7f46c114bdc42fa7"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008011}, 0x40000) syz_genetlink_get_family_id$nl802154(&(0x7f0000001280), r1) connect$pppoe(r6, &(0x7f00000012c0)={0x18, 0x0, {0x4, @broadcast, 'bond_slave_1\x00'}}, 0x1e) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001340), r4) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x4c, r11, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r12, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x6c, 0x0, 0x12, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x4) 26.714006851s ago: executing program 3 (id=2178): r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x2c0, r0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x198, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36e8082e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2879581d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5881}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5542}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77458af0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb512}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3f7f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x577ef557}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x110f}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb3b4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79ed6945}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3bb4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x683c225}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7c9f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75ef466e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7cb4507e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x750d814}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63d042d1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x10d49e4f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2fda}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc9c99d6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf649}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf1e2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb30f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xde28}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a99}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70866b2c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13e5856a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa605}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2bae}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x519e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4161f82}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb9ba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa389}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49a8befe}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6830c190}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2277cbba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcb1}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3040}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b6808bd}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9dc0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1488}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x57e6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x77c8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4192}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ce6b9a}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2831bf87}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1cad3bc6}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x279a52dd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa82397}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41df47fb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4dea519e}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x5c, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3cee6bb4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb7f8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4889cab6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d82}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3bae}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6901}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xed10}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa50f}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa1a}]}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r2, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x44081}, 0x40404) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r5, 0x20, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8045}, 0x4040) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000680)={0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r6, &(0x7f0000000a00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000740)={0x24c, r7, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf203}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}]}, @TIPC_NLA_MEDIA={0xe0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6bb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7464}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xce}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x4820}, 0x4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r6) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xa8, r8, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7f}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x4}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}]}, 0xa8}, 0x1, 0x0, 0x0, 0x15}, 0x4040051) sendmsg$AUDIT_TTY_GET(r6, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x10, 0x3f8, 0x200, 0x70bd27, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000d00), r1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000d40), r3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001040)={0xffffffffffffffff, 0xe0, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc5, &(0x7f0000000e40)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000e80), &(0x7f0000000ec0), 0x8, 0x88, 0x8, 0x8, &(0x7f0000000f00)}}, 0x10) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001080)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=@bloom_filter={0x1e, 0x5, 0x8001, 0x6, 0x90, 0x1, 0x6, '\x00', r9, r10, 0x1, 0x0, 0x0, 0x3, @void, @value, @void, @value}, 0x50) syz_genetlink_get_family_id$nl802154(&(0x7f0000001140), r3) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000001240)={&(0x7f0000001180), 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x3c, r8, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x25, 0x5b, "15ae457f98bc4c6f9fa6e663e4ab357ee4167ca3312733f38e7f46c114bdc42fa7"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008011}, 0x40000) syz_genetlink_get_family_id$nl802154(&(0x7f0000001280), r1) connect$pppoe(r6, &(0x7f00000012c0)={0x18, 0x0, {0x4, @broadcast, 'bond_slave_1\x00'}}, 0x1e) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001340), r4) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x4c, r11, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r12, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x6c, 0x0, 0x12, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x4) 19.384380222s ago: executing program 3 (id=2178): r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x2c0, r0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x198, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36e8082e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2879581d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5881}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5542}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77458af0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb512}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3f7f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x577ef557}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x110f}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb3b4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79ed6945}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3bb4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x683c225}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7c9f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75ef466e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7cb4507e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x750d814}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63d042d1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x10d49e4f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2fda}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc9c99d6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf649}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf1e2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb30f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xde28}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a99}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70866b2c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13e5856a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa605}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2bae}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x519e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4161f82}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb9ba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa389}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49a8befe}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6830c190}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2277cbba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcb1}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3040}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b6808bd}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9dc0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1488}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x57e6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x77c8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4192}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ce6b9a}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2831bf87}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1cad3bc6}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x279a52dd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa82397}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41df47fb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4dea519e}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x5c, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3cee6bb4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb7f8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4889cab6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d82}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3bae}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6901}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xed10}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa50f}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa1a}]}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r2, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x44081}, 0x40404) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r5, 0x20, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8045}, 0x4040) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000680)={0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r6, &(0x7f0000000a00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000740)={0x24c, r7, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf203}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}]}, @TIPC_NLA_MEDIA={0xe0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6bb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7464}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xce}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x4820}, 0x4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r6) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xa8, r8, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7f}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x4}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}]}, 0xa8}, 0x1, 0x0, 0x0, 0x15}, 0x4040051) sendmsg$AUDIT_TTY_GET(r6, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x10, 0x3f8, 0x200, 0x70bd27, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000d00), r1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000d40), r3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001040)={0xffffffffffffffff, 0xe0, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc5, &(0x7f0000000e40)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000e80), &(0x7f0000000ec0), 0x8, 0x88, 0x8, 0x8, &(0x7f0000000f00)}}, 0x10) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001080)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=@bloom_filter={0x1e, 0x5, 0x8001, 0x6, 0x90, 0x1, 0x6, '\x00', r9, r10, 0x1, 0x0, 0x0, 0x3, @void, @value, @void, @value}, 0x50) syz_genetlink_get_family_id$nl802154(&(0x7f0000001140), r3) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000001240)={&(0x7f0000001180), 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x3c, r8, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x25, 0x5b, "15ae457f98bc4c6f9fa6e663e4ab357ee4167ca3312733f38e7f46c114bdc42fa7"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008011}, 0x40000) syz_genetlink_get_family_id$nl802154(&(0x7f0000001280), r1) connect$pppoe(r6, &(0x7f00000012c0)={0x18, 0x0, {0x4, @broadcast, 'bond_slave_1\x00'}}, 0x1e) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001340), r4) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x4c, r11, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r12, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x6c, 0x0, 0x12, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x4) 10.641006592s ago: executing program 0 (id=2467): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async, rerun: 64) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000480)=0x102, 0x4) (async) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) (async) sendto$packet(r2, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0xe90c, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) shutdown(r0, 0x0) (async, rerun: 32) r4 = socket(0x0, 0x3, 0x5) (rerun: 32) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x3c, 0x3, 0x8, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0xfffffffffffffd59}, 0x1, 0x0, 0x0, 0x20040001}, 0x40008c0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r5}, 0x8) 10.406707586s ago: executing program 0 (id=2470): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000080)=0x6) r1 = socket(0x20000000000000e, 0x2, 0x10001) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x64}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) sendto$packet(r1, 0x0, 0x0, 0x4000000, &(0x7f0000004e80)={0x11, 0x1, r2, 0x1, 0x2, 0x6, @remote}, 0x14) 10.093305965s ago: executing program 0 (id=2473): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) unshare(0x62040200) unshare(0x400) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd601200"], 0x0) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 7.409804296s ago: executing program 0 (id=2492): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r2, 0x21eae}}, 0x20}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv6_newaddr={0x48, 0x14, 0x401, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x7, 0x2, 0xb}}, @IFA_FLAGS={0x8, 0x8, 0xa8}]}, 0x48}}, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x14}}, 0x1c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0xb, 0x0) 7.020589732s ago: executing program 0 (id=2494): unshare(0x62040200) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000040000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@getchain={0x24, 0x24, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0x0, 0xfff1}}}, 0x24}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0x401, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvmmsg(r7, &(0x7f00000061c0)=[{{0x0, 0x300, &(0x7f0000000280)=[{&(0x7f0000000180)=""/153, 0x99}], 0x1}}], 0xffffff1f, 0x102, 0x0) write$binfmt_script(r7, &(0x7f0000001680)={'#! ', '', [], 0xa, "8e1382e0aa4781444103fbd9f7a1a98fa2396a3b2599658ab7ee64c6be5ff58796a65acb4e8cb204000000c7912e20d881521977ed9d7c6307e97d467a87640c1bae97c334700d7ae4401b9555c630c0ca241ed7a5c4445439219529ceec219dd1bf000086044449075b5726b029f83edbe151dc8e55dec33fa89979f27154e0e0fbbecaa8b933b67d5af7dccce7a693cbbe377633c5"}, 0x9a) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "b1d65ab71f5ef2fe", "9e8ecc7bb5352776725e1047711330ff2bb17b550800", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000180)={'mangle\x00', 0x7003}, &(0x7f0000000000)=0x54) 4.585144497s ago: executing program 4 (id=2510): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000000000000080000", 0x1c) connect$llc(r2, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendfile(r2, r1, 0x0, 0xffefffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) close(0x3) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x0, {0xa, 0x0, 0x48, 0xfd, r5}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000840)={'ip6erspan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x8d8dfa7e83694471, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_MTU={0x9}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc}]}]}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000880)={'wg2\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r13, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000012c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001280)={&(0x7f00000008c0)={0x998, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x200, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x998d}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x250, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x25c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xff7f, 0x2, 0x9, 0x7}]}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1, 0x2c, 0xfa, 0x728}, {0x7, 0x0, 0xc, 0x5}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}]}}]}, 0x998}, 0x1, 0x0, 0x0, 0x4040044}, 0x400c040) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) sendmsg$NFT_MSG_GETOBJ(r14, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x13, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0xe, 0x8, "187ef2fb10fe9c59298d"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 4.00639833s ago: executing program 1 (id=2514): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socket$kcm(0x2, 0x200000000000001, 0x106) r0 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x1e, &(0x7f0000000000)=ANY=[@ANYBLOB="d60446cd9230aaaaaaaaaaaa000180000000000000006f5aaeb98d16facd"], 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}, 0x8001) ioctl$SIOCSIFHWADDR(r1, 0x8905, &(0x7f0000000340)={'syzkaller1\x00', @remote}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x1d, 0x2, 0xfffffffd) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) accept4$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'veth0_vlan\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x12, 0x0, 0x2, 0x2}}) r8 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x8}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYBLOB='%\b\x00z\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\b\x00', @ANYRES32=r9, @ANYBLOB="1400140064756d6d7930000000000000000000001400040076657468315f746f5f626f0164000000"], 0x54}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50}, {0x6}]}, 0x10) 3.55204721s ago: executing program 4 (id=2516): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, &(0x7f0000000000)=0x46, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000014c0)={r2, 0xe0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x75, &(0x7f00000012c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000001300), &(0x7f0000001340), 0x8, 0xf4, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000f00000035b713c6f1d51462b5d33a46b5775b426284afc9c768ff4304a8b0d26e8df7c2ab8cb0fbd2b9c4ea696dd471168609000000dbdf594f65a3cc0ba9fbd693c45149e493d79ff4d7ce64e7d5d9bb3ca8b26690d985047555662709a919872750494c54afe28bd3d75ba7dc9ae448bdb10329e30cfba76aceec552c59ede3ba0a1595eb43e1", @ANYRES32=r4, @ANYBLOB="37000e0080000000080211000001ffffffffffff6e84f399c9b400000000000000000000640000000000250300000576060000000000000008000e8004000100080026008a09000008000c006400000008000d0000000000"], 0x74}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 3.25545246s ago: executing program 2 (id=2517): r0 = socket$rds(0x15, 0x5, 0x0) r1 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={r1, 0xffffffffffffffff, r3}, 0xc) r4 = accept4(r0, &(0x7f00000000c0)=@xdp, &(0x7f0000000140)=0x80, 0x800) r5 = accept4$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14, 0x80000) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000200)=0xcb98, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r4) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa8, r6, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x44) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb0, 0xb0, 0x4, [@struct={0x5, 0x1, 0x0, 0x4, 0x1, 0x7, [{0x6, 0x1, 0xfffffff1}]}, @var={0x3, 0x0, 0x0, 0xe, 0xfffffff8, 0x1}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x67, 0x0, 0x56, 0x4}, @typedef={0x3, 0x0, 0x0, 0x8, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x7c, 0x0, 0x2f, 0x6}, @union={0x9, 0x3, 0x0, 0x5, 0x0, 0xfffff440, [{0x9, 0x3, 0x10000}, {0x6, 0x2, 0x3d8}, {0x8, 0x1, 0x9}]}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x58, 0x0, 0x5e, 0x2}, @var={0x5, 0x0, 0x0, 0xe, 0x2, 0x1}, @volatile={0x8, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x30, 0x30]}}, &(0x7f0000000500)=""/228, 0xcc, 0xe4, 0x0, 0x9, 0x0, @void, @value}, 0x28) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x1d, &(0x7f0000000640)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2f3b}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @tail_call], &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x4, 0x5, 0xfff, 0x8000}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000007c0)=[0xffffffffffffffff, 0x1, 0x1, r7, 0x1, 0xffffffffffffffff], &(0x7f0000000800)=[{0x5, 0x3, 0xc, 0x9}, {0x2, 0x1}, {0x0, 0x1, 0xc}, {0x5, 0x1, 0xe, 0xa}, {0x4, 0x3, 0x3, 0x6}, {0x2, 0x2, 0x8, 0xb}, {0x2, 0x3, 0xc, 0xb}], 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000a40)={r8, 0x0, 0xa4, 0x0, &(0x7f0000000940)="f8b3c1946ac24721d9af819be1f1a18d12ab2acd44b14f887bf364003ee3c8c6a59febd6607c91aee0e8c55df2007ac15ffee6d13b3f14f2fb2988689732933ecb61da151afad6a201b22b7742e0cce87d1113e7adee6df777307ba945a6a195c34816ee12b37753b18e226b51e5223c01988715a3e4fe452489bee2edbdd8d0a3dc721a0cd6dadb6ef58ccdf5000e5e5c8d18dc5434a20ee4e74b418f4ec1400b075ea1", 0x0, 0x6, 0x0, 0x2f, 0x0, &(0x7f0000000a00)="4d93be7aaf350f79b14271e61546ad5608b8ed44fd8164df1c3cfea544d27eef2e4a6258cc4dddfc8acc1027b81056"}, 0x50) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r9, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r10, 0x4, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008810}, 0x4000000) getpeername(r5, &(0x7f0000000c00)=@l2, &(0x7f0000000c80)=0x80) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000d00), r9) sendmsg$NLBL_UNLABEL_C_LIST(r9, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d40)={0xc0, r11, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:setrans_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:sudo_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}]}, 0xc0}, 0x1, 0x0, 0x0, 0x28000000}, 0x95) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r12, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x50, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'netdevsim\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '-\'^\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x50}}, 0x20000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000fc0), &(0x7f0000001000)=0x4) r13 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r13, 0x84, 0x72, &(0x7f0000001040)={0x0, 0x5, 0x10}, &(0x7f0000001080)=0xc) sendmsg$NL802154_CMD_GET_SEC_KEY(r12, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x2c, r10, 0x102, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40) epoll_create1(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x323) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000011c0)={'veth0_to_batadv\x00'}) setsockopt$packet_int(r5, 0x107, 0x3, &(0x7f0000001200)=0xb59a, 0x4) socket$nl_rdma(0x10, 0x3, 0x14) 3.188868018s ago: executing program 4 (id=2518): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X\x00', 0x2}], 0x1) close(r2) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 3.105899947s ago: executing program 4 (id=2519): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0xd, 0x4) socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x207, 0x0, 0x4f7db828, 0xfcb, 0x3}, 0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$kcm(0x21, 0x2, 0x2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'veth1_to_batadv\x00'}}, 0x1e) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'veth1_to_batadv\x00'}}, 0x1e) connect$pppoe(r4, &(0x7f0000000140)={0x18, 0x0, {0x0, @local, 'bond_slave_0\x00'}}, 0x1e) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) close(r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01e217000000000000001800000018000000020000000000000001000013"], 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r5 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c"], &(0x7f0000001f80)=""/237, 0x26, 0xed, 0x1, 0x0, 0x0, @void, @value}, 0x20) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000f40)="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", 0x3b5}], 0x1}}], 0x2, 0x0) r6 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r6, &(0x7f00000009c0)={&(0x7f0000000240)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f00000002c0)="824491e7271019b3fe048765ad", 0xd}, {&(0x7f00000005c0)="b8", 0x1}], 0x2, &(0x7f0000000080)=ANY=[], 0x58}, 0x0) sendto(r1, &(0x7f0000000080)="b35050a5a097486e2cea250bba422097db41df685a61dd97f6627b84711f29fa86089c5a2147479260f1fc51b65bcab5ab617a845612276ad687ecd754c56640041e8cc0ca15245c67c7f9542d869b54883544cc40a5735f324931e8efe39ae504e746f399289ffe978d8cf72f2608983eff822bacbc2c843421dcff1fbc1b8364129dace1f3551d505de2a275a0702f744ac970f8dca2bc3a42fa77305cdaf2db2be511713cee461e8fe9f08997c14602833c755536f9c9e20f844beaa950fd52864f430248938eb64b227dde87ebd4909de315f7bcb7b5dc9c529bc4c3536b60c504", 0xe3, 0x8, &(0x7f0000000180)=@l2tp={0x2, 0x0, @multicast2}, 0x80) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0x2}, 0x1c) 2.996787592s ago: executing program 2 (id=2520): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0xffffff7f, 0x0, 0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/27, 0x1b}], 0x1, 0x0, 0x0, 0x500}}], 0x1, 0x0, 0x0) 2.948713326s ago: executing program 1 (id=2521): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000800"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffffff8500000010000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071121f000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendmsg$inet6(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)="67181cf6b9e5b1787fdc572f7dd19f6f082dff49ee1bbe4870316f4fc9aec91cb023aaeb6e5b9e07642e6a24c2651db42f1258218bc8969106d17ea2c904c46d1b63ed5b4cb19a4803a7bb35851f095d6cdc49c61b31b7f09aac702005a7c0cdd825540ea1155656c78c9d9d21c630a4117d1e662508f549bed140b19df6c3ab52a52137a9890886ad95634b4b8241f967227da78910bf8b9270a0c66ebf6a031c8bb2538ef255b661e6e290cba63281aa76a6fc581dbaebe4e55601767196477009190b35390cd03ba29a4d96b58eb977d98905663b5b8147d2a97c315ced9759be83cdcc", 0xe5}, {&(0x7f0000000640)="367cb5c1a5824a5ed55b85525b4b1294c43dadcf101c311471d95d17ca31b9c635a7a1012192525e019df87976fae2fb991fe4edbaeec17f63bc7780fafb3c12f0e01f651717ef0a41142dd0e8e551a1f8", 0x51}], 0x2, &(0x7f00000006c0)=[@dstopts={{0x58, 0x29, 0x37, {0x62, 0x7, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @jumbo={0xc2, 0x4, 0xdc1}, @hao={0xc9, 0x10, @empty}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x58}, 0x20000000) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6}]}}}]}, 0x3c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x28, 0x1401, 0x200, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x10084}, 0x20000080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071122c00000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 2.855097898s ago: executing program 1 (id=2522): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000300)={&(0x7f0000000880)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB="05000000320b00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000000001000000bb1e38b418318f43056b470b759d7b9beb929157fbabb8971fdf7268450b030000000917f27e5382561869fea5023441037712804650cc7d8236"], 0x80}}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0a00000004000000080000000300000000000000", @ANYRES32, @ANYBLOB="000000010000000000402eefffffffff6dffff00e687ffe1a17edf54be106f2dd12141db81b412ef351c97879b1052b9d51012addaed0d50a649593639ff3134ccc03b35969cc17264f4886b3f91485afa06e3a94c1fbb2fc541754ae96143a08b9a6cf6000af715410d1ce4f0ed9ba20fbea4fb208941fbc836810fd6f2ad13df9ed3f4916908b4f761a93adfd53e1785c23ed0a51909cf10dbc459fa6f0afd88042da89d324539a6cae629f329c723057ea9654270b5d9249a31b61f66b5c00788c174099e4b2b1cda656fbc6d51344f9fc4b616c6e96627ae5735332f041549f8bce0b194", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000380)='tlb_flush\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000380)='tlb_flush\x00', r3}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) (async) bind$alg(r6, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) accept4(r6, 0x0, 0x0, 0x800) (async) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmsg$nl_generic(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[], 0x470}, 0x1, 0x0, 0x0, 0x48890}, 0x48000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) bind$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) bind$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8) (async) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFLAGS(r8, 0x80086601, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r2}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r2}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000140)=0x10) socket$inet(0x2, 0x80001, 0x84) (async) r10 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x1d) socket$packet(0x11, 0x2, 0x300) 2.83617691s ago: executing program 2 (id=2523): r0 = socket$inet(0x2, 0x1, 0xfffffffc) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f00)=[{{&(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000440)="957f", 0x2}], 0x1}}], 0x1, 0x20004000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xa89) (async) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xa89) 2.572617825s ago: executing program 1 (id=2524): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000e500000085000000bb00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a300400000000000000000200000030000480100001800c0001006e6f747261074c6b5aef9000001c0001800a0075657565005000000c00028006000140000900000900010073797a30000000000900020073797a320000000014008eff1c967d8df5845aa1b8c7c05818793d7ee6"], 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, 0x8, 0x6, 0xa05, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x8040}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x5, &(0x7f0000000080)=@framed={{}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.571804607s ago: executing program 2 (id=2525): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000078c0)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e"], 0x48}}, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 2.400082881s ago: executing program 2 (id=2526): sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x25dfdbff, [@sadb_address={0x3, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x28}}, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='.']) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x110, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xac, 0xa8, @random="6564335033b067000a5183d1c5313fc664cfc139df249c5466632a5590d1940e2f9b3ce2cc64ac993288df7709f3b31c11964893f1681a74eda28c50775601ee973812148e62d01f455dd4fd29eaced73e988daf7f9709ab40c3b247884f762d86f5590fbe2c4cf3d4fa639be9e74276ab609a6a89aa23eff7bd5fccd78f2daf18d1e2e8702ff9aedddea64b3bc60338585844e25678b071a5a3d6a037c611fa9f670a95adaea76a"}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x110}, 0x1, 0x0, 0x0, 0x4010}, 0x8010) 2.290903013s ago: executing program 1 (id=2527): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'veth1_macvtap\x00', 0x800}) 2.285624764s ago: executing program 3 (id=2178): r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x2c0, r0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x198, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36e8082e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2879581d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5881}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5542}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77458af0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb512}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3f7f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x577ef557}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x110f}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb3b4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79ed6945}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3bb4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x683c225}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7c9f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75ef466e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7cb4507e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x750d814}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63d042d1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x10d49e4f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2fda}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc9c99d6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf649}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf1e2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb30f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xde28}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a99}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70866b2c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13e5856a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa605}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2bae}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x519e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4161f82}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb9ba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa389}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49a8befe}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6830c190}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2277cbba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcb1}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3040}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b6808bd}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9dc0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1488}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x57e6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x77c8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4192}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ce6b9a}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2831bf87}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1cad3bc6}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x279a52dd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa82397}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41df47fb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4dea519e}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x5c, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3cee6bb4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb7f8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4889cab6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d82}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3bae}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6901}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xed10}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa50f}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa1a}]}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r2, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x44081}, 0x40404) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r5, 0x20, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8045}, 0x4040) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000680)={0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r6, &(0x7f0000000a00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000740)={0x24c, r7, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf203}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}]}, @TIPC_NLA_MEDIA={0xe0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6bb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7464}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xce}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x4820}, 0x4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r6) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xa8, r8, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7f}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x4}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}]}, 0xa8}, 0x1, 0x0, 0x0, 0x15}, 0x4040051) sendmsg$AUDIT_TTY_GET(r6, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x10, 0x3f8, 0x200, 0x70bd27, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000d00), r1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000d40), r3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001040)={0xffffffffffffffff, 0xe0, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc5, &(0x7f0000000e40)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000e80), &(0x7f0000000ec0), 0x8, 0x88, 0x8, 0x8, &(0x7f0000000f00)}}, 0x10) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001080)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=@bloom_filter={0x1e, 0x5, 0x8001, 0x6, 0x90, 0x1, 0x6, '\x00', r9, r10, 0x1, 0x0, 0x0, 0x3, @void, @value, @void, @value}, 0x50) syz_genetlink_get_family_id$nl802154(&(0x7f0000001140), r3) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000001240)={&(0x7f0000001180), 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x3c, r8, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x25, 0x5b, "15ae457f98bc4c6f9fa6e663e4ab357ee4167ca3312733f38e7f46c114bdc42fa7"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008011}, 0x40000) syz_genetlink_get_family_id$nl802154(&(0x7f0000001280), r1) connect$pppoe(r6, &(0x7f00000012c0)={0x18, 0x0, {0x4, @broadcast, 'bond_slave_1\x00'}}, 0x1e) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001340), r4) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x4c, r11, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r12, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x6c, 0x0, 0x12, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x4) 1.279631238s ago: executing program 1 (id=2528): socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x80000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='x\x00\x00\x009\x00\t'], 0x78}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013004f0a000200"/20, @ANYRES32=r5, @ANYBLOB="00000000000000000800cfffecc507006c001a8054000a801400"], 0x94}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x8f8, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r6, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x7b, &(0x7f0000000080)=ANY=[@ANYBLOB="50aaaaaaaaaabbbbbbbbbbbb08004500006d0000000000119078ac1e0001ffffffff00004e20005990784fcbd88fdd6e8db421c941a23149772e4071c39f975bd06dc4e1bb21e3415ca8e3d816440a5a0da471d8dba422b091410b9e210e5ece2c9fd243cca97639fb6e54928f754092c591525775a87f918345f0"], 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000001c0)=@req3={0x0, 0xfffffffd, 0x4, 0x220c, 0x5, 0x7f, 0xbbe8}, 0x1c) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f0000000140)=@default_ibss_ssid, 0x6, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x0, &(0x7f00000001c0)}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000000)={0xffffffffffffffff, r1, 0x0, 0x24, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_i\xe1\x1dl_\x06ax\x00'}, 0x30) r8 = openat$cgroup_ro(r1, &(0x7f0000000240)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000000), 0x10) setsockopt$sock_int(r9, 0x1, 0x12, &(0x7f0000000040), 0x4) r10 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) sendfile(r10, r10, 0x0, 0x40000000000004) 1.27673459s ago: executing program 2 (id=2529): r0 = socket$kcm(0xa, 0x4, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000800000000000000728b108000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xcc}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x800) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64=r5], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x81, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r7 = socket$inet_tcp(0x2, 0x1, 0x0) close(r7) r8 = socket(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000100)={[{0x2d, 'memory'}, {0x2d, 'net_cls'}, {0x2d, 'hugetlb'}, {0x2b, 'net_cls'}]}, 0x23) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x48}}, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r10, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r10, 0x107, 0x5, &(0x7f0000000000)=@req3={0x4, 0x1, 0xfffff396, 0x9, 0x7, 0x3, 0x5}, 0x1c) setsockopt$sock_attach_bpf(r0, 0x10d, 0xa, &(0x7f0000000000)=r1, 0x4) 1.276279627s ago: executing program 4 (id=2530): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sched_process_wait\x00', r0}, 0x18) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r3, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4f}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x11, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0], 0x65f395ff75bf5209, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.024012169s ago: executing program 4 (id=2531): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = accept(r0, &(0x7f0000000080)=@l2tp={0x2, 0x0, @private}, &(0x7f0000000000)=0x80) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_qrtr_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000100)={'syz_tun\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_vlan\x00'}) 0s ago: executing program 0 (id=2532): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000680)={'#! ', '', [{0x20, '#\x00\x00\x19G\xef\xacV`^\xc4\xfc\xdb\x9b\xe3Z\xd0B\x1a\xe4\x9e\xe0\xbc\xf6\xca\xfdC\xba%a\xa9\x87`\xec\f\xe2\x8fW\x8f\x82\xad\xa6\x02\xcdl\xf7I\xf2p\x95\x15\xfa\x8b(\xa6kd\x94\xe41Q\x14\x92&\xe8\x115L6\xc8V\xe6D\xfc\x10\xf8\xed\x1f\xfd\xa89\x11\xad\x97c\xe3\x8a\xe1\t\x81\x8a\xf0\x17Xi\xb8\x0f\x8a`\xf5\x92\xe5\x17\xf7v\a9\x0fl\xd7\xcc\xa3\xc0S\b\xf4\xb2~\xa1\xff\x19\xdb\xcd\xb3\x04<\x7f\xde\xee\x03\x12w\x99]\xd4\xdcM\x04\xe1\x06k\x02\t\xd8\xa7i\xa2\x96\xf4#|\x1e\x8fN\xbf\x92\xd7\x8ab\x8d<\xa4\x1b7\xc1e=\xe4\xd7\"\xe17\xe0M\x00\t!\xf6u\a\xb1\xe1\x94\x0ezM\xed\xa8\xd2'}], 0xa, "903233de30c98d96da89f7df78bad1649a4e8100cb266ef6e8ca50f44c990b6655286c7d63d13a6ab1d8d6a706057d918ad8f44d26728fb5ceddab64cbaf255cf6a179cd972daaa8542affc75e8db1b998ece9ad07f909ee67cd32dd2ddf12bd1500000000aebe65af74ce363d888776afd4b1921d3b361eac9175f6a86a49952432d4"}, 0x145) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r1) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x20, r2, 0xf19, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008094}, 0x20008840) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r0, 0x304ed000) r4 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) r5 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r5, 0xffffffffffffffff, 0x0, 0xe, &(0x7f00000000c0)='memory.events\x00'}, 0x30) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x1}, 0x20) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa79ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200008b0"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001580)=@base={0x12, 0x9, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000340)={r8, &(0x7f0000000300)="e23c", 0x20000000}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r8}, &(0x7f0000000440), &(0x7f0000000480)=r7}, 0x20) close(0x4) socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[], 0x0) recvmmsg(r4, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x42, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000800)={'syztnl2\x00', 0x0, 0x8000, 0x7800, 0x5, 0x6, {{0x34, 0x4, 0x1, 0x9, 0xd0, 0x67, 0x0, 0x5, 0x2f, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @timestamp={0x44, 0x8, 0x17, 0x0, 0x2, [0x782]}, @timestamp={0x44, 0x18, 0x5c, 0x0, 0x2, [0x1, 0xfffffff7, 0x8, 0x1, 0xddd7]}, @noop, @rr={0x7, 0x7, 0x78, [@local]}, @ssrr={0x89, 0x17, 0xdc, [@dev={0xac, 0x14, 0x14, 0x1f}, @multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @cipso={0x86, 0x61, 0xffffffffffffffff, [{0x0, 0x12, "c7f16eb0fd49b34c89a4735baccd93b5"}, {0x7, 0xa, "71307bcf313d3287"}, {0x2, 0x5, "607ddf"}, {0x6, 0xa, "c4335b2d2fa3b331"}, {0x2, 0x6, "c9d90767"}, {0x7, 0xe, "8927ffe5b79082d9dff5e3ff"}, {0x2, 0xa, "026abedaf6ce7f85"}, {0x0, 0x12, "2513d3086fd99b066e388190ffc6cc07"}]}, @generic={0x7, 0xb, "638579ad1b99152267"}, @timestamp={0x44, 0xc, 0x8e, 0x0, 0xc, [0x4dadae8c, 0x0]}, @timestamp_prespec={0x44, 0x4, 0xfc, 0x3, 0x8}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1d, 0x7ef, 0x7ff, 0x1, 0x1000, r0, 0xffffff7f, '\x00', r9, r0, 0x3, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_TEST_RUN(0xd, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x16) kernel console output (not intermixed with test programs): T10278] lo speed is unknown, defaulting to 1000 [ 269.472958][T10304] net_ratelimit: 13 callbacks suppressed [ 269.472976][T10304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.576319][T10278] chnl_net:caif_netlink_parms(): no params data found [ 269.745599][ T940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.871164][ T5308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.879300][ T5308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.964653][ T5238] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 269.986288][ T5238] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 269.996136][ T5238] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 270.013075][ T5238] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 270.026044][ T5238] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 270.033197][ T5233] Bluetooth: hci4: command tx timeout [ 270.046830][ T5238] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 270.049793][T10278] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.146257][ T5358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.155307][T10278] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.181156][T10278] bridge_slave_0: entered allmulticast mode [ 270.207400][T10278] bridge_slave_0: entered promiscuous mode [ 270.300560][T10334] __nla_validate_parse: 4 callbacks suppressed [ 270.300579][T10334] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1235'. [ 270.324503][T10278] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.333314][T10278] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.341845][T10278] bridge_slave_1: entered allmulticast mode [ 270.349370][T10278] bridge_slave_1: entered promiscuous mode [ 270.458498][T10278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.493321][T10278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.543265][T10321] lo speed is unknown, defaulting to 1000 [ 270.576239][T10278] team0: Port device team_slave_0 added [ 270.649676][T10278] team0: Port device team_slave_1 added [ 270.798027][T10278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.810454][T10278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.838093][T10278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.857022][T10278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.864393][T10278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.891671][T10278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.910853][ T5277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.932127][T10368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1245'. [ 270.947008][T10358] lo speed is unknown, defaulting to 1000 [ 271.101485][T10278] hsr_slave_0: entered promiscuous mode [ 271.108953][T10278] hsr_slave_1: entered promiscuous mode [ 271.117941][T10278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.126057][T10278] Cannot create hsr debugfs directory [ 271.661719][T10401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.689791][T10401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.716754][T10401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.796840][T10321] chnl_net:caif_netlink_parms(): no params data found [ 271.863727][T10394] lo speed is unknown, defaulting to 1000 [ 271.960518][ T5308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.983836][T10278] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 65023 - 0 [ 272.007288][T10278] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.111822][ T5226] Bluetooth: hci7: command tx timeout [ 272.120483][ T5238] Bluetooth: hci4: command tx timeout [ 272.199183][T10278] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 65023 - 0 [ 272.211021][T10278] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.353463][T10278] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 65023 - 0 [ 272.373016][T10423] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1255'. [ 272.382714][T10278] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.459385][T10321] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.469307][T10321] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.477259][T10321] bridge_slave_0: entered allmulticast mode [ 272.485216][T10321] bridge_slave_0: entered promiscuous mode [ 272.540089][T10278] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 65023 - 0 [ 272.561609][T10278] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.624872][T10321] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.638723][T10321] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.651127][T10321] bridge_slave_1: entered allmulticast mode [ 272.658836][T10321] bridge_slave_1: entered promiscuous mode [ 272.682339][T10427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1256'. [ 272.871621][T10321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.937728][T10321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.968767][T10447] xt_hashlimit: max too large, truncated to 1048576 [ 273.079680][T10321] team0: Port device team_slave_0 added [ 273.094821][T10321] team0: Port device team_slave_1 added [ 273.202857][T10278] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 273.228091][T10278] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 273.250184][T10321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.268976][T10321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.285419][T10461] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1262'. [ 273.303840][T10321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.305663][T10461] netlink: 'syz.3.1262': attribute type 2 has an invalid length. [ 273.328124][T10461] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1262'. [ 273.337688][T10321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.345905][T10321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.375010][T10321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.387061][T10278] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 273.396431][T10458] IPVS: set_ctl: invalid protocol: 137 224.0.0.2:20001 [ 273.412370][T10278] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 273.503300][T10321] hsr_slave_0: entered promiscuous mode [ 273.509721][T10321] hsr_slave_1: entered promiscuous mode [ 273.519343][T10321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.527198][T10321] Cannot create hsr debugfs directory [ 273.839917][T10471] netlink: 'syz.1.1266': attribute type 1 has an invalid length. [ 273.860881][T10471] netlink: 'syz.1.1266': attribute type 4 has an invalid length. [ 273.868642][T10471] netlink: 14118 bytes leftover after parsing attributes in process `syz.1.1266'. [ 273.973503][T10321] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.999699][T10471] netlink: 'syz.1.1266': attribute type 1 has an invalid length. [ 274.017472][T10471] netlink: 'syz.1.1266': attribute type 4 has an invalid length. [ 274.041067][T10471] netlink: 14118 bytes leftover after parsing attributes in process `syz.1.1266'. [ 274.100426][T10321] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.123909][T10278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.187996][T10321] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.191114][ T5226] Bluetooth: hci7: command tx timeout [ 274.204252][ T5226] Bluetooth: hci4: command tx timeout [ 274.232480][T10278] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.311165][T10321] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.339395][ T2486] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.346647][ T2486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.388517][ T2486] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.395696][ T2486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.564735][T10321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 274.578106][T10321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 274.598597][T10321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 274.612810][T10321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 274.670873][ C1] net_ratelimit: 7 callbacks suppressed [ 274.670893][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.917231][T10497] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1273'. [ 274.922422][T10321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.959558][T10497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1273'. [ 274.969061][T10498] netlink: 'syz.0.1274': attribute type 10 has an invalid length. [ 275.076945][ T5281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.205674][T10321] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.272780][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.279959][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.342882][T10512] __nla_validate_parse: 2 callbacks suppressed [ 275.342901][T10512] netlink: 5424 bytes leftover after parsing attributes in process `syz.0.1277'. [ 275.352862][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.365608][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.417160][T10278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.426427][T10512] netlink: 5424 bytes leftover after parsing attributes in process `syz.0.1277'. [ 275.449950][T10514] netlink: 5424 bytes leftover after parsing attributes in process `syz.0.1277'. [ 275.470459][T10514] netlink: 5424 bytes leftover after parsing attributes in process `syz.0.1277'. [ 275.624211][T10278] veth0_vlan: entered promiscuous mode [ 275.665965][T10278] veth1_vlan: entered promiscuous mode [ 275.769457][T10278] veth0_macvtap: entered promiscuous mode [ 275.815337][T10528] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1280'. [ 275.850582][T10531] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1280'. [ 275.870935][T10527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.879903][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.913400][T10278] veth1_macvtap: entered promiscuous mode [ 275.998689][T10321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.035636][T10278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.069296][T10278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.094468][T10278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.111053][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.126689][T10547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1283'. [ 276.139037][T10278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.176932][T10278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.205793][T10278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.228348][T10278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.265938][T10278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.276187][ T5238] Bluetooth: hci7: command tx timeout [ 276.282010][ T5226] Bluetooth: hci4: command tx timeout [ 276.298473][T10278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.309972][T10278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.321001][T10278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.331626][T10278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.343075][T10278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.354109][T10278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.369500][T10278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.379743][T10278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.390468][T10278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.401156][T10278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.411811][T10278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.423476][T10278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.431401][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.455242][T10278] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.465164][T10278] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.487506][T10278] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.506620][T10278] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.644320][T10570] xt_TPROXY: Can be used only with -p tcp or -p udp [ 276.742412][T10570] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1286'. [ 276.883525][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.919639][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.984223][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.011834][T10585] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1288'. [ 277.020845][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.152883][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.219924][T10591] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 277.246644][T10321] veth0_vlan: entered promiscuous mode [ 277.249475][T10591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.266267][T10594] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 277.281462][T10321] veth1_vlan: entered promiscuous mode [ 277.293575][T10591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.305561][T10595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1223'. [ 277.426964][T10321] veth0_macvtap: entered promiscuous mode [ 277.471697][T10321] veth1_macvtap: entered promiscuous mode [ 277.537956][T10321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.607156][T10321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.632607][T10321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.670338][T10321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.680223][T10321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.701894][T10321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.717522][T10321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.728414][T10321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.739419][T10321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.751456][T10321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.764052][T10321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.866875][T10321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.910578][T10321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.940554][T10321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.972575][T10321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.004584][T10321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.021163][T10637] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 278.029421][T10321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.041287][T10321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.058331][T10321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.068887][T10321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.081479][T10321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.091736][T10321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.102722][T10321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.116915][T10321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.183142][T10646] x_tables: duplicate underflow at hook 1 [ 278.239743][T10321] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.266432][T10321] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.284009][T10321] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.293580][T10321] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.352247][ T5226] Bluetooth: hci7: command tx timeout [ 278.560574][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.581018][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.838326][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.856637][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.321367][T10701] ax25_connect(): syz.4.1316 uses autobind, please contact jreuter@yaina.de [ 279.952074][T10734] netlink: 'syz.3.1315': attribute type 4 has an invalid length. [ 280.027146][T10733] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 280.160937][T10738] netlink: 'syz.0.1328': attribute type 1 has an invalid length. [ 280.271086][T10740] bond2: entered allmulticast mode [ 280.647132][T10772] x_tables: duplicate underflow at hook 1 [ 280.668582][ T1108] tipc: Subscription rejected, illegal request [ 280.704288][T10776] vlan2: entered promiscuous mode [ 280.801035][T10784] netlink: 'syz.1.1337': attribute type 29 has an invalid length. [ 280.901109][T10771] syz.1.1337[10771] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 280.901258][T10771] syz.1.1337[10771] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 281.300779][T10813] __nla_validate_parse: 22 callbacks suppressed [ 281.300802][T10813] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1346'. [ 281.414351][T10826] Cannot find add_set index 0 as target [ 281.628135][T10838] veth0_vlan: left promiscuous mode [ 281.746224][T10847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1355'. [ 281.758568][T10808] delete_channel: no stack [ 281.768693][T10847] veth0_to_batadv: entered promiscuous mode [ 281.779368][T10847] veth0_to_batadv: entered allmulticast mode [ 281.826327][T10850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1355'. [ 282.226950][T10875] netlink: 'syz.4.1365': attribute type 9 has an invalid length. [ 282.253141][T10875] netlink: 134328 bytes leftover after parsing attributes in process `syz.4.1365'. [ 282.401676][T10881] Bluetooth: MGMT ver 1.23 [ 282.567094][T10888] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1369'. [ 282.677215][T10896] veth1_macvtap: left promiscuous mode [ 283.013080][T10915] vlan0: entered allmulticast mode [ 283.074434][T10918] dvmrp0: entered allmulticast mode [ 283.116727][T10918] dvmrp0: left allmulticast mode [ 283.286338][T10931] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1383'. [ 283.363043][T10937] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1382'. [ 283.421553][T10943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1387'. [ 283.794397][T10963] netlink: 'syz.4.1393': attribute type 30 has an invalid length. [ 283.862576][T10968] netlink: 'syz.1.1395': attribute type 4 has an invalid length. [ 284.457257][T11000] lo speed is unknown, defaulting to 1000 [ 284.871797][T11023] IPVS: length: 8 != 729791320 [ 284.928962][T11025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1409'. [ 285.042291][T11026] netlink: 'syz.0.1409': attribute type 3 has an invalid length. [ 285.050074][T11026] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1409'. [ 285.338351][T11042] netlink: 'syz.2.1414': attribute type 10 has an invalid length. [ 285.387148][T11042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.422546][T11042] team0: Port device batadv0 added [ 285.637911][T11051] batman_adv: batadv0: Adding interface: wlan1 [ 285.655621][T11051] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.759917][T11051] batman_adv: batadv0: Interface activated: wlan1 [ 286.338816][T11091] __nla_validate_parse: 4 callbacks suppressed [ 286.338838][T11091] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1426'. [ 286.355003][ T5226] Bluetooth: hci7: command tx timeout [ 286.600124][T11107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1432'. [ 286.682112][T11107] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 286.692867][T11107] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 286.739074][T11111] lo speed is unknown, defaulting to 1000 [ 286.746480][T11114] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1433'. [ 286.800435][T11114] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1433'. [ 286.845850][T11119] netlink: 'syz.1.1435': attribute type 29 has an invalid length. [ 286.891929][T11120] netlink: 'syz.1.1435': attribute type 29 has an invalid length. [ 287.027706][T11128] rdma_op ffff888054e999f0 conn xmit_rdma 0000000000000000 [ 287.047667][T11131] netlink: 'syz.4.1438': attribute type 1 has an invalid length. [ 287.060535][T11131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1438'. [ 287.079487][T11131] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1438'. [ 287.384611][T11149] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1444'. [ 287.415214][T11149] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1444'. [ 287.425531][T11146] @ÿ: renamed from veth0_vlan (while UP) [ 287.452819][T11149] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1444'. [ 287.624717][T11149] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 287.660416][T11153] netlink: 'syz.0.1444': attribute type 10 has an invalid length. [ 287.709126][T11149] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1444'. [ 287.862459][T11171] netlink: 'syz.4.1449': attribute type 9 has an invalid length. [ 287.975826][T11181] netlink: 'syz.0.1451': attribute type 3 has an invalid length. [ 288.028677][ T5281] IPVS: starting estimator thread 0... [ 288.028814][T11178] tipc: Started in network mode [ 288.081521][T11178] tipc: Node identity ac1414aa, cluster identity 4711 [ 288.124480][T11178] net_ratelimit: 5 callbacks suppressed [ 288.124500][T11178] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 288.140702][T11178] tipc: Enabled bearer , priority 10 [ 288.152800][T11183] IPVS: using max 21 ests per chain, 50400 per kthread [ 288.262261][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 288.400387][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 288.540382][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 288.680348][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 288.788497][T11215] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 288.805623][T11215] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 288.820540][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 288.831506][ T5229] Bluetooth: hci5: command 0x0406 tx timeout [ 288.838240][ T5242] Bluetooth: hci1: command 0x0406 tx timeout [ 288.840534][ T54] Bluetooth: hci6: command 0x0406 tx timeout [ 288.960611][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 289.100489][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 289.241245][ T5281] tipc: Node number set to 2886997162 [ 289.283510][T11241] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 2, id = 0 [ 289.380388][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 289.650332][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 290.132137][T11301] gtp0: entered promiscuous mode [ 290.149439][T11301] gtp0: entered allmulticast mode [ 290.729924][T11323] bridge2: entered promiscuous mode [ 290.831892][T11323] bridge2: entered allmulticast mode [ 290.871299][T11323] team0: Port device bridge2 added [ 290.934726][T11322] bridge3: entered promiscuous mode [ 290.939979][T11322] bridge3: entered allmulticast mode [ 290.976971][T11322] team0: Port device bridge3 added [ 291.439257][T11354] lo speed is unknown, defaulting to 1000 [ 291.562947][T11370] __nla_validate_parse: 8 callbacks suppressed [ 291.562966][T11370] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1501'. [ 291.620950][T11373] netlink: 456 bytes leftover after parsing attributes in process `syz.1.1501'. [ 291.688052][T11373] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1501'. [ 291.828881][T11382] netlink: 'syz.3.1505': attribute type 7 has an invalid length. [ 291.855537][T11389] netlink: 'syz.4.1506': attribute type 5 has an invalid length. [ 291.988075][T11395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1508'. [ 291.998154][T11395] bM1®NuëöÉÑ30Ê: renamed from lo (while UP) [ 292.050016][T11396] Bluetooth: hci3: unsupported parameter 64512 [ 292.083698][T11395] bM1®NuëöÉÑ30Ê: entered allmulticast mode [ 292.087884][T11396] Bluetooth: hci3: invalid length 0, exp 2 for type 3 [ 292.153672][T11400] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1511'. [ 292.291976][T11404] lo speed is unknown, defaulting to 1000 [ 292.696014][T11429] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1518'. [ 292.806188][T11429] Bluetooth: hci3: invalid length 1, exp 2 for type 29 [ 292.991995][T11446] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1522'. [ 293.013987][T11446] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1522'. [ 293.243233][T11452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1524'. [ 293.258689][T11454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1525'. [ 293.310447][ C1] net_ratelimit: 6 callbacks suppressed [ 293.310468][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 293.369676][T11462] delete_channel: no stack [ 293.513222][T11467] netlink: 'syz.1.1528': attribute type 6 has an invalid length. [ 293.608943][T11469] pim6reg1: entered promiscuous mode [ 293.614509][T11469] pim6reg1: entered allmulticast mode [ 293.934821][T11481] Bluetooth: hci3: invalid length 1, exp 2 for type 29 [ 294.350335][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 294.605816][T11532] bridge4: entered promiscuous mode [ 294.623061][T11532] bridge4: entered allmulticast mode [ 294.647983][T11532] team0: Port device bridge4 added [ 294.673055][T11532] netlink: 'syz.2.1548': attribute type 10 has an invalid length. [ 294.698668][T11532] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 294.724606][T11534] team_slave_0: entered promiscuous mode [ 294.730824][T11534] team_slave_1: entered promiscuous mode [ 294.737676][T11534] macsec1: entered promiscuous mode [ 294.743653][T11534] team0: entered promiscuous mode [ 294.749446][T11534] macsec1: entered allmulticast mode [ 294.755768][T11534] team0: entered allmulticast mode [ 294.761324][T11534] team_slave_0: entered allmulticast mode [ 294.767316][T11534] team_slave_1: entered allmulticast mode [ 294.784876][T11534] team0: left allmulticast mode [ 294.791222][T11534] team_slave_0: left allmulticast mode [ 294.797727][T11534] team_slave_1: left allmulticast mode [ 294.803948][T11534] team0: left promiscuous mode [ 294.812768][T11534] team_slave_0: left promiscuous mode [ 294.818294][T11534] team_slave_1: left promiscuous mode [ 294.858636][T11532] bridge0: port 3(ip6gretap0) entered blocking state [ 294.865860][T11532] bridge0: port 3(ip6gretap0) entered disabled state [ 294.874084][T11532] ip6gretap0: entered allmulticast mode [ 294.887977][T11532] ip6gretap0: entered promiscuous mode [ 294.895462][T11532] bridge0: port 3(ip6gretap0) entered blocking state [ 294.902347][T11532] bridge0: port 3(ip6gretap0) entered forwarding state [ 295.187517][T11554] netlink: 'syz.0.1553': attribute type 4 has an invalid length. [ 295.510572][T11578] netlink: 'syz.4.1561': attribute type 10 has an invalid length. [ 295.568298][T11580] netlink: 'syz.0.1562': attribute type 2 has an invalid length. [ 295.569917][T11578] team0: Port device netdevsim0 added [ 295.631045][T11587] netlink: 'syz.4.1561': attribute type 10 has an invalid length. [ 295.718311][T11587] team0: Port device netdevsim0 removed [ 295.743464][T11587] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 296.057297][T11606] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 296.138894][T11618] geneve1: entered promiscuous mode [ 296.172145][T11611] lo speed is unknown, defaulting to 1000 [ 296.301345][T11633] netlink: 'syz.3.1578': attribute type 17 has an invalid length. [ 296.732089][T11649] __nla_validate_parse: 10 callbacks suppressed [ 296.732111][T11649] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1582'. [ 297.065510][T11662] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 297.173970][T11662] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1586'. [ 297.205114][T11662] netlink: 'syz.4.1586': attribute type 10 has an invalid length. [ 297.613245][T11685] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1593'. [ 297.761118][T11689] dccp_invalid_packet: P.Data Offset(100) too large [ 297.787468][T11693] vlan3: entered promiscuous mode [ 297.809030][T11693] mac80211_hwsim hwsim27 wlan0: entered promiscuous mode [ 297.836187][T11693] mac80211_hwsim hwsim27 wlan0: left promiscuous mode [ 298.032652][T11703] SET target dimension over the limit! [ 298.799241][T11728] netlink: 'syz.2.1606': attribute type 4 has an invalid length. [ 298.864798][T11732] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1607'. [ 298.881355][T11732] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 298.954846][T11730] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 298.964590][T11730] pim6reg0: linktype set to 805 [ 298.996473][T11728] netlink: 'syz.2.1606': attribute type 38 has an invalid length. [ 299.038287][T11728] pim6reg0: tun_chr_ioctl cmd 1074025694 [ 299.329825][T11747] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 299.358136][T11747] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 299.387229][T11747] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 299.412525][T11747] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 299.448530][T11747] geneve2: entered promiscuous mode [ 299.461672][T11747] geneve2: entered allmulticast mode [ 299.657888][T11765] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1617'. [ 299.808270][T11770] x_tables: ip_tables: SNAT target: only valid in nat table, not syz0 [ 300.260977][T11782] netlink: 'syz.4.1621': attribute type 27 has an invalid length. [ 300.342711][T11782] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1621'. [ 300.409976][T11782] ipvlan2: entered promiscuous mode [ 302.142785][T11851] tipc: Started in network mode [ 302.160440][T11851] tipc: Node identity ac14140f, cluster identity 4711 [ 302.167602][T11851] tipc: New replicast peer: 255.255.255.255 [ 302.231302][T11851] tipc: Enabled bearer , priority 10 [ 302.425079][T11840] infiniband syz1: set active [ 302.441441][T11840] infiniband syz1: added bond_slave_1 [ 302.628308][T11840] RDS/IB: syz1: added [ 302.692651][T11840] smc: adding ib device syz1 with port count 1 [ 302.699099][T11840] smc: ib device syz1 port 1 has pnetid [ 302.887575][T11885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1648'. [ 303.230575][ T5280] tipc: Node number set to 2886997007 [ 303.465308][T11904] netlink: 'syz.3.1656': attribute type 2 has an invalid length. [ 303.796602][T11918] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1658'. [ 303.883827][T11921] netlink: 9372 bytes leftover after parsing attributes in process `syz.3.1660'. [ 303.927223][T11921] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 303.967369][T11921] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 304.019237][T11926] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1661'. [ 304.168210][T11935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1662'. [ 304.214350][T11937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1662'. [ 304.267858][T11942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1664'. [ 304.292524][T11942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1664'. [ 304.344440][T11942] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1664'. [ 304.383016][T11942] vlan3: entered promiscuous mode [ 304.389655][T11942] bridge3: entered promiscuous mode [ 304.449491][T11945] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1665'. [ 305.133570][T11989] netlink: 'syz.1.1675': attribute type 21 has an invalid length. [ 305.143733][T11989] netlink: 'syz.1.1675': attribute type 1 has an invalid length. [ 305.170871][T11989] netlink: 'syz.1.1675': attribute type 6 has an invalid length. [ 305.207385][T11989] No such timeout policy "syz0" [ 305.470969][T12001] netlink: 'syz.0.1679': attribute type 4 has an invalid length. [ 305.483317][T11994] lo speed is unknown, defaulting to 1000 [ 305.744846][T12008] lo speed is unknown, defaulting to 1000 [ 306.583857][T12024] team0: Caught tx_queue_len zero misconfig [ 306.938303][T12031] lo speed is unknown, defaulting to 1000 [ 307.410003][T12050] netlink: 'syz.4.1689': attribute type 20 has an invalid length. [ 307.642611][T12053] macvlan3: entered promiscuous mode [ 307.660688][T12053] vlan0: entered promiscuous mode [ 308.319996][T12068] lo speed is unknown, defaulting to 1000 [ 308.328591][T12073] __nla_validate_parse: 7 callbacks suppressed [ 308.328609][T12073] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1700'. [ 308.579131][T12075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1701'. [ 308.616867][T12075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1701'. [ 308.647212][T12075] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1701'. [ 308.771379][T12080] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1703'. [ 308.878606][T12085] netlink: 'syz.0.1705': attribute type 10 has an invalid length. [ 308.965663][T12085] team0: Device netdevsim0 failed to register rx_handler [ 309.021432][T12087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1703'. [ 309.202583][T12101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1708'. [ 309.625988][T12073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.812698][T12119] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1709'. [ 309.940963][T12121] lo speed is unknown, defaulting to 1000 [ 310.286393][T12134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.293076][T12144] xt_TCPMSS: Only works on TCP SYN packets [ 310.340959][T12134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.522725][T12157] netlink: 892 bytes leftover after parsing attributes in process `syz.3.1721'. [ 310.740596][T12167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1723'. [ 310.750152][T12167] netlink: 'syz.1.1723': attribute type 1 has an invalid length. [ 310.773166][T12167] nbd: error processing sock list [ 310.830358][T12170] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 310.974589][T12175] A link change request failed with some changes committed already. Interface bM1®NuëöÉÑ30Ê may have been left with an inconsistent configuration, please check. [ 311.295888][T12181] lo speed is unknown, defaulting to 1000 [ 311.316274][T12186] netlink: 'syz.0.1730': attribute type 21 has an invalid length. [ 311.344493][T12184] netlink: 'syz.0.1730': attribute type 21 has an invalid length. [ 311.466344][T12191] batadv_slave_1: entered promiscuous mode [ 311.480929][T12190] batadv_slave_1: left promiscuous mode [ 311.967766][T12221] vlan1: entered promiscuous mode [ 311.984938][T12221] team0: entered promiscuous mode [ 311.990028][T12221] team_slave_0: entered promiscuous mode [ 312.005247][T12221] team_slave_1: entered promiscuous mode [ 312.020502][T12221] batadv0: entered promiscuous mode [ 312.057256][T12221] team0: left promiscuous mode [ 312.066500][T12221] team_slave_0: left promiscuous mode [ 312.084899][T12221] team_slave_1: left promiscuous mode [ 312.108868][T12221] batadv0: left promiscuous mode [ 312.216164][T12223] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 312.831345][ T5226] Bluetooth: hci0: command tx timeout [ 313.128840][T12268] lo speed is unknown, defaulting to 1000 [ 313.219897][T12273] netlink: 'syz.4.1754': attribute type 25 has an invalid length. [ 313.229304][T12273] netlink: 'syz.4.1754': attribute type 7 has an invalid length. [ 313.297572][T12275] delete_channel: no stack [ 313.311265][T12275] delete_channel: no stack [ 313.535724][T12288] lo speed is unknown, defaulting to 1000 [ 313.571050][T12290] netlink: 'syz.0.1758': attribute type 4 has an invalid length. [ 313.585582][T12290] netlink: 'syz.0.1758': attribute type 4 has an invalid length. [ 313.611744][T12294] __nla_validate_parse: 9 callbacks suppressed [ 313.611764][T12294] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1760'. [ 313.718151][T12294] veth0_to_batadv: mtu greater than device maximum [ 314.169962][T12312] netlink: 'syz.4.1766': attribute type 8 has an invalid length. [ 314.274625][T12312] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1766'. [ 314.292815][T12315] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1767'. [ 314.341363][T12315] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1767'. [ 314.412132][T12315] macvlan0: entered promiscuous mode [ 314.448042][T12315] ipvlan0: entered promiscuous mode [ 314.481732][T12315] ipvlan0: left promiscuous mode [ 314.505695][T12315] macvlan0: left promiscuous mode [ 314.710577][T12329] tipc: Started in network mode [ 314.715489][T12329] tipc: Node identity f7, cluster identity 4711 [ 314.739524][T12329] tipc: Node number set to 247 [ 315.081790][T12342] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20003 [ 315.125903][T12342] netlink: 'syz.1.1772': attribute type 10 has an invalid length. [ 315.143353][T12342] bridge0: port 3(gretap0) entered disabled state [ 315.150002][T12342] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.203836][T12342] bridge0: left promiscuous mode [ 315.208842][T12342] bridge0: left allmulticast mode [ 315.223755][T12347] dccp_v4_rcv: dropped packet with invalid checksum [ 315.245077][T12346] dccp_v4_rcv: dropped packet with invalid checksum [ 315.272469][T12342] bridge0: port 3(gretap0) entered blocking state [ 315.279171][T12342] bridge0: port 3(gretap0) entered forwarding state [ 315.286132][T12342] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.293367][T12342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.386931][T12342] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 315.821083][T12380] bridge0: port 4(gretap0) entered blocking state [ 315.837950][T12380] bridge0: port 4(gretap0) entered disabled state [ 315.852782][T12380] gretap0: entered allmulticast mode [ 315.865137][T12380] gretap0: entered promiscuous mode [ 315.899442][T12380] bridge0: port 4(gretap0) entered blocking state [ 315.906463][T12380] bridge0: port 4(gretap0) entered forwarding state [ 315.939276][T12387] gretap0: left allmulticast mode [ 315.957340][T12387] gretap0: left promiscuous mode [ 315.991117][T12387] bridge0: port 4(gretap0) entered disabled state [ 316.004982][T12389] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1785'. [ 316.071414][T12394] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1788'. [ 316.156164][T12396] netlink: 'syz.1.1789': attribute type 4 has an invalid length. [ 316.216201][T12396] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1789'. [ 316.277635][T12396] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 316.433844][T12406] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1790'. [ 316.822300][T12430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1797'. [ 317.393657][T12465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1805'. [ 317.699755][T12475] wg1: entered allmulticast mode [ 317.893257][T12482] netlink: 'syz.0.1813': attribute type 11 has an invalid length. [ 318.097222][T12494] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 318.098447][T12492] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 318.139038][T12494] nbd: must specify a device to reconfigure [ 318.206763][T12498] netlink: 'syz.3.1817': attribute type 3 has an invalid length. [ 318.219191][T12500] netlink: 'syz.2.1818': attribute type 10 has an invalid length. [ 318.281992][T12503] netlink: 'syz.2.1818': attribute type 93 has an invalid length. [ 318.643312][T12520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.792915][T12531] netlink: 'syz.4.1830': attribute type 8 has an invalid length. [ 318.871915][T12527] lo: Caught tx_queue_len zero misconfig [ 318.917767][T12531] wg2: entered promiscuous mode [ 318.930439][T12531] wg2: entered allmulticast mode [ 319.192935][T12557] netlink: 'syz.3.1838': attribute type 10 has an invalid length. [ 319.463255][T12562] netlink: 'syz.3.1840': attribute type 1 has an invalid length. [ 319.482802][T12562] __nla_validate_parse: 6 callbacks suppressed [ 319.482820][T12562] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1840'. [ 319.765682][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1843'. [ 319.925064][T12582] netlink: 'syz.3.1845': attribute type 1 has an invalid length. [ 320.118005][T12590] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1849'. [ 320.176562][T12584] sctp: [Deprecated]: syz.2.1842 (pid 12584) Use of int in max_burst socket option deprecated. [ 320.176562][T12584] Use struct sctp_assoc_value instead [ 320.428798][T12612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1852'. [ 320.557115][T12619] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 320.798104][T12634] netlink: 'syz.0.1860': attribute type 9 has an invalid length. [ 320.820832][T12634] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1860'. [ 320.904338][T12639] bond0: entered promiscuous mode [ 320.909580][T12642] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1863'. [ 321.140669][T12639] bond_slave_0: entered promiscuous mode [ 321.149051][T12639] bond_slave_1: entered promiscuous mode [ 321.162298][T12634] netlink: 'syz.0.1860': attribute type 9 has an invalid length. [ 321.170454][T12634] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1860'. [ 321.193789][T12634] sch_fq: defrate 0 ignored. [ 321.230208][T12633] bond0: left promiscuous mode [ 321.235435][T12633] bond_slave_0: left promiscuous mode [ 321.242186][T12633] bond_slave_1: left promiscuous mode [ 321.527875][T12657] lo speed is unknown, defaulting to 1000 [ 321.674313][T12666] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1868'. [ 321.772073][T12669] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1870'. [ 322.177588][T12688] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1877'. [ 322.387896][T12700] pim6reg: entered allmulticast mode [ 322.417156][T12700] batadv_slave_0: entered allmulticast mode [ 322.809525][T12717] x_tables: duplicate underflow at hook 3 [ 323.400739][T12733] bridge_slave_0: entered promiscuous mode [ 323.420372][T12733] bridge_slave_0: entered allmulticast mode [ 323.774999][T12751] bridge0: port 4(batadv1) entered blocking state [ 323.800633][T12751] bridge0: port 4(batadv1) entered disabled state [ 323.821032][T12751] batadv1: entered allmulticast mode [ 323.854417][T12751] batadv1: entered promiscuous mode [ 324.283983][ T35] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 324.294184][ T35] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 324.309201][T12760] netlink: 'syz.1.1899': attribute type 1 has an invalid length. [ 324.341340][T12760] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 324.598973][T12781] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: wlan1 [ 324.640311][T12781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.663126][T12781] vlan1: entered allmulticast mode [ 324.680343][T12781] mac80211_hwsim hwsim26 wlan1: entered allmulticast mode [ 324.700365][T12781] mac80211_hwsim hwsim26 wlan1: left allmulticast mode [ 324.771622][T12780] netlink: 'syz.1.1905': attribute type 10 has an invalid length. [ 324.806603][T12780] team0: Port device dummy0 added [ 325.092485][T12788] SET target dimension over the limit! [ 325.325975][T12807] netlink: 'syz.4.1911': attribute type 7 has an invalid length. [ 325.357015][T12807] netlink: 'syz.4.1911': attribute type 39 has an invalid length. [ 325.438035][T12808] bridge5: port 1(gretap1) entered blocking state [ 325.466065][T12808] bridge5: port 1(gretap1) entered disabled state [ 325.495305][T12808] gretap1: entered allmulticast mode [ 325.518484][T12808] gretap1: entered promiscuous mode [ 325.552230][T12816] can: request_module (can-proto-0) failed. [ 325.568640][T12820] netlink: 'syz.3.1914': attribute type 13 has an invalid length. [ 325.588597][T12820] __nla_validate_parse: 6 callbacks suppressed [ 325.588613][T12820] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1914'. [ 325.781067][T12833] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1917'. [ 325.818995][T12841] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1917'. [ 326.197976][T12857] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1924'. [ 326.262154][T12861] siw: device registration error -23 [ 326.527856][T12873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1927'. [ 326.569687][T12873] syz_tun: entered promiscuous mode [ 326.575936][T12873] macsec1: entered promiscuous mode [ 326.585105][T12873] syz_tun: left promiscuous mode [ 326.627661][T12882] bridge0: port 3(gretap0) entered disabled state [ 326.634283][T12882] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.890899][ T11] batman_adv: batadv1: IGMP Querier appeared [ 326.896962][ T11] batman_adv: batadv1: MLD Querier appeared [ 326.909155][T12901] macvlan3: entered promiscuous mode [ 326.917028][T12901] vlan0: entered promiscuous mode [ 327.261780][T12921] sctp: [Deprecated]: syz.2.1938 (pid 12921) Use of int in max_burst socket option deprecated. [ 327.261780][T12921] Use struct sctp_assoc_value instead [ 327.595850][T12944] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1943'. [ 327.883351][T12966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1949'. [ 327.897505][T12966] ip6gretap0: left allmulticast mode [ 327.903216][T12966] ip6gretap0: left promiscuous mode [ 327.908833][T12966] bridge0: port 3(ip6gretap0) entered disabled state [ 327.919084][T12966] bridge_slave_1: left allmulticast mode [ 327.925110][T12966] bridge_slave_1: left promiscuous mode [ 327.931097][T12966] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.943044][T12966] bridge_slave_0: left allmulticast mode [ 327.956161][T12966] bridge_slave_0: left promiscuous mode [ 327.963027][T12966] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.013919][T12966] vlan0 (unregistering): left promiscuous mode [ 329.790546][ T5233] Bluetooth: hci2: command 0x0405 tx timeout [ 344.510802][ T25] page_pool_release_retry() stalled pool shutdown: id 104, 1 inflight 60 sec [ 345.302922][T12977] netlink: 'syz.3.1954': attribute type 4 has an invalid length. [ 345.370826][T12977] netlink: 'syz.3.1954': attribute type 4 has an invalid length. [ 345.505410][T12990] lo speed is unknown, defaulting to 1000 [ 345.609031][T12993] netlink: 'syz.2.1953': attribute type 2 has an invalid length. [ 345.659188][T12975] delete_channel: no stack [ 345.706905][T12993] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1953'. [ 345.789799][T13000] lo speed is unknown, defaulting to 1000 [ 346.016334][T13016] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1961'. [ 346.221546][T13023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1962'. [ 346.349949][T13025] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1964'. [ 347.016599][T13056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1973'. [ 347.142990][T13063] x_tables: unsorted entry at hook 3 [ 347.528717][T13076] batman_adv: batadv0: Interface deactivated: wlan1 [ 347.578417][T13076] batman_adv: batadv0: Removing interface: wlan1 [ 347.769934][T13076] bond3: (slave ip6gre1): Releasing backup interface [ 347.807085][T13084] netlink: 'syz.0.1981': attribute type 1 has an invalid length. [ 347.826573][T13084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1981'. [ 347.940938][T13076] bond4: (slave gretap0): Releasing backup interface [ 347.978840][T13076] batman_adv: batadv0: Removing interface: macvtap1 [ 348.005969][T13079] lo speed is unknown, defaulting to 1000 [ 348.295706][T13092] netlink: 'syz.2.1984': attribute type 3 has an invalid length. [ 348.350787][T13092] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1984'. [ 348.721344][T13105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1987'. [ 348.759514][T13108] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1988'. [ 348.789139][T13108] nbd: couldn't find a device at index 0 [ 349.073688][T13123] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1994'. [ 350.111588][T13162] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 350.161144][T13163] netlink: 'syz.4.2003': attribute type 10 has an invalid length. [ 350.223174][T13163] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.262397][T13163] bond0: (slave team0): Enslaving as an active interface with an up link [ 350.281856][ T5233] Bluetooth: hci3: command 0x0406 tx timeout [ 350.296056][T13166] netlink: 'syz.4.2003': attribute type 10 has an invalid length. [ 350.407253][T13166] bond0: (slave team0): Releasing backup interface [ 350.435642][T13166] bridge0: port 3(team0) entered blocking state [ 350.445177][T13166] bridge0: port 3(team0) entered disabled state [ 350.452323][T13166] team0: entered allmulticast mode [ 350.457624][T13166] team_slave_0: entered allmulticast mode [ 350.465060][T13166] team_slave_1: entered allmulticast mode [ 350.473951][T13166] team0: entered promiscuous mode [ 350.479173][T13166] team_slave_0: entered promiscuous mode [ 350.489992][T13166] team_slave_1: entered promiscuous mode [ 350.497031][T13168] netdevsim netdevsim0 netdevsim0: Device is already in use. [ 350.870842][T13204] netlink: 'syz.4.2018': attribute type 2 has an invalid length. [ 350.878646][T13204] __nla_validate_parse: 4 callbacks suppressed [ 350.878660][T13204] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2018'. [ 350.897736][T13210] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2017'. [ 351.025986][T13214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2020'. [ 351.080632][T13216] netlink: 4272 bytes leftover after parsing attributes in process `syz.3.2020'. [ 351.191066][T13226] pimreg: entered allmulticast mode [ 351.213917][T13219] x_tables: duplicate underflow at hook 1 [ 351.487471][T13243] xt_CT: No such helper "syz0" [ 351.554256][T13243] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2027'. [ 351.639105][T13257] netlink: 'syz.0.2030': attribute type 1 has an invalid length. [ 351.660919][T13257] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.2030'. [ 353.989644][T13287] netlink: 'syz.3.2042': attribute type 21 has an invalid length. [ 354.066967][T13293] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.2042'. [ 354.071551][T13289] netlink: 'syz.2.2043': attribute type 8 has an invalid length. [ 354.193174][T13301] netlink: 'syz.4.2044': attribute type 10 has an invalid length. [ 354.297724][T13301] dummy0: entered promiscuous mode [ 354.346808][T13301] dummy0: entered allmulticast mode [ 354.368955][T13301] team0: Port device dummy0 added [ 354.712000][T13338] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2050'. [ 354.952624][T13357] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 355.091005][T13361] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2060'. [ 355.199684][T13369] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2062'. [ 355.726056][T13394] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 355.760666][T13394] netlink: 'syz.4.2070': attribute type 10 has an invalid length. [ 356.420820][T13407] bridge0: entered promiscuous mode [ 356.472146][T13400] bridge0: left promiscuous mode [ 356.500561][T13409] __nla_validate_parse: 2 callbacks suppressed [ 356.500581][T13409] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2076'. [ 356.730033][T13424] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2079'. [ 356.844041][T13430] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2080'. [ 356.865289][T13430] IPv6: NLM_F_REPLACE set, but no existing node found! [ 357.166337][T13451] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2086'. [ 357.179122][T13439] netlink: 'syz.0.2083': attribute type 12 has an invalid length. [ 357.210631][T13439] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2083'. [ 357.259414][T13447] hsr0: entered promiscuous mode [ 357.279739][T13447] hsr0: left promiscuous mode [ 357.359393][T13456] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2087'. [ 357.375980][T13437] delete_channel: no stack [ 357.469437][T13458] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 357.513678][T13464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2090'. [ 357.533811][T13464] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2090'. [ 357.560503][T13466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2089'. [ 357.589080][T13466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2089'. [ 357.795897][T13483] netlink: 'syz.3.2095': attribute type 10 has an invalid length. [ 357.808284][T13483] sctp: [Deprecated]: syz.3.2095 (pid 13483) Use of struct sctp_assoc_value in delayed_ack socket option. [ 357.808284][T13483] Use struct sctp_sack_info instead [ 357.828365][T13483] netlink: 'syz.3.2095': attribute type 1 has an invalid length. [ 357.849337][T13483] netlink: 'syz.3.2095': attribute type 10 has an invalid length. [ 358.686286][T13544] netlink: 'syz.3.2112': attribute type 4 has an invalid length. [ 358.715459][T13545] xt_l2tp: v2 sid > 0xffff: 262144 [ 358.727956][T13545] netlink: 'syz.2.2113': attribute type 1 has an invalid length. [ 358.747955][T13549] netlink: 'syz.3.2112': attribute type 4 has an invalid length. [ 359.218580][T13579] netlink: 'syz.2.2123': attribute type 2 has an invalid length. [ 360.202380][T13614] xt_CT: You must specify a L4 protocol and not use inversions on it [ 360.230916][T13620] netlink: 'syz.0.2135': attribute type 4 has an invalid length. [ 360.626039][T13651] veth0_macvtap: left promiscuous mode [ 361.320598][ T5226] Bluetooth: hci7: command tx timeout [ 361.571114][T13708] __nla_validate_parse: 15 callbacks suppressed [ 361.571133][T13708] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2160'. [ 361.632894][T13708] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2160'. [ 361.647480][T13706] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2160'. [ 361.648053][T13712] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 361.657158][T13706] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2160'. [ 361.722322][T13723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2162'. [ 361.879455][T13734] Dead loop on virtual device ipvlan1, fix it urgently! [ 361.914642][T13742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2169'. [ 361.940748][T13734] syz.0.2166 (13734) used greatest stack depth: 6648 bytes left [ 362.497571][T11963] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.561915][T13773] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2179'. [ 362.610136][T13777] Bluetooth: hci3: invalid length 1, exp 2 for type 30 [ 362.634218][T11963] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.742311][T11963] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.805179][T13780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2182'. [ 362.889022][T11963] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.937741][T13785] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2181'. [ 363.297363][ T5233] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 363.307955][ T5233] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 363.318420][ T5233] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 363.332727][ T5233] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 363.361792][ T5233] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 363.379441][ T5233] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 364.172044][T13812] IPVS: set_ctl: invalid protocol: 201 224.0.0.1:20003 [ 364.239556][T11963] bond0 (unregistering): Released all slaves [ 364.253604][T11963] bond1 (unregistering): Released all slaves [ 364.269526][T11963] bond2 (unregistering): Released all slaves [ 364.291361][T11963] bond3 (unregistering): Released all slaves [ 364.309819][T11963] bond4 (unregistering): Released all slaves [ 364.323847][T13795] debugfs: Directory 'netdev:nicvf0' with parent 'phy24' already present! [ 364.339420][T13793] debugfs: Directory 'netdev:nicvf0' with parent 'phy24' already present! [ 364.420520][T13813] netlink: 'syz.1.2189': attribute type 10 has an invalid length. [ 364.531365][T13813] batadv0: mtu greater than device maximum [ 364.547147][T13813] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 364.671790][T13815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2190'. [ 364.701138][T11963] Êü: left promiscuous mode [ 364.758914][T13801] lo speed is unknown, defaulting to 1000 [ 364.811272][T11963] tipc: Disabling bearer [ 364.831235][T11963] tipc: Left network mode [ 364.909154][T11963] IPVS: stopping backup sync thread 7678 ... [ 365.080021][T13841] lo speed is unknown, defaulting to 1000 [ 365.473285][ T5233] Bluetooth: hci6: command tx timeout [ 365.788003][T11963] hsr_slave_0: left promiscuous mode [ 365.797467][T11963] hsr_slave_1: left promiscuous mode [ 365.821657][T11963] vlan0: left promiscuous mode [ 365.826827][T11963] veth1_macvtap: left promiscuous mode [ 365.832861][T11963] veth0_macvtap: left promiscuous mode [ 365.839330][T11963] veth1_vlan: left promiscuous mode [ 365.847631][T11963] @ÿ: left promiscuous mode [ 366.025397][T11963] pim6reg (unregistering): left allmulticast mode [ 366.092963][T11963] pimreg (unregistering): left allmulticast mode [ 366.518772][T11963] batadv_slave_0 (unregistering): left allmulticast mode [ 367.138396][T13873] veth0_to_bridge: invalid flags given to default FDB implementation [ 367.323768][T13801] chnl_net:caif_netlink_parms(): no params data found [ 367.331892][T13881] sctp: [Deprecated]: syz.2.2209 (pid 13881) Use of int in maxseg socket option. [ 367.331892][T13881] Use struct sctp_assoc_value instead [ 367.561860][ T5233] Bluetooth: hci6: command tx timeout [ 368.006771][T13801] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.011471][T11963] IPVS: stop unused estimator thread 0... [ 368.021153][T13801] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.021685][T13912] __nla_validate_parse: 3 callbacks suppressed [ 368.021699][T13912] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2216'. [ 368.034469][T13801] bridge_slave_0: entered allmulticast mode [ 368.035803][T13801] bridge_slave_0: entered promiscuous mode [ 368.092037][T13801] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.099281][T13801] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.112574][T13801] bridge_slave_1: entered allmulticast mode [ 368.123428][T13801] bridge_slave_1: entered promiscuous mode [ 368.251155][T13801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.304569][T13801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.341806][T13923] netlink: 'syz.1.2220': attribute type 2 has an invalid length. [ 368.380137][T13801] team0: Port device team_slave_0 added [ 368.413649][T13801] team0: Port device team_slave_1 added [ 368.506084][T13801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.530013][T13801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.568850][T13801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.580984][T13935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2224'. [ 368.594334][T13801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.603281][T13801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.644586][T13801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.777517][T13801] hsr_slave_0: entered promiscuous mode [ 368.809118][T13801] hsr_slave_1: entered promiscuous mode [ 368.816778][T13801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 368.827860][T13801] Cannot create hsr debugfs directory [ 369.154573][T13947] netlink: 'syz.4.2228': attribute type 1 has an invalid length. [ 369.393810][T13960] netlink: 'syz.2.2232': attribute type 1 has an invalid length. [ 369.404820][T13934] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 369.416108][T13960] netlink: 646 bytes leftover after parsing attributes in process `syz.2.2232'. [ 369.516438][T13964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2234'. [ 369.640688][ T5233] Bluetooth: hci6: command tx timeout [ 369.684096][T13971] sctp: [Deprecated]: syz.1.2236 (pid 13971) Use of int in maxseg socket option. [ 369.684096][T13971] Use struct sctp_assoc_value instead [ 369.743023][T13801] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 369.774738][T13801] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 369.810157][T13801] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 369.838491][T13801] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 370.045241][T13801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.093226][T13801] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.115930][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.123136][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.169160][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.176366][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.525654][T13978] dummy0: entered promiscuous mode [ 370.563467][T13978] dummy0: left promiscuous mode [ 370.590772][ T5233] Bluetooth: hci3: command 0x0406 tx timeout [ 370.625774][T13988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2240'. [ 370.719709][T13988] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 370.769753][T13994] tipc: Started in network mode [ 370.795288][T13994] tipc: Node identity 20320a6274665f74, cluster identity 4711 [ 370.820523][T13994] tipc: Enabling of bearer rejected, failed to enable media [ 370.892107][T13801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.044354][T13801] veth0_vlan: entered promiscuous mode [ 371.057697][T14004] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2244'. [ 371.069621][T13801] veth1_vlan: entered promiscuous mode [ 371.090524][T14004] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2244'. [ 371.108805][T14006] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2245'. [ 371.166086][T13801] veth0_macvtap: entered promiscuous mode [ 371.204179][T13801] veth1_macvtap: entered promiscuous mode [ 371.266939][T14008] pim6reg: entered allmulticast mode [ 371.293223][T14011] pim6reg: left allmulticast mode [ 371.339968][T13801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.369096][T13801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.391393][T13801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.415080][T13801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.435511][T13801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.460702][T13801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.481499][T13801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.510529][T13801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.530331][T13801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.550583][T13801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.570357][T13801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.585553][T13801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.604074][T13801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.668185][T13801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.702611][T13801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.713184][T14016] netlink: 'syz.4.2249': attribute type 62 has an invalid length. [ 371.714076][ T5233] Bluetooth: hci6: command tx timeout [ 371.741530][T13801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.759668][T13801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.770731][T13801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.782322][T13801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.792473][T13801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.803680][T13801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.814855][T13801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.826649][T13801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.836985][T13801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.847803][T13801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.858448][T13801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.869746][T13801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.886856][T13801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.910803][T14017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2248'. [ 371.937060][T14019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2248'. [ 371.988250][T13801] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.017807][T13801] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.034022][T13801] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.050558][T13801] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.156130][T14034] vlan0: entered promiscuous mode [ 372.433610][ T8643] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.457934][ T8643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.517129][ T8643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.526242][ T8643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.675871][T14062] netlink: 'syz.2.2261': attribute type 3 has an invalid length. [ 372.706547][T14062] netlink: 'syz.2.2261': attribute type 3 has an invalid length. [ 372.744507][T14063] netlink: 'syz.4.2260': attribute type 10 has an invalid length. [ 372.785812][T14063] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 372.797498][T14062] debugfs: Directory 'netdev:nicvf0' with parent 'phy39' already present! [ 372.931830][T14072] netlink: 'syz.0.2264': attribute type 2 has an invalid length. [ 373.248661][T14086] netlink: 'syz.0.2267': attribute type 10 has an invalid length. [ 373.355072][T14096] IPVS: persistence engine module ip_vs_pe_@ not found [ 373.472776][T14059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.603743][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 374.212384][T14127] netlink: 'syz.4.2281': attribute type 6 has an invalid length. [ 374.716721][T14137] vxcan1: Master is either lo or non-ether device [ 374.815791][T14140] netlink: 'syz.1.2286': attribute type 4 has an invalid length. [ 374.955917][T14147] team0: Port device team_slave_1 removed [ 374.973644][T14147] __nla_validate_parse: 2 callbacks suppressed [ 374.973661][T14147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2288'. [ 375.271551][T11960] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.630631][T14171] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2292'. [ 375.913289][T14181] netlink: 'syz.0.2296': attribute type 309 has an invalid length. [ 375.928411][ T5226] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 375.939183][ T5226] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 375.949872][ T5226] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 375.958975][ T5226] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 375.990578][ T5226] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 375.999723][ T5226] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 376.045368][T14188] veth1_to_bridge: Caught tx_queue_len zero misconfig [ 376.169846][T14180] lo speed is unknown, defaulting to 1000 [ 376.376783][T11960] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.416035][T14204] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2300'. [ 376.634706][T11960] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.799639][T11960] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.244793][T11960] bridge_slave_1: left allmulticast mode [ 377.253591][T11960] bridge_slave_1: left promiscuous mode [ 377.259407][T11960] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.279722][T11960] bridge_slave_0: left allmulticast mode [ 377.285678][T11960] bridge_slave_0: left promiscuous mode [ 377.291998][T11960] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.030541][ T5233] Bluetooth: hci6: command tx timeout [ 378.093808][T11960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.107043][T11960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.124160][T11960] bond0 (unregistering): Released all slaves [ 378.154071][T14235] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2307'. [ 378.442827][T14255] bridge4: entered allmulticast mode [ 378.582925][T14180] chnl_net:caif_netlink_parms(): no params data found [ 378.704085][T14260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2313'. [ 378.923656][T14263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2313'. [ 379.026237][T14266] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2315'. [ 379.036730][T14266] netlink: 'syz.1.2315': attribute type 7 has an invalid length. [ 379.046359][T14266] netlink: 'syz.1.2315': attribute type 8 has an invalid length. [ 379.057579][T14266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2315'. [ 379.073848][T14266] erspan0: entered promiscuous mode [ 379.080958][T14266] batadv_slave_1: entered promiscuous mode [ 379.091192][T14266] erspan0: left promiscuous mode [ 379.149216][T14266] batadv_slave_1: left promiscuous mode [ 379.207791][T11960] hsr_slave_0: left promiscuous mode [ 379.221081][T11960] hsr_slave_1: left promiscuous mode [ 379.241155][T11960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.249745][T11960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.281976][T11960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.290159][T11960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.352245][T11960] veth1_macvtap: left promiscuous mode [ 379.371448][T11960] veth0_macvtap: left promiscuous mode [ 379.383367][T11960] veth1_vlan: left promiscuous mode [ 379.389061][T11960] veth0_vlan: left promiscuous mode [ 380.120627][ T5233] Bluetooth: hci6: command tx timeout [ 380.213091][T11960] team0 (unregistering): Port device team_slave_1 removed [ 380.275219][T11960] team0 (unregistering): Port device team_slave_0 removed [ 381.055647][T14180] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.080738][T14180] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.088791][T14180] bridge_slave_0: entered allmulticast mode [ 381.101564][T14180] bridge_slave_0: entered promiscuous mode [ 381.131196][T14180] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.172118][T14180] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.179412][T14180] bridge_slave_1: entered allmulticast mode [ 381.213670][T14180] bridge_slave_1: entered promiscuous mode [ 381.383472][T14180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.482641][T14180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.633729][T14180] team0: Port device team_slave_0 added [ 381.673941][T14180] team0: Port device team_slave_1 added [ 381.769366][T14301] lo speed is unknown, defaulting to 1000 [ 381.777110][T14180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.789599][T14180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.817184][T14180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.844227][T14180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.858609][T14180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.915089][T14180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.116137][T14180] hsr_slave_0: entered promiscuous mode [ 382.152198][T14180] hsr_slave_1: entered promiscuous mode [ 382.172058][T14180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.179664][T14180] Cannot create hsr debugfs directory [ 382.190839][ T5233] Bluetooth: hci6: command tx timeout [ 382.198625][T14318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2326'. [ 382.519155][T14324] netlink: 'syz.2.2328': attribute type 10 has an invalid length. [ 383.278920][T14180] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 383.342120][T14180] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 383.363452][T14180] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 383.413177][T14180] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 383.420605][ C1] hrtimer: interrupt took 604387 ns [ 383.641439][T14360] lo speed is unknown, defaulting to 1000 [ 383.731223][T14180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.797131][T14180] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.837733][ T8643] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.844965][ T8643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.898123][T11681] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.905366][T11681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.270526][ T5233] Bluetooth: hci6: command tx timeout [ 384.677724][T14180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.881758][T14381] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 384.932871][T14180] veth0_vlan: entered promiscuous mode [ 384.993226][T14180] veth1_vlan: entered promiscuous mode [ 385.071998][T14384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2344'. [ 385.217804][T14180] veth0_macvtap: entered promiscuous mode [ 385.267911][T14180] veth1_macvtap: entered promiscuous mode [ 385.531482][T14180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.580578][T14180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.612760][T14395] Dead loop on virtual device ipvlan1, fix it urgently! [ 385.619112][T14180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.648847][T14180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.670174][T14180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.682081][T14180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.692502][T14180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.705939][T14180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.716689][T14180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.728759][T14180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.739233][T14180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.751019][T14180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.764878][T14180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.849750][T14180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.893642][T14180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.927064][T14180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.951509][T14180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.984716][T14180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.007522][T14180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.024098][T14180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.037305][T14180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.048492][T14180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.059886][T14180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.070641][T14180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.084595][T14180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.094756][T14180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.105324][T14180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.118524][T14180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.176407][T14180] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.203553][T14180] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.231607][T14180] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.242304][T14180] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.420107][T11682] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.434976][T11682] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.480950][T11960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.489508][T11960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.742923][T14414] geneve2: entered promiscuous mode [ 386.748187][T14414] geneve2: entered allmulticast mode [ 387.193994][T14421] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.222525][ T5226] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 387.238751][ T5226] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 387.249004][ T5226] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 387.272105][ T5226] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 387.282272][ T5226] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 387.291238][ T5226] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 387.385520][T14424] lo speed is unknown, defaulting to 1000 [ 387.859388][T14424] chnl_net:caif_netlink_parms(): no params data found [ 388.050905][T14424] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.059291][T14424] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.067424][T14424] bridge_slave_0: entered allmulticast mode [ 388.076081][T14424] bridge_slave_0: entered promiscuous mode [ 388.085477][T14424] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.092849][T14424] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.100136][T14424] bridge_slave_1: entered allmulticast mode [ 388.110121][T14424] bridge_slave_1: entered promiscuous mode [ 388.151232][T14424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.168275][T14424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.237891][T14424] team0: Port device team_slave_0 added [ 388.249103][T14424] team0: Port device team_slave_1 added [ 388.286840][T14424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.294284][T14424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.322659][T14424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.335828][T14424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.343364][T14424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.373338][T14424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.423993][T14424] hsr_slave_0: entered promiscuous mode [ 388.432697][T14424] hsr_slave_1: entered promiscuous mode [ 388.439017][T14424] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 388.446852][T14424] Cannot create hsr debugfs directory [ 388.635079][T14424] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.647703][T14424] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 388.792272][T11682] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.877748][T14424] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.889220][T14424] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 389.042921][T14424] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.053397][T14424] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 389.129177][T14424] bond0: (slave netdevsim0): Releasing backup interface [ 389.142422][ T5233] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 389.153420][T14424] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.166375][ T5233] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 389.167985][ T5233] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 389.169051][ T5233] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 389.192953][ T5238] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 389.196801][T14424] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 389.211172][ T5238] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 389.277179][T14434] lo speed is unknown, defaulting to 1000 [ 389.311084][ T5226] Bluetooth: hci6: command tx timeout [ 389.391863][T11682] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.505568][T11682] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.538735][T14424] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 389.551853][T14424] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 389.586492][T14424] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 389.621400][T11682] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.642568][T14424] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 389.920053][T11682] bridge_slave_1: left allmulticast mode [ 389.926131][T11682] bridge_slave_1: left promiscuous mode [ 389.934047][T11682] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.945411][T11682] bridge_slave_0: left allmulticast mode [ 389.953802][T11682] bridge_slave_0: left promiscuous mode [ 389.960814][T11682] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.489679][T11682] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.511291][T11682] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.525653][T11682] bond0 (unregistering): Released all slaves [ 390.559909][T14434] chnl_net:caif_netlink_parms(): no params data found [ 390.625683][T14424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.772249][T14424] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.793039][T14434] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.800475][T14434] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.808215][T14434] bridge_slave_0: entered allmulticast mode [ 390.817294][T14434] bridge_slave_0: entered promiscuous mode [ 390.832440][T14434] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.841354][T14434] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.849325][T14434] bridge_slave_1: entered allmulticast mode [ 390.857902][T14434] bridge_slave_1: entered promiscuous mode [ 390.872714][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.879852][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.930608][ T2504] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.938348][ T2504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.998042][T14434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.043951][T14434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.230755][ T5226] Bluetooth: hci4: command 0x0406 tx timeout [ 391.264636][T14434] team0: Port device team_slave_0 added [ 391.290211][T14434] team0: Port device team_slave_1 added [ 391.317619][ T5233] Bluetooth: hci8: command tx timeout [ 391.341739][T11682] hsr_slave_0: left promiscuous mode [ 391.347963][T11682] hsr_slave_1: left promiscuous mode [ 391.354446][T11682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.362191][T11682] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.370625][T11682] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.378056][T11682] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.390993][ T5233] Bluetooth: hci6: command tx timeout [ 391.411472][T11682] veth1_macvtap: left promiscuous mode [ 391.417039][T11682] veth0_macvtap: left promiscuous mode [ 391.422775][T11682] veth1_vlan: left promiscuous mode [ 391.428123][T11682] veth0_vlan: left promiscuous mode [ 392.132075][T11682] team0 (unregistering): Port device team_slave_1 removed [ 392.199810][T11682] team0 (unregistering): Port device team_slave_0 removed [ 392.864096][T14434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.886823][T14434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.917772][T14434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.951686][T14434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.958731][T14434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.986386][T14434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.154575][T14434] hsr_slave_0: entered promiscuous mode [ 393.164967][T14434] hsr_slave_1: entered promiscuous mode [ 393.175424][T14434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 393.184005][T14434] Cannot create hsr debugfs directory [ 393.391324][ T5233] Bluetooth: hci8: command tx timeout [ 393.417512][T14424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.470788][ T5233] Bluetooth: hci6: command tx timeout [ 393.689612][T14424] veth0_vlan: entered promiscuous mode [ 393.728168][T14424] veth1_vlan: entered promiscuous mode [ 393.781268][T14456] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2356'. [ 393.880170][T14452] delete_channel: no stack [ 393.894725][T14424] veth0_macvtap: entered promiscuous mode [ 393.912217][T14452] delete_channel: no stack [ 393.963353][T14424] veth1_macvtap: entered promiscuous mode [ 394.075756][T14424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.111870][T14424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.132539][T14424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.164045][T14424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.190658][T14424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.217929][T14424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.238444][T14424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.249077][T14424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.264225][T14424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.282698][T14424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.293048][T14424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.307814][T14424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.325447][T14424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.383448][T14424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.395811][T14424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.408126][T14424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.421191][T14424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.443870][T14424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.455609][T14424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.467523][T14424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.480798][T14424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.507816][T14424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.530303][T14424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.543417][T14424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.554970][T14424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.570419][T14424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.581374][T14424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.593449][T14424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.643432][T14424] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.668088][T14424] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.677468][T14424] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.698327][T14424] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.916230][T14434] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 394.939357][T14434] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 394.991401][T14434] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 395.042807][T14434] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 395.135640][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.154328][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.192010][T14501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2369'. [ 395.272760][T11681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.301855][T11681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.363934][T14503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2369'. [ 395.470518][ T5233] Bluetooth: hci8: command tx timeout [ 395.547228][T14434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.559592][ T5233] Bluetooth: hci6: command tx timeout [ 395.668704][T14434] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.749918][T11682] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.757701][T11682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.814851][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.822803][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.978137][T14517] xt_hashlimit: max too large, truncated to 1048576 [ 396.280629][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 396.423435][T14541] siw: device registration error -23 [ 396.498619][T14434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.624972][T14434] veth0_vlan: entered promiscuous mode [ 396.650757][T14434] veth1_vlan: entered promiscuous mode [ 396.713701][T14434] veth0_macvtap: entered promiscuous mode [ 396.747300][T14434] veth1_macvtap: entered promiscuous mode [ 396.806878][T14434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.836050][T14434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.861950][T14434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.873420][T14434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.883772][T14434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.895816][T14434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.914035][T14434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.934126][T14434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.947797][T14434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.964573][T14434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.975446][T14434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.991880][T14434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.003113][T14434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.020003][T14434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.039222][T14434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.100902][T14434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.148311][T14434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.170007][T14434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.192459][T14434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.207711][T14434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.219174][T14434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.237976][T14434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.249857][T14434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.261790][T14434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.275205][T14434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.285623][T14434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.298053][T14434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.310641][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 397.319831][T14434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.340397][T14434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.360353][T14434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.371587][T14434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.399355][T14434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.493219][T14570] lo speed is unknown, defaulting to 1000 [ 397.507886][T14434] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.519644][T14434] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.529156][T14434] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.541027][T14434] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.550862][ T5233] Bluetooth: hci8: command tx timeout [ 397.789819][T11682] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.820022][T11682] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.968389][T11960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.020404][T11960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.130972][T14595] netlink: 2124 bytes leftover after parsing attributes in process `syz.1.2392'. [ 398.152322][T14599] atomic_op ffff888024728198 conn xmit_atomic 0000000000000000 [ 398.350601][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 398.432684][T14608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2395'. [ 398.436037][T14609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2395'. [ 398.774292][T14572] lo speed is unknown, defaulting to 1000 [ 399.065914][T14634] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2401'. [ 399.341300][T14641] netlink: 'syz.0.2403': attribute type 2 has an invalid length. [ 399.382622][T14641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2403'. [ 399.406414][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 399.563648][T14647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2405'. [ 399.599465][T14647] netlink: zone id is out of range [ 399.610371][T14647] netlink: del zone limit has 8 unknown bytes [ 400.440461][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 400.585665][T14655] lo speed is unknown, defaulting to 1000 [ 400.696568][T14663] lo speed is unknown, defaulting to 1000 [ 400.734211][T14660] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2408'. [ 400.802207][T14660] openvswitch: netlink: VXLAN extension message has 13 unknown bytes. [ 401.480449][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 401.999534][T14689] sctp: [Deprecated]: syz.0.2416 (pid 14689) Use of int in maxseg socket option. [ 401.999534][T14689] Use struct sctp_assoc_value instead [ 402.057727][T14689] netlink: 184472 bytes leftover after parsing attributes in process `syz.0.2416'. [ 402.223492][T14697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2417'. [ 402.250124][T14697] netlink: 'syz.1.2417': attribute type 15 has an invalid length. [ 402.344955][T14697] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.357329][T14697] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.369734][T14697] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.383103][T14697] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.425515][T14697] vxlan0: entered promiscuous mode [ 402.510549][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 402.646892][T11681] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.759913][ T5226] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 402.772695][ T5226] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 402.785203][ T5226] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 402.805705][ T5226] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 402.834181][ T5226] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 402.843543][ T5226] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 402.858420][T11681] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.991908][T11681] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.036978][T14714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2421'. [ 403.109280][T14709] lo speed is unknown, defaulting to 1000 [ 403.216052][T11681] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.276206][T14718] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2423'. [ 403.356128][T14726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2424'. [ 403.550416][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 403.551620][T14733] netlink: 'syz.0.2426': attribute type 1 has an invalid length. [ 403.788430][T11681] bridge_slave_1: left allmulticast mode [ 403.803371][T11681] bridge_slave_1: left promiscuous mode [ 403.809804][T11681] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.843669][T14746] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2431'. [ 403.891441][T11681] bridge_slave_0: left allmulticast mode [ 403.897766][T11681] bridge_slave_0: left promiscuous mode [ 403.907573][T11681] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.600448][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 404.701727][T11681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.714456][T11681] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.729435][T11681] bond0 (unregistering): Released all slaves [ 404.765142][T14748] tipc: Started in network mode [ 404.790724][T14748] tipc: Node identity ac1414aa, cluster identity 4711 [ 404.862442][T14748] tipc: Enabled bearer , priority 10 [ 404.921146][ T5226] Bluetooth: hci8: command tx timeout [ 405.359070][T14785] __nla_validate_parse: 2 callbacks suppressed [ 405.359089][T14785] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2439'. [ 405.599785][T14797] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2443'. [ 405.630467][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 405.642557][T14794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2442'. [ 405.750624][T14793] syzkaller0: entered promiscuous mode [ 405.789466][T14797] netlink: 'syz.0.2443': attribute type 8 has an invalid length. [ 405.830741][ T46] tipc: Node number set to 2886997162 [ 406.299048][T14786] syzkaller0: left promiscuous mode [ 406.342627][T14812] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 406.404936][T14812] tipc: Enabled bearer , priority 10 [ 406.587628][T11681] hsr_slave_0: left promiscuous mode [ 406.651440][T11681] hsr_slave_1: left promiscuous mode [ 406.674791][T11681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.683018][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 406.689668][T14824] netlink: 5300 bytes leftover after parsing attributes in process `syz.4.2449'. [ 406.704316][T11681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.708467][T14824] openvswitch: netlink: IP tunnel dst address not specified [ 406.725116][T11681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.740299][T11681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.832869][T11681] veth1_macvtap: left promiscuous mode [ 406.851940][T11681] veth0_macvtap: left promiscuous mode [ 406.858222][T11681] veth1_vlan: left promiscuous mode [ 406.880551][T11681] veth0_vlan: left promiscuous mode [ 407.002526][ T5226] Bluetooth: hci8: command tx timeout [ 407.720878][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 407.828271][T11681] team0 (unregistering): Port device team_slave_1 removed [ 407.885460][T11681] team0 (unregistering): Port device team_slave_0 removed [ 408.546099][T14820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2448'. [ 408.705363][T14709] chnl_net:caif_netlink_parms(): no params data found [ 408.760506][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 408.915534][T14851] netlink: 'syz.0.2456': attribute type 32 has an invalid length. [ 408.954488][T14849] bond0: entered promiscuous mode [ 408.970307][T14849] bond_slave_0: entered promiscuous mode [ 408.976842][T14849] bond_slave_1: entered promiscuous mode [ 409.005317][T14857] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2458'. [ 409.009238][T14851] dummy0: entered promiscuous mode [ 409.025893][T14851] vlan0: entered promiscuous mode [ 409.047773][T14857] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2458'. [ 409.060200][T14851] dummy0: left promiscuous mode [ 409.080213][ T5226] Bluetooth: hci8: command tx timeout [ 409.187033][T14857] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2458'. [ 409.244201][T14846] bond0: left promiscuous mode [ 409.260364][T14846] bond_slave_0: left promiscuous mode [ 409.278038][T14846] bond_slave_1: left promiscuous mode [ 409.448801][T14709] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.474656][T14709] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.510775][T14709] bridge_slave_0: entered allmulticast mode [ 409.519445][T14709] bridge_slave_0: entered promiscuous mode [ 409.555039][T14709] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.580638][T14709] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.588578][T14709] bridge_slave_1: entered allmulticast mode [ 409.606008][T14709] bridge_slave_1: entered promiscuous mode [ 409.769180][T14709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.781810][T14885] netlink: 'syz.4.2466': attribute type 1 has an invalid length. [ 409.789944][T14885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2466'. [ 409.800562][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 409.812587][T14709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.020034][T14709] team0: Port device team_slave_0 added [ 410.063599][T14709] team0: Port device team_slave_1 added [ 410.087643][T14899] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2469'. [ 410.215199][T14709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.250436][T14709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.370958][T14709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.392566][T14915] __nla_validate_parse: 1 callbacks suppressed [ 410.392583][T14915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2472'. [ 410.412580][T14709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.425050][T14709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.453761][T14709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.502257][T14914] lo speed is unknown, defaulting to 1000 [ 410.680199][T14709] hsr_slave_0: entered promiscuous mode [ 410.690409][T14709] hsr_slave_1: entered promiscuous mode [ 410.702633][T14709] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 410.720703][T14709] Cannot create hsr debugfs directory [ 410.775795][T14924] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2476'. [ 410.830482][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 411.069444][T14936] xt_CT: You must specify a L4 protocol and not use inversions on it [ 411.150964][ T5226] Bluetooth: hci8: command tx timeout [ 411.285365][T14940] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2481'. [ 411.464808][T14947] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2483'. [ 411.644667][T14951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2483'. [ 411.870444][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 412.297707][T14709] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 412.326823][T14963] netlink: 'syz.1.2487': attribute type 4 has an invalid length. [ 412.377839][T14964] netlink: 'syz.1.2487': attribute type 4 has an invalid length. [ 412.416083][T14709] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 412.463376][T14709] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 412.514099][T14709] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 412.786548][T14709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.857600][T14709] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.902513][T11682] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.909726][T11682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.920413][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 412.961244][T11682] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.968419][T11682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.156540][T14983] mac80211_hwsim hwsim37 wlan1: entered allmulticast mode [ 413.238015][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.263915][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.402069][T14709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.522434][T14992] lo speed is unknown, defaulting to 1000 [ 413.537770][T14994] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2494'. [ 413.645306][T14709] veth0_vlan: entered promiscuous mode [ 413.677388][T14709] veth1_vlan: entered promiscuous mode [ 413.803051][T14709] veth0_macvtap: entered promiscuous mode [ 413.862307][T14709] veth1_macvtap: entered promiscuous mode [ 413.882718][T15003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2497'. [ 413.943790][T14709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.960587][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 413.998669][T14709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.030010][T14709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.062082][T14709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.095911][T14709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.113769][T14709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.124837][T14709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.136426][T14709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.146890][T14709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.178756][T14709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.203455][T14709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.229232][T14709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.259621][T14709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.281625][T14709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.299088][T14709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.361526][T14709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.403566][T14709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.434330][T14709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.459676][T14709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.480129][T14709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.501140][T14709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.529695][T14709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.554140][T14709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.570355][T14709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.620444][T14709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.660689][T14709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.687209][T14709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.713107][T14709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.759612][T14709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.791773][T14709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.817073][T14709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.864319][T14709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.990495][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 415.177868][T14709] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.216713][T14709] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.240431][T14709] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.280434][T14709] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.325212][T15031] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2504'. [ 415.356730][T15031] unsupported nlmsg_type 40 [ 415.434774][T15035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2504'. [ 416.040602][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 416.056796][T15051] netlink: 'syz.1.2508': attribute type 1 has an invalid length. [ 416.116847][T11681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.147300][T11681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.482253][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.508287][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.540419][T15062] netlink: 'syz.4.2510': attribute type 4 has an invalid length. [ 416.553880][T15062] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 416.637618][T15065] vlan0: entered promiscuous mode [ 416.660414][T15065] ip6gretap0: entered promiscuous mode [ 416.678699][T15065] team0: Port device vlan0 added [ 416.940730][T15076] netlink: 'syz.2.2515': attribute type 5 has an invalid length. [ 416.946995][T15075] netlink: 'syz.2.2515': attribute type 5 has an invalid length. [ 417.025422][T15076] : entered promiscuous mode [ 417.044131][T15075] openvswitch: : Dropping previously announced user features [ 417.070408][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 417.107482][T15079] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2516'. [ 417.939214][T15106] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2525'. [ 418.120431][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 418.376944][ T2504] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.604380][ T2504] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.726139][ T2504] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.845338][ T2504] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.023535][ T2504] bridge_slave_1: left allmulticast mode [ 419.029765][ T2504] bridge_slave_1: left promiscuous mode [ 419.037658][ T2504] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.049677][ T2504] bridge_slave_0: left allmulticast mode [ 419.071109][ T2504] bridge_slave_0: left promiscuous mode [ 419.077513][ T2504] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.150453][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 419.934738][ T5233] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 419.948091][ T5233] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 419.959467][ T5233] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 419.971982][ T5233] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 419.994172][ T5233] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 420.005931][ T5233] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 420.190457][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 420.420203][ T2504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.435256][ T2504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.468205][ T2504] bond0 (unregistering): Released all slaves [ 420.512434][ T30] INFO: task syz.2.1126:9924 blocked for more than 143 seconds. [ 420.534421][ T30] Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 420.550811][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 420.569801][ T30] task:syz.2.1126 state:D stack:26640 pid:9924 tgid:9923 ppid:6909 flags:0x00000004 [ 420.591143][ T30] Call Trace: [ 420.598493][ T30] [ 420.603812][ T30] __schedule+0x1800/0x4a60 [ 420.644179][ T30] ? __pfx___schedule+0x10/0x10 [ 420.649115][ T30] ? __pfx_lock_release+0x10/0x10 [ 420.691378][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 420.696921][ T30] ? schedule+0x90/0x320 [ 420.713483][ T30] schedule+0x14b/0x320 [ 420.717706][ T30] schedule_preempt_disabled+0x13/0x30 [ 420.740327][ T30] __mutex_lock+0x6a4/0xd70 [ 420.744888][ T30] ? __mutex_lock+0x527/0xd70 [ 420.749599][ T30] ? nfsd_nl_threads_get_doit+0x1c5/0x7c0 [ 420.769087][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 420.774532][ T30] ? genlmsg_put+0x145/0x2e0 [ 420.779154][ T30] nfsd_nl_threads_get_doit+0x1c5/0x7c0 [ 420.785205][ T30] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 420.791642][ T30] ? __asan_memcpy+0x40/0x70 [ 420.796305][ T30] ? genl_get_cmd+0x65d/0xbe0 [ 420.802505][ T30] ? dev_hard_start_xmit+0x773/0x7e0 [ 420.807823][ T30] genl_rcv_msg+0xb14/0xec0 [ 420.812608][ T30] ? mark_lock+0x9a/0x350 [ 420.816974][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 420.824910][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 420.830209][ T30] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 420.837748][ T30] ? __pfx___might_resched+0x10/0x10 [ 420.843715][ T30] netlink_rcv_skb+0x1e3/0x430 [ 420.848844][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 420.854047][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 420.859370][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 420.865163][ T30] genl_rcv+0x28/0x40 [ 420.869171][ T30] netlink_unicast+0x7f6/0x990 [ 420.874353][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 420.879673][ T30] ? __virt_addr_valid+0x183/0x530 [ 420.884875][ T30] ? __check_object_size+0x49c/0x900 [ 420.890181][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 420.895451][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 420.900395][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.905720][ T30] ? __import_iovec+0x536/0x820 [ 420.911086][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 420.916050][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 420.923389][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 420.932103][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.937425][ T30] __sock_sendmsg+0x221/0x270 [ 420.942217][ T30] ____sys_sendmsg+0x525/0x7d0 [ 420.947012][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 420.952514][ T30] __sys_sendmsg+0x2b0/0x3a0 [ 420.957124][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 420.962405][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 420.968752][ T30] ? do_syscall_64+0x100/0x230 [ 420.973600][ T30] ? do_syscall_64+0xb6/0x230 [ 420.978306][ T30] do_syscall_64+0xf3/0x230 [ 420.983014][ T30] ? clear_bhb_loop+0x35/0x90 [ 420.987892][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.996804][ T30] RIP: 0033:0x7f7a7b37def9 [ 421.001416][ T30] RSP: 002b:00007f7a7c0f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.009896][ T30] RAX: ffffffffffffffda RBX: 00007f7a7b535f80 RCX: 00007f7a7b37def9 [ 421.017985][ T30] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 421.026163][ T30] RBP: 00007f7a7b3f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 421.036821][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.046200][ T30] R13: 0000000000000000 R14: 00007f7a7b535f80 R15: 00007ffd70a39988 [ 421.054292][ T30] [ 421.057354][ T30] INFO: task syz.4.1151:10003 blocked for more than 143 seconds. [ 421.074427][ T30] Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 421.094996][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 421.107490][ T30] task:syz.4.1151 state:D stack:23800 pid:10003 tgid:10002 ppid:7743 flags:0x00000004 [ 421.117769][ T30] Call Trace: [ 421.121212][ T30] [ 421.124166][ T30] __schedule+0x1800/0x4a60 [ 421.128712][ T30] ? __pfx___schedule+0x10/0x10 [ 421.136008][ T30] ? __pfx_lock_release+0x10/0x10 [ 421.141584][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 421.147407][ T30] ? schedule+0x90/0x320 [ 421.153935][ T30] schedule+0x14b/0x320 [ 421.158135][ T30] schedule_preempt_disabled+0x13/0x30 [ 421.163737][ T30] __mutex_lock+0x6a4/0xd70 [ 421.168264][ T30] ? __mutex_lock+0x527/0xd70 [ 421.175044][ T30] ? nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 421.181080][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 421.186117][ T30] ? __asan_memset+0x23/0x50 [ 421.190894][ T30] ? netlink_unicast+0x7f6/0x990 [ 421.195851][ T30] ? netlink_sendmsg+0x8e4/0xcb0 [ 421.200904][ T30] ? __sock_sendmsg+0x221/0x270 [ 421.205775][ T30] ? __sys_sendmsg+0x2b0/0x3a0 [ 421.210669][ T30] nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 421.216418][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 421.222254][ T30] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 421.228445][ T30] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 421.240002][ T30] ? __nla_parse+0x40/0x60 [ 421.244990][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 421.255008][ T30] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 421.262091][ T30] genl_rcv_msg+0xb14/0xec0 [ 421.266889][ T30] ? mark_lock+0x9a/0x350 [ 421.271784][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 421.277304][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 421.282747][ T30] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 421.289271][ T30] ? __pfx___might_resched+0x10/0x10 [ 421.295091][ T30] netlink_rcv_skb+0x1e3/0x430 [ 421.300768][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 421.306142][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 421.312116][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 421.317627][ T30] genl_rcv+0x28/0x40 [ 421.321950][ T30] netlink_unicast+0x7f6/0x990 [ 421.326770][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 421.332209][ T30] ? __virt_addr_valid+0x183/0x530 [ 421.339146][ T30] ? __check_object_size+0x49c/0x900 [ 421.344632][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 421.349775][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 421.354778][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.360107][ T30] ? __import_iovec+0x536/0x820 [ 421.365077][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 421.372635][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 421.377956][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 421.383526][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.388932][ T30] __sock_sendmsg+0x221/0x270 [ 421.394008][ T30] ____sys_sendmsg+0x525/0x7d0 [ 421.398902][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 421.404816][ T30] __sys_sendmsg+0x2b0/0x3a0 [ 421.409459][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 421.415379][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 421.422073][ T30] ? do_syscall_64+0x100/0x230 [ 421.426868][ T30] ? do_syscall_64+0xb6/0x230 [ 421.432166][ T30] do_syscall_64+0xf3/0x230 [ 421.438319][ T30] ? clear_bhb_loop+0x35/0x90 [ 421.443577][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.449502][ T30] RIP: 0033:0x7fa03257def9 [ 421.454059][ T30] RSP: 002b:00007fa031fff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.462774][ T30] RAX: ffffffffffffffda RBX: 00007fa032735f80 RCX: 00007fa03257def9 [ 421.471004][ T30] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000008 [ 421.479080][ T30] RBP: 00007fa0325f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 421.487616][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.497362][ T30] R13: 0000000000000000 R14: 00007fa032735f80 R15: 00007ffecd14bad8 [ 421.505913][ T30] [ 421.509050][ T30] [ 421.509050][ T30] Showing all locks held in the system: [ 421.519732][ T30] 1 lock held by khungtaskd/30: [ 421.525476][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 421.542718][ T30] 3 locks held by kworker/1:1/46: [ 421.548229][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 421.560833][ T30] #1: ffffc90000b67d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 421.572931][ T30] #2: ffffffff8fc88588 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 421.584283][ T30] 4 locks held by kworker/u8:8/2504: [ 421.590070][ T30] #0: ffff88801bae5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 421.604512][ T30] #1: ffffc90009727d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 421.616678][ T30] #2: ffffffff8fc7ba90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 421.627523][ T30] #3: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 421.640058][ T30] 2 locks held by getty/4983: [ 421.647119][ T30] #0: ffff888030a320a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 421.658675][ T30] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 421.690403][ T30] 4 locks held by kworker/0:5/5280: [ 421.696134][ T30] 3 locks held by kworker/0:7/5358: [ 421.720339][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 421.760304][ T30] #1: ffffc900044c7d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 421.771913][ T30] #2: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 421.784953][ T30] 2 locks held by syz.4.465/7570: [ 421.794865][ T30] #0: ffffffff8fcee2b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 421.804479][ T30] #1: ffffffff8ec0b768 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 421.816422][ T30] 2 locks held by syz.2.1126/9924: [ 421.830308][ T30] #0: ffffffff8fcee2b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 421.839334][ T30] #1: ffffffff8ec0b768 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_threads_get_doit+0x1c5/0x7c0 [ 421.853099][ T30] 2 locks held by syz.4.1151/10003: [ 421.858798][ T30] #0: ffffffff8fcee2b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 421.868568][ T30] #1: ffffffff8ec0b768 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 421.880164][ T30] 3 locks held by kworker/u8:11/11681: [ 421.886121][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 421.898706][ T30] #1: ffffc9000300fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 421.910761][ T30] #2: ffffffff8fc88588 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 421.920419][ T30] 3 locks held by kworker/u8:12/11682: [ 421.926386][ T30] #0: ffff88802fff0948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 421.938708][ T30] #1: ffffc9000307fd00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 421.956144][ T30] #2: ffffffff8fc88588 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 421.965806][ T30] 2 locks held by syz.4.2301/14209: [ 421.971296][ T30] #0: ffffffff8fcee2b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 421.979533][ T30] #1: ffffffff8ec0b768 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 421.989920][ T30] 1 lock held by syz.1.2528/15131: [ 421.995344][ T30] #0: ffffffff8fc88588 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 422.005346][ T30] 1 lock held by syz.4.2531/15133: [ 422.011030][ T30] #0: ffffffff8fc88588 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x706/0x1340 [ 422.020502][ T30] 1 lock held by syz-executor/15135: [ 422.025803][ T30] #0: ffffffff8fc88588 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 422.038530][ T30] 4 locks held by syz.0.2532/15138: [ 422.045440][ T30] #0: ffffffff8fcee2b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 422.055390][ T30] #1: ffff888032f256c8 (nlk_cb_mutex-GENERIC){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x790 [ 422.066559][ T30] #2: ffffffff8fcee168 (genl_mutex){+.+.}-{3:3}, at: genl_dumpit+0xd6/0x1a0 [ 422.076445][ T30] #3: ffffffff8fc88588 (rtnl_mutex){+.+.}-{3:3}, at: nl802154_prepare_wpan_dev_dump+0x4b/0x460 [ 422.087796][ T30] [ 422.111158][ T5226] Bluetooth: hci8: command tx timeout [ 422.117635][ T30] ============================================= [ 422.117635][ T30] [ 422.135303][ T30] NMI backtrace for cpu 0 [ 422.139674][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 422.149842][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 422.160006][ T30] Call Trace: [ 422.163302][ T30] [ 422.166246][ T30] dump_stack_lvl+0x241/0x360 [ 422.170948][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.176170][ T30] ? __pfx__printk+0x10/0x10 [ 422.180781][ T30] ? vprintk_emit+0x667/0x7c0 [ 422.185475][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 422.190519][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 422.195474][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 422.200939][ T30] ? _printk+0xd5/0x120 [ 422.205100][ T30] ? __pfx__printk+0x10/0x10 [ 422.209688][ T30] ? __wake_up_klogd+0xcc/0x110 [ 422.214633][ T30] ? __pfx__printk+0x10/0x10 [ 422.219241][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 422.224270][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 422.230279][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 422.236271][ T30] watchdog+0xff4/0x1040 [ 422.240516][ T30] ? watchdog+0x1ea/0x1040 [ 422.244939][ T30] ? __pfx_watchdog+0x10/0x10 [ 422.249611][ T30] kthread+0x2f0/0x390 [ 422.253678][ T30] ? __pfx_watchdog+0x10/0x10 [ 422.258362][ T30] ? __pfx_kthread+0x10/0x10 [ 422.262972][ T30] ret_from_fork+0x4b/0x80 [ 422.267406][ T30] ? __pfx_kthread+0x10/0x10 [ 422.272007][ T30] ret_from_fork_asm+0x1a/0x30 [ 422.276788][ T30] [ 422.280406][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 422.284221][ T30] Sending NMI from CPU 0 to CPUs 1: [ 422.293412][ C1] NMI backtrace for cpu 1 [ 422.293425][ C1] CPU: 1 UID: 0 PID: 15138 Comm: syz.0.2532 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 422.293444][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 422.293453][ C1] RIP: 0010:__lock_acquire+0x44d/0x2040 [ 422.293478][ C1] Code: 00 00 00 00 0f 95 c0 31 c9 83 3f 00 0f 95 c1 09 cb c1 e3 0d 44 09 c3 8b 4c 24 54 c1 e1 0f 0f b7 c9 09 d9 8b 7c 24 68 83 e7 03 e7 10 09 cf 8b 4c 24 60 83 e1 01 c1 e1 12 c1 e0 14 31 d2 83 7c [ 422.293492][ C1] RSP: 0018:ffffc90002f2f050 EFLAGS: 00000002 [ 422.293507][ C1] RAX: 0000000000000000 RBX: 0000000000000021 RCX: 0000000000000021 [ 422.293517][ C1] RDX: 0000000000000003 RSI: dffffc0000000000 RDI: 0000000000000002 [ 422.293528][ C1] RBP: 000000000000000f R08: 0000000000000021 R09: ffff888030a528e0 [ 422.293539][ C1] R10: dffffc0000000000 R11: fffffbfff203061e R12: ffff888030a51e00 [ 422.293551][ C1] R13: 0000000000000021 R14: 0000000000000000 R15: ffffffff8e938320 [ 422.293562][ C1] FS: 0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 422.293575][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 422.293587][ C1] CR2: 00007f700a53b000 CR3: 000000000e734000 CR4: 00000000003506f0 [ 422.293601][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 422.293611][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 422.293626][ C1] Call Trace: [ 422.293633][ C1] [ 422.293639][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 422.293658][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 422.293678][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 422.293703][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 422.293721][ C1] ? nmi_handle+0x14f/0x5a0 [ 422.293736][ C1] ? nmi_handle+0x2a/0x5a0 [ 422.293752][ C1] ? __lock_acquire+0x44d/0x2040 [ 422.293769][ C1] ? default_do_nmi+0x63/0x160 [ 422.293786][ C1] ? exc_nmi+0x123/0x1f0 [ 422.293802][ C1] ? end_repeat_nmi+0xf/0x53 [ 422.293825][ C1] ? __lock_acquire+0x44d/0x2040 [ 422.293843][ C1] ? __lock_acquire+0x44d/0x2040 [ 422.293863][ C1] ? __lock_acquire+0x44d/0x2040 [ 422.293881][ C1] [ 422.293886][ C1] [ 422.293900][ C1] lock_acquire+0x1ed/0x550 [ 422.293917][ C1] ? page_ext_get+0x20/0x2a0 [ 422.293940][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 422.293958][ C1] ? pfn_valid+0xf6/0x450 [ 422.293976][ C1] ? __pfx_lock_release+0x10/0x10 [ 422.293998][ C1] ? __lruvec_stat_mod_folio+0x7d/0x300 [ 422.294015][ C1] ? page_ext_get+0x20/0x2a0 [ 422.294032][ C1] page_ext_get+0x3d/0x2a0 [ 422.294049][ C1] ? page_ext_get+0x20/0x2a0 [ 422.294067][ C1] page_table_check_clear+0x4b/0x550 [ 422.294088][ C1] unmap_page_range+0x2b48/0x42c0 [ 422.294120][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 422.294143][ C1] ? mas_next_slot+0xeab/0xf90 [ 422.294164][ C1] ? uprobe_munmap+0x183/0x460 [ 422.294182][ C1] ? unmap_single_vma+0x1bd/0x2b0 [ 422.294207][ C1] unmap_vmas+0x3cc/0x5f0 [ 422.294227][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 422.294252][ C1] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 422.294272][ C1] exit_mmap+0x264/0xc80 [ 422.294289][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 422.294303][ C1] ? __asan_memset+0x23/0x50 [ 422.294332][ C1] ? uprobe_clear_state+0x277/0x290 [ 422.294347][ C1] ? mm_update_next_owner+0xa4/0x810 [ 422.294361][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 422.294380][ C1] __mmput+0x115/0x390 [ 422.294398][ C1] exit_mm+0x220/0x310 [ 422.294413][ C1] ? __pfx_exit_mm+0x10/0x10 [ 422.294427][ C1] ? taskstats_exit+0x326/0xa60 [ 422.294450][ C1] do_exit+0x9b2/0x27f0 [ 422.294468][ C1] ? __pfx_do_exit+0x10/0x10 [ 422.294482][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 422.294500][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 422.294520][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 422.294538][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 422.294560][ C1] do_group_exit+0x207/0x2c0 [ 422.294574][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 422.294591][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 422.294611][ C1] get_signal+0x16a1/0x1740 [ 422.294636][ C1] ? __pfx_get_signal+0x10/0x10 [ 422.294657][ C1] arch_do_signal_or_restart+0x96/0x860 [ 422.294677][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 422.294695][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 422.294719][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 422.294740][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 422.294761][ C1] do_syscall_64+0x100/0x230 [ 422.294781][ C1] ? clear_bhb_loop+0x35/0x90 [ 422.294799][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.294815][ C1] RIP: 0033:0x7fecb5d7def9 [ 422.294828][ C1] Code: Unable to access opcode bytes at 0x7fecb5d7decf. [ 422.294836][ C1] RSP: 002b:00007fecb6c03038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 422.294851][ C1] RAX: 0000000000000020 RBX: 00007fecb5f35f80 RCX: 00007fecb5d7def9 [ 422.294862][ C1] RDX: 0000000020008840 RSI: 0000000020000600 RDI: 0000000000000005 [ 422.294873][ C1] RBP: 00007fecb5df0b76 R08: 0000000000000000 R09: 0000000000000000 [ 422.294883][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.294892][ C1] R13: 0000000000000000 R14: 00007fecb5f35f80 R15: 00007ffe4204b158 [ 422.294910][ C1] [ 422.851095][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 422.857982][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 422.868150][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 422.878221][ T30] Call Trace: [ 422.881512][ T30] [ 422.884453][ T30] dump_stack_lvl+0x241/0x360 [ 422.889152][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.894734][ T30] ? __pfx__printk+0x10/0x10 [ 422.899312][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 422.905293][ T30] ? vscnprintf+0x5d/0x90 [ 422.909627][ T30] panic+0x349/0x860 [ 422.913526][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 422.919686][ T30] ? __pfx_panic+0x10/0x10 [ 422.924098][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 422.929473][ T30] ? __irq_work_queue_local+0x137/0x410 [ 422.935097][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 422.940460][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 422.946624][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 422.952789][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 422.958941][ T30] watchdog+0x1033/0x1040 [ 422.963267][ T30] ? watchdog+0x1ea/0x1040 [ 422.967766][ T30] ? __pfx_watchdog+0x10/0x10 [ 422.972439][ T30] kthread+0x2f0/0x390 [ 422.976513][ T30] ? __pfx_watchdog+0x10/0x10 [ 422.981183][ T30] ? __pfx_kthread+0x10/0x10 [ 422.985769][ T30] ret_from_fork+0x4b/0x80 [ 422.990177][ T30] ? __pfx_kthread+0x10/0x10 [ 422.994760][ T30] ret_from_fork_asm+0x1a/0x30 [ 422.999525][ T30] [ 423.002762][ T30] Kernel Offset: disabled [ 423.007615][ T30] Rebooting in 86400 seconds..