last executing test programs: 1m16.124482499s ago: executing program 0 (id=698): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) r3 = socket$packet(0x11, 0x2, 0x300) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x124, 0x30, 0x1, 0x0, 0x0, {}, [{0x110, 0x1, [@m_ife={0x10c, 0x14, 0x0, 0x0, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x7fff}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffff7, 0x7fff, 0x0, 0x4, 0x1000}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xffffffeb, 0x80000001, 0x10000000, 0x3}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x26e0bdfb, 0x8001, 0x3, 0x6, 0x8}}}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1000, 0x1aa5, 0x7, 0xc3, 0x3}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x7}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x37, 0x6, "09a5730c3d00898785566850853f88dbeb093991c4a61e5bc35396b3a19643331945684587dea61c8c1fe64f730e1017293e03"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x15}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xcc}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_emit_ethernet(0x42, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb08ff070186dd06100008aaaaaaaaaa1bfc020000000000000000000000000000b6d0832c34ae00000000000000000c00000000000000"], 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c00000019000500000000000000000080200000000400050000000008000f0000000000"], 0x2c}}, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x0, 0x0) socket(0x0, 0x2, 0x10000000000002) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r7, 0x0, 0xc, &(0x7f00000000c0), 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, 0x1402, 0x20, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xfffffffffffffe81, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040000}, 0x24044848) getsockopt$inet_opts(r7, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000100)=0x40) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 1m2.611327407s ago: executing program 0 (id=698): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) r3 = socket$packet(0x11, 0x2, 0x300) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x124, 0x30, 0x1, 0x0, 0x0, {}, [{0x110, 0x1, [@m_ife={0x10c, 0x14, 0x0, 0x0, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x7fff}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffff7, 0x7fff, 0x0, 0x4, 0x1000}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xffffffeb, 0x80000001, 0x10000000, 0x3}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x26e0bdfb, 0x8001, 0x3, 0x6, 0x8}}}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1000, 0x1aa5, 0x7, 0xc3, 0x3}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x7}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x37, 0x6, "09a5730c3d00898785566850853f88dbeb093991c4a61e5bc35396b3a19643331945684587dea61c8c1fe64f730e1017293e03"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x15}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xcc}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_emit_ethernet(0x42, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb08ff070186dd06100008aaaaaaaaaa1bfc020000000000000000000000000000b6d0832c34ae00000000000000000c00000000000000"], 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c00000019000500000000000000000080200000000400050000000008000f0000000000"], 0x2c}}, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x0, 0x0) socket(0x0, 0x2, 0x10000000000002) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r7, 0x0, 0xc, &(0x7f00000000c0), 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, 0x1402, 0x20, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xfffffffffffffe81, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040000}, 0x24044848) getsockopt$inet_opts(r7, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000100)=0x40) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 50.035691121s ago: executing program 0 (id=698): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) r3 = socket$packet(0x11, 0x2, 0x300) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x124, 0x30, 0x1, 0x0, 0x0, {}, [{0x110, 0x1, [@m_ife={0x10c, 0x14, 0x0, 0x0, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x7fff}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffff7, 0x7fff, 0x0, 0x4, 0x1000}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xffffffeb, 0x80000001, 0x10000000, 0x3}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x26e0bdfb, 0x8001, 0x3, 0x6, 0x8}}}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1000, 0x1aa5, 0x7, 0xc3, 0x3}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x7}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x37, 0x6, "09a5730c3d00898785566850853f88dbeb093991c4a61e5bc35396b3a19643331945684587dea61c8c1fe64f730e1017293e03"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x15}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xcc}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_emit_ethernet(0x42, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb08ff070186dd06100008aaaaaaaaaa1bfc020000000000000000000000000000b6d0832c34ae00000000000000000c00000000000000"], 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c00000019000500000000000000000080200000000400050000000008000f0000000000"], 0x2c}}, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x0, 0x0) socket(0x0, 0x2, 0x10000000000002) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r7, 0x0, 0xc, &(0x7f00000000c0), 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, 0x1402, 0x20, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xfffffffffffffe81, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040000}, 0x24044848) getsockopt$inet_opts(r7, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000100)=0x40) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 35.913311212s ago: executing program 0 (id=698): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) r3 = socket$packet(0x11, 0x2, 0x300) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x124, 0x30, 0x1, 0x0, 0x0, {}, [{0x110, 0x1, [@m_ife={0x10c, 0x14, 0x0, 0x0, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x7fff}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffff7, 0x7fff, 0x0, 0x4, 0x1000}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xffffffeb, 0x80000001, 0x10000000, 0x3}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x26e0bdfb, 0x8001, 0x3, 0x6, 0x8}}}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1000, 0x1aa5, 0x7, 0xc3, 0x3}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x7}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x37, 0x6, "09a5730c3d00898785566850853f88dbeb093991c4a61e5bc35396b3a19643331945684587dea61c8c1fe64f730e1017293e03"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x15}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xcc}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_emit_ethernet(0x42, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb08ff070186dd06100008aaaaaaaaaa1bfc020000000000000000000000000000b6d0832c34ae00000000000000000c00000000000000"], 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c00000019000500000000000000000080200000000400050000000008000f0000000000"], 0x2c}}, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x0, 0x0) socket(0x0, 0x2, 0x10000000000002) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r7, 0x0, 0xc, &(0x7f00000000c0), 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, 0x1402, 0x20, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xfffffffffffffe81, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040000}, 0x24044848) getsockopt$inet_opts(r7, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000100)=0x40) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 21.669474319s ago: executing program 0 (id=698): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) r3 = socket$packet(0x11, 0x2, 0x300) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x124, 0x30, 0x1, 0x0, 0x0, {}, [{0x110, 0x1, [@m_ife={0x10c, 0x14, 0x0, 0x0, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x7fff}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffff7, 0x7fff, 0x0, 0x4, 0x1000}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xffffffeb, 0x80000001, 0x10000000, 0x3}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x26e0bdfb, 0x8001, 0x3, 0x6, 0x8}}}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1000, 0x1aa5, 0x7, 0xc3, 0x3}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x7}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x37, 0x6, "09a5730c3d00898785566850853f88dbeb093991c4a61e5bc35396b3a19643331945684587dea61c8c1fe64f730e1017293e03"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x15}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xcc}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_emit_ethernet(0x42, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb08ff070186dd06100008aaaaaaaaaa1bfc020000000000000000000000000000b6d0832c34ae00000000000000000c00000000000000"], 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c00000019000500000000000000000080200000000400050000000008000f0000000000"], 0x2c}}, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x0, 0x0) socket(0x0, 0x2, 0x10000000000002) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r7, 0x0, 0xc, &(0x7f00000000c0), 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, 0x1402, 0x20, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xfffffffffffffe81, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040000}, 0x24044848) getsockopt$inet_opts(r7, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000100)=0x40) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 6.441463995s ago: executing program 0 (id=698): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) r3 = socket$packet(0x11, 0x2, 0x300) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x124, 0x30, 0x1, 0x0, 0x0, {}, [{0x110, 0x1, [@m_ife={0x10c, 0x14, 0x0, 0x0, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x7fff}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffff7, 0x7fff, 0x0, 0x4, 0x1000}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xffffffeb, 0x80000001, 0x10000000, 0x3}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x26e0bdfb, 0x8001, 0x3, 0x6, 0x8}}}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1000, 0x1aa5, 0x7, 0xc3, 0x3}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x7}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x37, 0x6, "09a5730c3d00898785566850853f88dbeb093991c4a61e5bc35396b3a19643331945684587dea61c8c1fe64f730e1017293e03"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x15}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xcc}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_emit_ethernet(0x42, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb08ff070186dd06100008aaaaaaaaaa1bfc020000000000000000000000000000b6d0832c34ae00000000000000000c00000000000000"], 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c00000019000500000000000000000080200000000400050000000008000f0000000000"], 0x2c}}, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x0, 0x0) socket(0x0, 0x2, 0x10000000000002) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r7, 0x0, 0xc, &(0x7f00000000c0), 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, 0x1402, 0x20, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xfffffffffffffe81, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040000}, 0x24044848) getsockopt$inet_opts(r7, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000100)=0x40) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 3.405891555s ago: executing program 2 (id=1482): socket$pppoe(0x18, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000100)="5fc903ce8cb5049e077f3ba953190a8ce22e51a45861006641e661523ed30e13487a64d3e98231a20c5e08ebe24801b531c63d06db0e6cca2bdb10dd7d02d74ab9dd95bd33747598fc1e063ff967b7c16abd2076323dca7cd2cc5ab8225b6d31c8029cfe91c8f8c054ff41", 0x6b}, {&(0x7f0000000980)="941dd634f75d70afed00837e63d7a620c1b5fd6f48660a86826b474ffb6274f02f52586f30140dafd6a0baffee63a7bafec8837268f35cf21be882e4ac6c522534080f35b3033aeb3f84e473f0b8c5a0d132378d8d7ff5299fd7616415c9c97f6331af9d07a746bb657558522dcee4c292efe922ce9584ec0ca31b7f5362419bd2084f5f9d2ef32bb866383dcb862e17ae85989ce20040b023f6d6b6cae15622b6b9ab922f95edd7f1fe11b20efdecc038027fe452320671c98e51817e1ab6e62610629bb0fa0b8513df543828b7dc90c220c6e7b17c4c7176508749", 0x50c}, {&(0x7f0000000480)='3', 0x10}], 0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x2000006, 0x13012, 0xffffffffffffffff, 0x1cd90000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000340)={r4, 0x10001}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_QUANTUM={0x8}, @TCA_HHF_NON_HH_WEIGHT={0x8}]}}]}, 0x40}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="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", 0xfd}, {&(0x7f0000000000)="8d7c88b31bf79c9ae0fd75f23ce8f3d3a5d9e3", 0x13}], 0x2) 3.20181549s ago: executing program 3 (id=1483): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1400000000000000290000003700000000000000000000001000000000000000000000001000000000000000290000000b00"/60], 0x34}}], 0x1, 0x0) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f00000000c0)=0x8, 0x4) (async) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180000005a00010400000040000000000800008004"], 0x18}], 0x1}, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) (async) r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0x2c) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r5 = socket$inet(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f00000006c0)=[{{&(0x7f0000000340)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000dc0)=""/237, 0xed}, {&(0x7f0000000540)=""/173, 0xad}], 0x2, &(0x7f0000000680)=""/16, 0x10}, 0x5}], 0x1, 0x20, &(0x7f0000000b00)) (async) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r5, 0x0) (async) recvmmsg(r5, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000bc0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000900)={0x44, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_DEVKEY={0x28, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}]}, 0x44}}, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="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", 0x118}, {&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df28a3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c8461de7afec966f9c023ffe15c3c1caec8ff3ef304ed0ffedd061941d9d022b25a4b9632856295fee3a314f6c196d953bcaf1aff06d181d51662fdaa52e46d7905c0b4c632602c", 0x10f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000003c0)="03d54d843173f8be883a57d9e39cc6c79c415ac50f3e1e9c9373002a5b1918", 0x1f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="610cb4f6db2105b873df3f7652cc642b85afb69fc18178429903bb6e1ecd18186c48864c", 0x24}, {&(0x7f0000000180)="6fe279d51047ff146af40b78b8d7ae53db8648c2090d72bcfeaf6fabbbfbe8dbc8b8f4cb22ac43d5a0fa87533bb375454751b8dd8aae4808a37a7649b3", 0x3d}, {&(0x7f00000001c0)="6d5edb4b883e266ba8c38aa9d13a78431c9d2cb6d8f4e1e80bb8a936aa105f46c914c46487522bc58054c4b0a523eeda0c76b595b36a515b6d30e34705733bb34bda2f89e92b2a98d2edbcffad9c5ccde0d723423cf07e4ffdbd568d3e263fb3b4086af3f2db1933785e59538bfd61f138ffac9eef7c8b34e4ce506220f43af449d3a72f48d9febe830b04cb3c99425de34cac503014ce74562667d8d6888edcc42fbbb6f7", 0xa5}, {&(0x7f00000002c0)="07030357fa3f85cd282cb9ab7e0a6d90d11f30e1bc20889d43e59a72354107b7849bc3c72e1485cca17aa5f4264f117b820688c6e25503bb54b2f6557d8b906aa997860941de528c25ca5ec78456babac034dc8cd2c4a4f078a8224b7ea2897a7f", 0x61}], 0x4}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb3bf10f3485e399c8b59df5b02c5f2702522", 0x3c}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2c691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d7d77ceefde94faf2e36c3920581691a79a6678db1e5e7fa1ca703ee7aa87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c54e708601eae992", 0xd2}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472fd012198c3c61bb81e71ba62134303d2db9740143b0374a0d0be875789932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19645f7a1dcf1449fd34eecae5f52fba1e89d6d34b39297bbbc258c2ea547d47f2d89ad6e36e737691a1c6bdd164b2a85cbaaf648c910559f53581c60bd6c80f90c75f664e5b285c738881560f8ae89a4943141ac45fb6995cece6a2e0e62bd79213527a11c34a6e89ca41ead3e2589301279d9b0832d0b5a6ebe2cf0cbfa40ab948b0b9efe108aeded8d12388a459902261bb0d5ab83ed7ce81b8a59ef1", 0xe3}, {&(0x7f0000000840)="a1c3704ecc4399d294157fa2b9b8", 0xe}, {&(0x7f0000000880)="b45a498ea447ee604887121819ab170a8c4da8", 0x13}, {&(0x7f0000000a40)="bd2f6aa36cea0e62ac00a4539dd80281164750339fcc3cd1f7bb1b74e98dbbe81e997d4847ee5d06a72e6f1c6b8a873c7ea7760f102483b578526af9775e51b84818d03da71c7a9a2b18fac6dde3bbf18625abe82bdc6e47e081c06eb1d6ab55a68e53e8fbb1e88e1f41a71002eb8121bf965623ce7f464c363d86743c9279b5eedf88704b6a459766bee3d50ae9f16e5653783d08bfba153d27baa1b721743c", 0xa0}], 0x6}}], 0x4, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) 3.054535934s ago: executing program 2 (id=1484): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x18, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x2, @multicast2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2}}]}, 0x80}}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 3.054014913s ago: executing program 4 (id=1485): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x19f, 0x19f, 0x3, [@struct={0x7, 0x6, 0x0, 0x4, 0x1, 0xffffffff, [{0xe, 0x3, 0x8001}, {0x3, 0x4, 0x6}, {0x9, 0x5, 0x895}, {0x8, 0x4, 0x3}, {0x6, 0x2, 0x80000000}, {0x6, 0x0, 0xfff}]}, @typedef={0x10, 0x0, 0x0, 0x8, 0x2}, @var={0xa, 0x0, 0x0, 0xe, 0x5}, @restrict={0x6, 0x0, 0x0, 0xb, 0x4}, @enum={0x1, 0x6, 0x0, 0x6, 0x4, [{0xa, 0x4}, {0xf, 0x9}, {0x3, 0x80000001}, {0x0, 0x7fff}, {0xc, 0x10}, {0xe, 0xf}]}, @datasec={0xf, 0x1, 0x0, 0xf, 0x1, [{0x3, 0x1, 0x3788}], 't'}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x5}, {0x3, 0x4}, {0x7, 0x4}]}, @enum={0x8, 0x3, 0x0, 0x6, 0x4, [{0x9}, {0xc, 0x90000000}, {0x0, 0x6ad3}]}, @datasec={0x10, 0xa, 0x0, 0xf, 0x2, [{0x5, 0x3}, {0x4, 0xdd5d, 0x8f}, {0x3, 0x81, 0x6}, {0x2, 0x2be5124, 0x35eb}, {0x3, 0xc, 0xfffffffb}, {0x1, 0x4, 0x5}, {0x1, 0x6, 0x6ac}, {0x5, 0x4, 0x3a57}, {0x1, 0x4, 0x2}, {0x2, 0x100}], "31ef"}]}, {0x0, [0x30]}}, &(0x7f0000000e80)=""/4096, 0x1bb, 0x1000, 0x1, 0x3}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x2, '\x00', 0x0, r2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.899797201s ago: executing program 3 (id=1486): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000013c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000740)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYRESOCT=r1], 0x40}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000002ec0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x88045}, 0x4) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0x49fe, 0x4) sendmmsg$inet6(r5, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000140)=0x2, 0x4) recvfrom$inet6(r5, 0x0, 0x0, 0x2100, 0x0, 0x0) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000240)=""/14, 0xe}, {&(0x7f0000000280)=""/57, 0x39}, {&(0x7f00000002c0)=""/119, 0x77}, {&(0x7f00000003c0)=""/87, 0x57}, {&(0x7f0000000440)=""/187, 0xbb}, {&(0x7f0000000500)=""/208, 0xd0}], 0x6, &(0x7f0000000680)=""/184, 0xb8}, 0x40000000) r6 = socket$kcm(0x21, 0x2, 0x2) sendmmsg$sock(r3, &(0x7f0000000b40), 0x0, 0x4000085) sendmsg$inet(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@ip_ttl={{0x14, 0x110}}], 0x18}, 0x0) r7 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x8004}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c"], 0xfdef) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r8, &(0x7f0000000440)=ANY=[], 0xfdef) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0x8, 0xc}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xd, 0x2, 0x8, 0x408, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5, 0x7}, 0x48) 2.846004198s ago: executing program 2 (id=1487): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=0x1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@cgroup, 0xffffffffffffffff, 0x1c, 0x0, 0x4000, @link_id, r0}, 0x20) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="b40000000081d45a3ce8c0207e00000079100000000000006300f8ff0000"], 0x0, 0x8, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r6, 0x0, 0x0) (async) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) (async) bind$can_raw(r7, &(0x7f00000005c0), 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x5c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xd0}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) recvmmsg(r7, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000004780)=""/23, 0x17}], 0x1}}], 0x1, 0x0, 0x0) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r7, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r7, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r8}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5b7b00008f28aaf0"}, 0x10}}, 0x0) getsockname$packet(r5, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000980)=0x14) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) (async) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000000306010100000000000e00000000000005000100070000007d0ab2b642ecafc30c3d2a874cfed643af041cb69a1fdd7619ba6ed2a0d81dc259a99a34bfef31fbdf346a3d6c76f5abd0eb6e217fefc8ba18c47c9177115f64ee3557ff7bf10d9e3729881f26910041bfe6db655f89b628364bc0c9ce2af1f1aaa304e87ad3f842335f4b33303315409101e74112067392d830b026b7f4b9b8ec4320f399e0ff3cc90d842c13a2034909631fb96a5dc0c6ff2c51b74624f5a38a72ef25fbccd17b97f2506c23b7f045eda66ea135ae29551d9a1645117c91f0b5"], 0x1c}}, 0x0) (async) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r11}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x80000000, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xff}}]}, 0x2c}}, 0x0) 2.734639584s ago: executing program 4 (id=1488): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a30000000180a05000000000000000000020000000900010073797a30000000000900020073797a300000000003ffec8014000000110001"], 0x58}}, 0x0) 2.645768422s ago: executing program 4 (id=1490): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001480)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000de220000009500000000000000"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x2}, 0x90) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) r2 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x90) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000000)=0xf3f, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x114, 0x1f, 0x301, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="f400a489160a11", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x114}], 0x1}, 0x0) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000400)={r5, 0x1, 0x6, @multicast}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="88000000", @ANYRES64=r5, @ANYBLOB="000429bd7000fddbdf251f00000008000200050000000400068008000400d10b00000800030002000000480006801400e9ff200100000000000000000000000000020800060000000000050002000200000006000100212c3e8f08000700c1ad73297454d34a4ab15a67fa14936e66fdf8f0046546334d407ad87e44efdad748ab8d96688573e4c4122bddfbf9596bb5edd3a34ce1b973b005cb4accb5fbc7f4323db7cd055011aee37a4888542b3be7a39c24c73a27ee0761182e35bab703d7a4e9dab1c445de212cb76bb206700daa3f0a77e8911e1faeb0e4889a3ce047cc2635", @ANYRES32=0x0, @ANYBLOB="08000300e000000208000300ac14140a0c00068008000300ac14143704000180"], 0x88}, 0x1, 0x0, 0x0, 0x4044010}, 0xc1) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100028bd7000df251000000008002c00030000000500300000000000050033000100050037000000000005003800"/62], 0x44}, 0x1, 0x0, 0x0, 0x8044}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000020000000000112d404e3c8a9b88430e4303c87d8eaa3dbf2ddb5a6dec7b97b28a000b96692bb62b78bac69e36af386cdbde7ddf4282dd491346d22581c1487a1aae93d6fc8f97365225642f593cd36dd0669a373372aa3045ccda2f6659159af51a"], 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x2, 0x220108, 0x4, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r8, &(0x7f0000000100), 0x0}, 0x20) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r9, 0x8b2a, &(0x7f0000000040)) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000440), 0x4) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00010000000000070000008180"], 0x30}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r1}, 0x10) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r10, &(0x7f0000000040)={0x1f, 0x21, @fixed}, 0x9) socket$nl_route(0x10, 0x3, 0x0) 1.366363357s ago: executing program 1 (id=1492): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000005c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @multicast1}, {0x4, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) (async) syz_emit_ethernet(0x2e, &(0x7f00000005c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @multicast1}, {0x4, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, 0x52, 0x400, 0x0, 0x0, {0x1e}, [@typed={0x8, 0x4, 0x0, 0x0, @uid=0xee00}]}, 0x1c}}, 0x0) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, 0x52, 0x400, 0x0, 0x0, {0x1e}, [@typed={0x8, 0x4, 0x0, 0x0, @uid=0xee00}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2], 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) preadv(r6, &(0x7f0000000080)=[{&(0x7f0000001280)=""/157, 0x488}], 0x1, 0x2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010000000000000000000800000008100300", @ANYRES32=r8, @ANYBLOB], 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010000000000000000000800000008100300", @ANYRES32=r8, @ANYBLOB], 0x1c}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x7, 0x4, 0x2}, 0x48) epoll_create1(0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0x300, 0x0, 0x0, {0x7, 0x0, 0x0, r12, 0x1}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0x300, 0x0, 0x0, {0x7, 0x0, 0x0, r12, 0x1}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r9, &(0x7f00000002c0)="d1ab4c2c638759de263d104002809747871fac22b9a45b765b5d736e0ea8734cac9b920c5d26eb113f461817f550477702128bbb2a908909f9872f02833eeffb2034e87a8fc89702fbfb6c72fc085eb7aba5e5037ce1e475", &(0x7f0000000580)=@tcp=r10}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r9, &(0x7f00000002c0)="d1ab4c2c638759de263d104002809747871fac22b9a45b765b5d736e0ea8734cac9b920c5d26eb113f461817f550477702128bbb2a908909f9872f02833eeffb2034e87a8fc89702fbfb6c72fc085eb7aba5e5037ce1e475", &(0x7f0000000580)=@tcp=r10}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r9, &(0x7f00000003c0)="a35e6e029e1f4a000edbd0f3027dab99022b9bc40b0b93a0061724896dd7d06de194a05cfbfab1fc0578b739d6e8d48fe7a2bce6e24d84ba2949feafd9256a6f86de8daae67e9f4d60738cad5163872463109e71c5f9d3d6bb8e519d0ee5b03174c7a91ff2ef96ca09a20c4734bc01027c1b69075c130615042e60994538b0fd03f7f0441b3ac830f367b7d286d328170191ad6fb458cc943f9e8081c988f3a1dd19158520d57c258d007d8f15fad8503221", &(0x7f0000000180)=@udp6=r10, 0x2}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x36}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="b400000000000000791097000000000062000000000000009500000000000000f42f9c31907ae9d028cc75e61c7db26519a29dc2b33043b3ce1030f95253523819600952532ad7c4604f25e5c2543ac6bce5e6f98728be9c7bb2cc7a54207d268d3dedde707e17cdf77b17dbf58a6d959826b7a4d74e7fec21e721fa0a815d02"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x4e, 0x0, 0xffffffffffffffff, 0x3000000}, 0x48) 1.17590421s ago: executing program 3 (id=1493): r0 = socket(0x10, 0x3, 0x0) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100000000000000001c"], 0x30}}, 0x0) 1.135778143s ago: executing program 2 (id=1494): socket$inet_udp(0x2, 0x2, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) (async, rerun: 32) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async, rerun: 32) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x8, 0x8}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x0, 0x20008845, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x103}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x400000002, 0x0) (async, rerun: 32) socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b15000000000000000000004888", @ANYRES32=0x0, @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES64=r2], 0x40}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket(0x1, 0x803, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) (async) r4 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000040)=0x64, 0x4) (async) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f0000000000)=0x97b, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) 1.073716655s ago: executing program 4 (id=1495): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x130, r2, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8}]}, 0x130}, 0x1, 0x0, 0x0, 0x80}, 0x800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc67d0794e26f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) shutdown(r4, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)) r6 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r6, &(0x7f00000044c0), 0x1, 0x0) 1.072691051s ago: executing program 1 (id=1496): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{}, {0x94, 0x0, 0x0, 0x8000}, {0x8, 0x0, 0x8}]}, 0x10) 1.05908718s ago: executing program 3 (id=1497): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x17}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x0, 0x0, 0x2b0, 0x0, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'vlan1\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'macvtap0\x00', 'bridge_slave_0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x10}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x50) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000000000020000000d0d397040a859db03bbe616fcdfec4b33fea765075e7b5e7066f1cd9d754a3ab306241efac975f0774592a24eb3c5d40d9a2a275830773ab971808cf9adc5c19", @ANYRES32, @ANYRESHEX=r2], 0x48}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_forget\x00', r0}, 0x10) 978.971877ms ago: executing program 4 (id=1498): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x1b, 0x5, 0x548, 0x0, 0x120, 0xffffffff, 0x120, 0x360, 0x4c0, 0x4c0, 0xffffffff, 0x4c0, 0x4c0, 0x5, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0x80, 0xa4}}, @common=@icmp6={{0x28}, {0x0, "0216", 0x1}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}, {{@ipv6={@remote, @loopback, [0xff], [0xffffff00, 0xffffffff, 0xff], 'veth1\x00', 'caif0\x00', {}, {}, 0x0, 0x81, 0x5, 0x4}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x1}, {}, {0x3}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffff00, 0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'veth0_to_batadv\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x0, 0x8, 0x4}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@remote, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@mh={{0x28}, {"c8d6"}}, @common=@dst={{0x48}, {0x97, 0x0, 0x0, [0x8000, 0xcbf1, 0x0, 0x8001, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100], 0xb}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv6=@private1, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) write$cgroup_pressure(0xffffffffffffffff, &(0x7f00000001c0)={'some'}, 0x2f) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b2a, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x39}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000200), 0xa7f, r2}, 0x38) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90224fc600e0005000a000200053582c137153e370e0c0180040010000400", 0x33fe0}], 0x1}, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x12, r0, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r5, 0x0) accept$netrom(r5, 0x0, 0x0) connect$netrom(r5, &(0x7f0000000080)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x48) 840.354885ms ago: executing program 2 (id=1499): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000003c0), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x48) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r10 = socket$inet(0x2, 0x6, 0x5) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000001bc0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000003080500000000000000000000000000050003008400000014000480080007"], 0x38}}, 0x0) r14 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r14, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r14, 0x6, 0x8, 0x0, 0x0) r15 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r16 = socket$qrtr(0x2a, 0x2, 0x0) r17 = accept4$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs, &(0x7f0000001d80)=0x6e, 0x80000) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)={0x178, 0x22, 0x509, 0x70bd27, 0x25dfdbfd, "", [@nested={0xb1, 0x6a, 0x0, 0x1, [@generic="2683e67b7e94c669c82046ea3f0081055166f90d4682b4f1b7ed11f861c5326c5d189c91e10a685cbfda5459806fb18dbedb68953e39805c156be61cb9e4453f7a4f9aa7112670", @generic="7967ad201620885016ec0835a2a6cab5e6706e8116e2a1b88739d10951c94e01005d422be6a86cf4fa6dfee5a70c6a06d03392b19d656542c16e3ffbcb9218f42c7551c0e5cecb92f040b2c1e51080f12d0955f45211c5cf6e0ef07e423c3a9d384052b88035"]}, @nested={0xb2, 0x25, 0x0, 0x1, [@typed={0x8, 0x8b, 0x0, 0x0, @fd}, @typed={0x8, 0x97, 0x0, 0x0, @fd}, @generic="f26068ec0b8b1e0398ee6d61b7347d0a29ba253e494e00e6299578bcb7a5a9c36a9a112946442621df6672c7f34b7b48be792091726b6ef9977dcc3f8e00f76d8b1cbbfd2d468962e7ef97f20ac45630764025961e18b7cfa980037503815122c6f9ee576ff8c2fd7bc20e76c77069e5f7d7f025c2f34eb1bcd42a7273a9153fe2915ac8aeadb521bd2779371ecea2f4cc673d0fbc54582c59cf5a4504fd"]}]}, 0x178}, {&(0x7f00000005c0)={0x14d0, 0x2e, 0x120, 0x70bd2a, 0x25dfdbfe, "", [@nested={0x22f, 0x129, 0x0, 0x1, [@generic="bac1577e27f824c6897c1d07337041e9791caa7e451933dc4bcf0f212af0164ea8d06c86cac97e641421c31dabf3282d3dce340b116fe972446e9c51fc91b90432358777f321e34b270820aa9e7575949a31c89ef52139cda309f374ace4267b0db2d90641f1d57059f332f1a34a7cff3e3d632675c59bf0491c0e56ee84f32ea24ac0a188c545ce8fc88dfa7c041891db65c146355cbb9d", @typed={0xc, 0x7f, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0xf3, 0x0, 0x0, @ipv6=@empty}, @generic="fb1b0bcebd4e09839f7b8d7c4826e7adc04a123494ef0e94c661127f1a9ddd", @generic="bb05de6d3bf2450ae43c47b461daeaada6f7ac208622923f3d0bad4c0601fdca24f4ef", @generic="c5c58549f6585ee04520ce4e1e8df37d62", @generic="f72cb67827e2834af4df81e444aec273728e849c319edbb41b31c80f8ee1ec77f7d2d359663388ec1a0118ab800b6fa94aaf3b2bc4a33103bcafacb14f8fa231011d277f5dceec7494ca5ca433204b1acbf4b65e543cef95b4abf2cd80dbdaccc3f8764b8656498c8fd973da914b0219d52e87fcd43a11efdcf255e5d6c8cbcb42ea8318de", @typed={0x14, 0x12f, 0x0, 0x0, @ipv6=@mcast1}, @generic="8bd8feac56be34eeb879f7034c73895b15c2dc327709aaad1fd2ed1f0dd82066847df2be55411448f5ac04bd6dbc06c57819bcb4976512151884d97809f44dc4a82137c7ede30363aef0db1337da24ce385e62ccd693f9cba77e1f9d0814b5afb3ebe11b692ff4df67ba52b0", @generic="349e4c271e79d3f87b760142a9dfcb9ab9dd254874c1b519a71a7c"]}, @typed={0x8, 0x14b, 0x0, 0x0, @fd}, @generic="46f0227515e2c8016ac5fe0eb38c1ec751f954696e09ceb79a55c7a7a49c64015db67e43784eb165644da83f856d7667e0ac0254c23906a5a34a280d980ea3023db4bc16420e9c5c71024872f6982637a2a8e1248a6c4ebbedaf8e128c388868e998a71806121e04a6ea9e10eed8e038bd252764700ef5f96acd73a666bb4db90d5831b5470dd49498881056f42ebd7302e5ecf78cd4e97e714a8b", @generic="bff51ed44672cad35c4ee09416315904e4ee062d08901f349c381cbe292781ed13ed0a2ce883ba5d2caad0fa912810d0ba81a93025edcf6f6de4027898e1296647d2e0172c0d9a5a8ef61ce087abb1be75e204b5b0b3fb248b56c3c489064bbe60d0e02fb829b2a0c0f15515177ab786ff978b3ec5333bdb6711f8c323de53d35a6ce5dfecd2cc3ccb53aec60c40ce871faff6", @nested={0x1155, 0xc3, 0x0, 0x1, [@generic="7124482b82117412e2a3267e9d761e8174cb978f1c3ecd67974d7e45a7213e743799c92af4525593741a0e7fbc0ad70d6f5a25fdfcb4f54b4b265d39d09ba0fc652bc876ec", @typed={0x8, 0xa4, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @typed={0x8, 0xec, 0x0, 0x0, @ipv4=@loopback}, @generic="cd54a0b5c05ccda4db4f07e3079ca990f3d9580d1e4d79fb9de5dde29a5dec3c7fd8ad943b6931b28297afef1f81359231d93019c9ddd3b18e954eac3ffe713935c41b72a170359ea6a2800387777c3e22b2de676f25d4d4705ae0acaaf198b317aa15676afa9eaed5841dc39cb6c2b1f55a1fe08e5e29cc296b72e1b3f56eb912a395b9c12d2b3f13f120828a5eb2e54d433e0efd8e92a7f9abac6823b7f2510aa3a4214c0354e3ff4a58585d8932d695c84bee8f1530da5d1667dd7f3eb4e3495f4fe80aa52ff10055601a2348bcc39c43d1a9d484b17ca9d45c83b37af86e99fc8cc18678db2669dc92a822efbdda2eecf28c0ce571dcced0bf428e04fc0f1ae3ef81f0b33806a45167e3553119c53e1b0f8e654e6e59dc63b7f17cafb4afa212defff8bd5e68d47d1d9a07c2c15c4b75d11862af0f986ed050bc4850377ca0056ec8a1da34c7e04c0850922cf5fe0e1f438cbc2d6dba3266979ed8ceea47117e00befc86562ed85448e6dab282b8e7b4e2322593221f9be87227ef843a7d0f2204f0da1f863a9de3ec1b12d8e23d287f8798325a0e55a55ac4009ab66b4c3fdb3a5aee843a44666e8eb11dd36bee7696fa67e5d60aa0a1601a388715b3e47656b9a103a690e8605daef21c4571f0beb17148ac2e8483c55bc246fa0f1b880067968070e1c48003c98353c0ebdd8095ab2163b458be4c4ab20714ba9702a07d546a90022a67e5a86560db815c6c945d982896a32e2770a06e7c5b35aac48edf4d9acc993c5bddb40260b4a572faffd5ff4baf9a98b9c4939cf409041fb7a6a933378e7ca66f3c5574aa98a2145c7e0fb0f3d88eb2e65ff720f85844ccfec252aed503e98ad148093a4a9f3b815edd216a8c1f0c7582f313b637e343c6ef029095481e9c5646a5b64bd792a924176b563f3bceceaed115cfeb902c198411180243f1280867f9b5f7255d4b7717f58eff1d43a980c359aa9e461a38a2b68783988bfd64628484e025bf24b7ef4ac7a93f963647ff2d73b953d23f61e78bfe8493546a3275d86d9775e5de4ca4acf569cb3f76930e0389be2bb031a70bb33ce82439cc6e67083cbd96a20a649eec6d9868c943faa63204c5fc0f43df1a363fb5f3ac80323cd22027c501899fa4f16e60d1b0f76f514ab805b21185142f9de094fc61c1d22775be23a0264517f9c1f9e5929bbf4374ed833d0c15b7399d9f237661fe31e38bc7b88bb15e044d895e923ddd623d3a5257e4aeabc12cc74eef3000f0006a84dc6bde567131513fa604233a7762aeabcdabeeb57506071fe3e0a1b771c507dda80276b161d83b22590e82203745d0ae5676212c1c8ec43619625e060cffdc3f30d6f132ffe72cf5ea256e6f377bbe22f785a320c897e6133c2ac7d6cb438610678668109d40ee5239cac826041aed9c8d842d12f139e6790310f93445069a64184847ef2db9614f7a77a1b27e1ea1b14472a9dd1eb1db927a52d1e4ee216b47a0361b6522aa0160258b26fe6664f52c61c056e583874783afbf7a6fc86731675115cbbcce356546ff0c1e763f1ec5752be6c209d6a73bffaefb61773afd2bc26edcd22ba36cf039950933810e8995d511b33758fa2dba39f84dec718b782ed676ae3598b00c75d13949ee06003caf041c952f72f2663b555e5eabcc6eaef12a513de84429209faa343f5eb067649d968f8f626dd25a3080ef57d1d5cf0c49b93828be2a66672effb778408071981ee9b5b2ca05e836cb70bbd927ff0480995a793e2a5a6c9f298f3853951e16061155be389b37fb2d6c07d74be2ca6af643f604863924374f855e90f99ef85288af1a2772f3e63648f2040502fa3a3e7b820436c952ce9c4269cadd41fb107b24686b7413ef6e38620be9eb230fb953d1976a05ce57cccb61d4ec30a42946ae3efb3f6adad4f76c00dc70f93bf542b00b8c2d7e67a358abe10cdaeb1c94c9417df8d2f573a1cf3ae74c0b6fd5bf272e8fbcd1a831dbfd5a84cd5f2b66aebd2282e780212fb3e7aa3620a46e1addeb68c20ed77adbb8cf98377d341658443e682df26518d47bf459e0593d4a58b5bfaf9947295d481b14ccd6a8b9df8295af370c479b111cd66aec932e7deee8793080db1dfb5493093c3639757275de139e61b32b670568f3a06173bf0c70da0b07e31de4ba5734eafc0f3750c516596b19103ba4996c25b256b3fc859fc0ef00abf82ec7e0f119a4f2ce623ddc29737131b5fc9e7a89daea1a658356a5f4a418c6530235d0f1dd248dae26b445b3b34a14d3406e24ee32e04906b1dad8fc2ad86e4c48a31488b2ca01b1cd4f57e79bee736052bdd19f2745c20a8673862cbd0182ebacc4980810d8c4793c47719696d4258b23bc1d91fe175e84a1077c1ea6d6762553ea3896eceb821c0f7c20b18c911d092d383abd3ce48f77d4372c3078cf7e3c93f06042eb001f604a19ef467dd9c349446e59dc94a115418710a007cbf3212765e2be4947b58777616468c6ddee796c2fe03a908306fba2718ed3d020aa814d52de7da4edac1cc0011ef34cce8b726b81b47449b9a2bc5640b8401de72e3b2659f5dcc12b5019bde2fb3c17006f714417177c92bb1e8c2999d3f8b5507376b24e5617b8b43456ba8f138ff98ac32ecd6557f4088c1520ba1b2d8b90957eb50a173672ab285618988b0f6bd29b232af6fc62cb877c990049a3d15459e2d52cefe256f39af2f6e205735150c728cd7ca6541739acf87f102684253395a64f27f7238dc1ebe9cbe3c0598d382048ec84b5219354136ae35782f980765ba6ce4128955ab7a26195907083ae2348c44210fb3465e5d4e3ba3a06ad5589c506a507530516168bb792fb9a0fe63c07b58916a30ee504edfc2e60bd9805d383a4c9563c7b075a1549539e331fa5a52b145f12af40b8f6521fe206fd1a3e684c018e3a0cb3ab11bd65cd6f93fef997c2b39665476ef507f998963cacec5fea249031f04c61126b109cf855c69e0b48d7c9efd429ddb55c80ab5496ca7a9c83690491a74cb21fae29f38925570be144e5fcaf8ff0aeb0a3985e7f0a141d2ad05ad2461b59bedc53e42b6f6763867ffac8cb148a288d5ce0cd850c5c665b1946f5dfee217edb240816d0852e37dbcad9e6dfba236765477cf3cc32d1959b328a63f9b639cd58361c07dd6b9525d1506812491a2f93e666fadfe823a017e309dae049462dbcbfcd6ef5aca834774e1eec1f992b302b0f23a815a216169da28b05e2dd2caf6a8d477bf0d97f4b6f3ab8b76014c1d28475b6c497fad9ca726a4cd61dfb929ca69fa0fae2523f4351170985e625c5d77f7a0c88a65e7b0ff6a49f0063b6d4bdcb2a2c3e4eae1f0d9d115525c7120a9e1f2d9ba3ef16979ac65472db69824b3d27085a5a4a2dc81497e86ee851f477fd2900266968cbafe065104bff2b1438d6e9e68a72cee8773dec105942d1c9438a33703b6f0f03b89801367f354b3b41c6d97fa5159402dbc7eb79eb12d0b90dbc86d6cf2d952bf1404a64665b6e6594c43a9ed8f3a54ae5ca5ca50604258624ad352f23bd98a0ddb438f626aa4ae7760911eada01ecd5ca29136834d102adc6ed81d4f87a6675bdceb89d81b3936fc02353b9d00e91e085d6702adaac4dce61e1d1fee25ae6d4310145f0b1135d2f56ea68df2c58252c8b494e208d949a5f0c8dd00c8575de9c8d45f0a6a1cf8b8b2d18dc95919740385a151edce0a6b6edcd78ccb12f1a3b7c0edda5a3e4d9ca9069461a2687b1ed43b5cbba6cf99ef0c895fb7ddffeac7a2c33c62fd651baeadf2f83b0d412e3ce363a43df5ea80eb2c2797f44deed830a6525242a4bfa7ed202ba90eb45dc4b0b07587e370c7e56ff3b106ba38fdb25c1e998a54188fc541761605a6ea685f8201f50484b2ba84c581ef58573eb4170512554fae8877561d66ba27d6b118308e90708403bb8f1ee765f729f966ecba886f93131852cae2ab1f1ce44c8a5dd0e4beba3f4a9837668934d9328889b35c4dbc4b11a72a3b53da603082e39071aea37516a56d39658c35d785eead0cfd90b4149cca22c57fb6edee18cc84d9e7b7b2186d004930e93c168b7bc5827ff3da63a564ff7b7aae1c283e29c3705142d20f3bac87e175d5b45ee8b63edbbd0eb1eacc60e27360642179a82643c9b1edae0ffb96f84dd385b38e0afb6aefebd5cb9424a4531e77e5f0bc4868045aa701c3b322972c3358071c291dca1d9bd87e9cc62a3a21fd3aae8e7d84b783774fee9255289fe308eb0714e498f5f8a5a9510edc4d000b559972ad46090f4de6bfd5e1059c962410a42c9462b1af6d5eea681930ba1a00976baee3d2ab7254b1e3c8360aa62c01daa703f7fe3bfad551b98d2733a3c2bed5910dee5cd2812cec7618edb0ec08e0ebf79a8dbc4cab03d5e5dc4b38a1406a24df940a3aad48170d4aad1c6e00c72e00b6128fe1ba4ce0d9d4518e1f0df5489a215c2263029da1011f80ecf86c02dc02291562e91e5c36e35e86e13f425bc0d6ec871b8744475cccce829104b370f5c48c49bdd76a61035492093b87d8cfe602b7f07e7c40dc893438f559df29d5f640dc72516f991fe4cf6d98a57b7410718671a593b53fa23bb004538d60f176e5c8bcd48d9b06e47f51772aa635286502d06e06a5c2e78120f5e6c79df23ff13df1401a5dd96da1038bc588168757eed8c8c05c09c49e5abe11acaf28c9b6420d716f511ed783a23c8daf9614449430702a6a7c457e144191cfca091f3928a857719025c3603c3ae85b908d1e00063ba779635da7e4766481c4fe265adba9255415a3fe7b6021d7318dea05257bf123df70dba8cdaf0eae996b37a5463cd94d3fe0c187d5674c45263ac47bcea9338db9f63d8cffc319914fd7550d2a6645f7b8fa3c68bcf30d22e469ba5f36a5a18da3cb4443279be026f5dd3c49cb43f4e91926ebe40709e8166f093813690f34194160eee8aa9f896c9046123f97e1280bf1e76c25f47c7b7e8df8beb63e59c1e3fa563cee4e35c14aae213f253a91dc20a2e6661184a0be52611cdbb26bb296930fb5e730d6a64171fbaa9d893b492e741230cfec85279eabf69690397542f3d83f481ffdce939f17297c7c41fb4ce477396b217f60ee640ce73b10c8e55c3923fde0e44d7bcc6f7a1198317182aa963a4c5b9607c05993d3b36c2d075704f5a9ccbfc497c116e276991546200fdb9802fe7684c3970999e40042f86ed8e9ff9822d0febfd4b7f879219c43a22cbaa22469a190bb393c7e2d6735a39035dbb6b01c988e46936a3b24203f06c6cd476ccf8e69edd434e1d8c100ca3eca68d9494d733a731e4719a799177e9a250bc502102b7a8651d1b8fbb04ffedcf37eea3ce8e2de7e87ad48c3c83b4c7b5fcaf1dac7a8869feab5a896c4af303a7aad1361c2236ad6d49dd58d4796aa12258185888cd3ec2838907fc6363169433304bf59900a83e663a1c4d9ca5bfaea2daa66b9e9a0ec1cad88d5880e7890a7228723a1e7479761d732486f94f2de02aebb155d77254e0b4216d97d6305d7205808da996ef31ca7afcc5ea451f5601b55c11d56f32b2c10d36f54c92f0448bb6a74940c182d68f2ca41ab4b2ba3ca4c079801924709b2f6c21000e2d0d4c21961b232f6599ddd0f38afaf90ffe2656bfe7beef10ac5c08709b6c5416ca21a443c42be6b4c406a02ab733390623c487f84f73216792e44c25885935ecdc3dbfa58ce3f52bc1668f77614fb4a4b8794fbf769b4d1f5d31f473b7aba6bb821e5aba2056c7f7e92ecc9c78695df8ca1e", @typed={0xeb, 0x99, 0x0, 0x0, @binary="5ebec40cecd7b34c59ed9edc2c4c2c829dc667c53a8db243ccb4b8766a9ead01d3357c31ab128777c4aa43fedca6ad34a20263fa7c5e1c4534444cdadb8f677f0aad0a1de906e5141b85d2d0c8ed1e8585b691d93606b91275eabafc3093cc76b0a9ae885a98098c4e5863b4b19ef76fe6be2ab708aa6a7690b35835ed853b8a5a83266b4832163c1359037edf0628e7f8af4790643ac1c486d32a523d4cf924373546c1f6cc3036198bdca8a584820a93bda81f84a4417eab169c2c53d99a50d2790a524a7587ef6ca395a2cf497007e0c705a178e27136053cc6da72420b29318b1713b3531c"}, @typed={0x8, 0xac, 0x0, 0x0, @u32=0x80000001}, @typed={0x8, 0x2a, 0x0, 0x0, @fd}]}]}, 0x14d0}, {&(0x7f00000002c0)={0x30, 0x27, 0x100, 0x70bd2d, 0x25dfdbfd, "", [@nested={0x18, 0xc9, 0x0, 0x1, [@typed={0x14, 0xcd, 0x0, 0x0, @ipv6=@local}]}, @typed={0x8, 0x7f, 0x0, 0x0, @pid}]}, 0x30}, {&(0x7f0000001ac0)={0x2ac, 0x28, 0x4, 0x70bd2b, 0x25dfdbfe, "", [@nested={0x1c4, 0x118, 0x0, 0x1, [@typed={0x8, 0x1d, 0x0, 0x0, @u32=0x5}, @generic="128365387ae3c0ae50ddba1ce651eea7225657a0e81c9b9c156a74e54757d64d5203cb34c0ac7cd0242d86f1ef0eebbd1307a527db0a9d4292a959e0aaef2f266e44d1a5fff2277462a91ec4153a1c5e12c530d080f3f5319d57f2859b4a210dd91fb6bd1349d2bee1b8c89453b395a1dcad31dbfc65492a", @typed={0x4, 0x69}, @typed={0x6f, 0xde, 0x0, 0x0, @binary="ea493bd0c504277e485b86c034867c959b7ba2228e76932f005d770f4fd62b96aaf26750cecbb9ee3d1308e38128fd0d7e08426060347f4d24741d0c758f0f24991fcf42161e8441a50f822fb4d159a9177cc0ca0e4f35385f16e13252a3455a323c12e6808605de94c574"}, @generic="c1ca6944507bd27896b492d8840f1fce2c474b0b4083250ccfac433ee883c300869c93ed6fe4b33f6abef3c0d59babdd4f6628f6615029b5bca808c737a3da4a5b180a496686be718408a1e85765ad048b5ccf2bd96a5d95667b31df687f80ccd4a4732e2e252d06a99afa41250aff457762816835fc9b53374c585357a43bf9552c223d96b0a53b8b4cf5ae981b16ecac029f861ff33a26621d5531707c06b02b94d139e3bb7f22f5351ace6d622d3be4ccb934b7dadeccfad0bdadf964de447f50d9b64e442edad770bd21"]}, @typed={0x4, 0x137}, @generic="146f60b946d2cc70bb4c908583a5c7782f2955711b22cde16c5dbb11b9fe71749bcfee54fd6e299d9a0f41b838427252a28e4b13b5ecf42b1c1b0563f053cba1eba2f101fdf2a93d08056aa4b2d1553773c19159dc38876c3a45bbf0289565302144413806173161598a949406154f1ce9c3e3c876d04d26f71afadbcbe67f6e1d7e7cb724797cb869d801bed720b5f13f10449999124e0071479329d6340523de518d63828d42453716665e4a62d560ca64d03f0a86e67a7c1b1cdcedbceb9f2913e9c911ff3b9d3ab34335add7301f8a"]}, 0x2ac}], 0x4, &(0x7f0000001dc0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r1, r2, r3, r4, r5]}}, @rights={{0x2c, 0x1, 0x1, [r6, r7, 0xffffffffffffffff, r8, r9, r10, r11]}}, @rights={{0x2c, 0x1, 0x1, [r12, 0xffffffffffffffff, r13, r14, r15, r16, r17]}}], 0x90, 0x8000}, 0x11) r18 = socket$netlink(0x10, 0x3, 0x0) r19 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r19, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r19, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r18, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r20}]}}}, @IFLA_MTU={0x8}]}, 0x44}}, 0x0) 838.213556ms ago: executing program 1 (id=1500): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac14140000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0) 817.538838ms ago: executing program 3 (id=1501): sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20030008}, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x6d322446) (async) listen(r0, 0x6d322446) r1 = socket$inet(0x10, 0x80803, 0x4000000000000004) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="4c0000001300ff09fffd956fa283b700008c0e440000000002007d3540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="14010000160001000000000000000000ffffffff000000000000000000000000fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000000000000000000000000000000000010000000000000000000000fff800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b09f6380f8a5e12bcc88cf2d964700ffffffff0000000000000000000000000000000000000000000000000000000000000000ff7f00001c0004000000000000000000ff020000004b"], 0x114}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000600)={'#! ', '', [{0x20, '\\'}, {0x20, ':._'}, {0x20, ']}}^'}, {0x20, '&'}, {0x20, '#'}, {0x20, '(\\&\xd9/\x05\x87\x1b\x99M\xc2v|\x88\x04~\x86Wzw\x98\x8c\xfah\xdd)\xe0\xba\xadDo\x10\xadnr\xc74/\xe2\xfb\x0eP\xe5o\x8d\x93\xe6\xf7\x16\x9c\xff\xd8\xc4v\xb5\x0e\x96\xca\xdc\x00\x7f%\xded\xcc~\xf4*\xcdY\n'}, {0x20, '@!'}, {0x20, 'GPL\x00'}, {0x20, 'devlink\x00'}], 0xa, "31767e5039c227c8f88bb20785b90c5eb0689a6a00bdf5f8c3ee6c6f26395c985e379b01d1db080c45e6faa6d79cba7cb12652355e0497ef52f6d5e93badf07fa5132c06f969c7e1fdddaa16cd34cde07ed5aa41684db6db88b5220132d0903a691f451f7b301bcafc92591af7e9b2c7f03e0f1e1cebe11780b4abf7d284fd90dd5b5e23ee287211557f7fd3daf9c599aa9924bd05a7359001facaf2dfb3c0435d09cb18df09c451000000008b6834fba316fc4ad77efc1f529f8a9db4"}, 0x129) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f00000002c0)=0x1, 0x4) sendmsg$802154_dgram(r5, &(0x7f00000000c0)={&(0x7f0000000140), 0x14, &(0x7f0000000280)={0x0, 0x4b}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r4}, 0x8) (async) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r4}, 0x8) sendmmsg(0xffffffffffffffff, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000480)="e9", 0x1}], 0x1}}], 0x1, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000480)="e9", 0x1}], 0x1}}], 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r6) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r8, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) sendto$inet6(r8, &(0x7f0000002380)="4bc32a49c5fee590838631f81d2d501b780e3376f11cd3e5af0a450233e74156f6bbf53a14d2e74c8e46115c0a4d4a0375317c4d988a690e37262cb48b591bfdb4ff738f0be31f3f33d65ec0256e00d937043394bbc296a55f0ffd3f8ae817bd0629ddb54b5a077cb64f8b1b75a3368c7908668352513b274701ffeab331e7427c786ca327f124645e97e4b67c7eda72388d008dbecae8227565c52c02500c1953cff47c07baeaa70ccda20f6ad15db93d0225f72ac9f7c32387b0e50de6f698decf584671232331c524c1e775c4b13e0e379e8253b0ff8fc05238f9a7dada66771b3c485d00532858ad4e137742e6adf72eec34b0ba8821c67f9d2726e98a6074617100882dc2711fb2e477cc76a1ff9b47d93ca2fa42e52f483bd2aa530974ff3fd29a170adadb10241abb8ddff7fdbe53765ee6239d7896be7db752b5046cc5b4b36b2a9c0b3c154915d90ccbf46675a81826b348a5c986a4d1c4488f6e24545619c829e7f6c4ae68d1a86bb2e700728086f30659178c7ba222b71f5786d77f12f221cd20b9fbd24801abcd64eaa605ca9da167fb06b11b9ee2a33d7d144f162f0699972818e0e69159e07393634fd13310a648768d17013063d34b2d68a20469891d0f24285a44ea4dc4aaadf3e326c7645fb569ee78dca1ec46d7942a42bd675ed1dbb3b537a24d57b76583df434bb57f38c0b4c2b6414f4511fb0126a3e17e06c65ec6023b8198ddc4b59707132affdb3123a930192d8a1a1d346501468faf24a8090b0454b7fd4fbe7f3afd8e70150edc2d3b6d799b45010dfd621c39d1e32e19f7c1554abf55e4cb0f450d129c4eaef1a1b7431ad30fc0d6ce6b973f2aa0f1dd2599d8284fb79deff298aae73388cd0ae4fccda5cff46b058fac08debb67bb9bc5eea5a6d28cff2d046a5afb09fb608bab362ef021fefc8d05e9619ea57959a884873b3a887a5e08123d564c5349c4c15c2ece77f0e4d0e4c88a516978afe85c014ff344668d4cd97681bae2ab6aecdc6f4a4c705c43d400f691ef6f5c926a8c51d9cd4d0fc15769c5b20662cfbef41d9cc3d62b9d68795907729d33133f3287f2ab5cce83e35fb0e358bb64a60675308f568a25c2327eebaaac30e6e282464d5547daf53eee7190e1e5a40f7d2e327858099bc5a7eff7f79859a074aaad5d6bdd8164c627ea59784fe40f1467bd17ded380e21bca5d7d0bb59aa681740d4e371e632862cdb8868c4d706a328704dd94d8687e07708b8a4742fb0caa260523e515bfd7ddcae9aff8e487aac73232c6a2bf63663c644f4451e209d720b0bd678b27b673443937d80958f94fd747be9f0df02950c2de593ea6978062aba26d12eda852f37cdfc18d3b96b08ac3eaffa2efb619db6ee789446b30fd5939f59e8cbafc28451fb95eefa265e038f43af933d288578be9ecf26495e6da011d91d5578c46b4a4bcbcf649eced6ac16f6623e67afd80c35dffe6b6aadd4bfbbfcd2f248455b8b1ce0f10f628999d8f56ae47e2fbb744bfb7962a3548240c286277db000d2b0e403d13fea75c7a789dec2a29e51e20a037a5156cfc547a7688f1926d8476a5d5bb64b4a82132a3bcadd080503f72e04e7d55ece7d5bbf24eb6fae2abace69fddbc3604c04a0a82408a7dc035e2512082397323cbf6ac5a01c07baa604bbd6315ad2592491a5397ef1c736f5fae08426ad14753fa0ea774f0397a77399bc5a7c9529f7a7b48313f426796346f77f7e975f8c2704bc61ce89f8f462ba69b68de5bbfaefae6b749d68af86334552a37f02b18671eb6ebf58cc77fde6d93a2b859c49113634afa77d33d2655675697b3ba142b94a18cda12773ed4391e4f80e7caf1c429eb4bbf2d2c982ea62aba0c94cfa2280d12e411edba880debe919d334d58492ce78ee93fafb2b6ef8206bf89cd10139dda68c57aece18acb02b5cb1d8ca7c6eba88751ddfad35db2ef8089e14cc30fa7e963394cbdfd4a39053c69e94b9bb44bb445d77b7a0965e3428142405ef3aa26426fcb8e26423b5342a1ea0bfd28448605e7c4346916a152839c23f1e3d463078830f55cfee3d719080be97cc6b6acd9effda875b18df23c07e55cd732d25d0c32b04c38b2c4cec8e9b57548cb7c153c2ac2043aaa49267c179f1485acb449823fd3f379953adaba9209ce052ee6470529ef6c044efdb9ec79c0da170e1a986706da2f191f735e8c9c27a433f06ad910b552ec871c20202bf39c13e3601a65facb32fb7ef2a85d12345b67409bd14c1e26c028676cef27d47e51deb5c8b616d7ec0dd837ad4fc4800ce78f83e5075bef6d3ef784519908712d411d6af598dda6ea13f20fb2ba8f4a85d1c8df3cc7dfe0a8e8d5b2d696e2b51d835c255d97873dae579a69cc3c9f8d50f282250142f78b562cd59325b010fdf5e103cc05f09295ecd5ad1bdbd195ba895bd38e5f3f8abe520a442f98c9b0df2e1bf30771be8c0ba86d59579a9ceda056c2b3b6d51ea5cd584750f45ccb7c9adc37ea8750ff035778da2cd9eac640e1121c4afac6f796a2a6d1892ce896f201a08cfa422bdbfabc34dad9e34352856160037d3485c344900ebb6d331d35fcb1c393a712cb5fe7002561c4bb11051492e65d4291c92c0545a926a798d7a23e806796fed6534d67cdf9857f7123d4dd1ebdb88d545201d75d1c9ba5456b7fb52af56652cb2537c0a5f82ad02f084edcaa66254f9a0a01eb7c5b9606c4c93594f1e636ab15d96f58b11ee9f7a16b6765a146bac6a98da6b47ecc87974a1c732c1194008c5f3514d0c1f42ba7b284b07b23a3b0fe9073dcec4b2d4ea397ef3984753b134d20515ed774118b46f21cd2f2c60b87f54e9335fa30517fe8c360f0803031a91302ba8f44e82d13c58736881ecf4cb643e7bf9585193f4d1e95e08c18c47d460e2edf2a0f1ed39c2e7800cfbffa0d9a09b108d8a5eab9ed409b61458e9d46bceab006e2df77505af41ff7dc0ee67748ec729ee09c11c229ac7ef447712c220ae2ef5612ae45299ca04cc3a26cc09a259c1dbc9a4291bd6589ce6eedc156df97d1bb7eea68ee273bb4c4c8ca0c515299aa53260e587608e4b1ec4f386ad0367a08bfa47ffca6af5705097d1657c94d5d7736e7157d8f7137416480933be3f325708f6f947ea08c94cf4489e0f338f91384715681044e00fbbff94b8d21a874b12be4294173c65f2f4e56427e840a5703e289f8314f705cf74e1d98ff88105967bd42d62a63a897fbe9a50ff08dd122c3ce1445b21aab0502b6fb47577604a0508249d8422b71eedc58fa678646922050d46d5e69d8612917bbb741c19ede0600917b7f84e44e580334db385ef5e5600a73bfdebcb037cea14f50eb7466db1e51d03d61923804ebfef38735452893486cf5a9e6ecc54526a2c998e3b5b41d5d8477c7e9b756876c8748dd10f44f315a5ccc578ec38a6799846ec1fac57bdfe4f9bc65b31d1e7de7cd9fc2f163cb513d790bd1dbb9b5a5cd46efecbbaba6bf504c23ca744ee36704f0b875396da1f9ac7089c28136e19b3c31ea3ac44f0bf8af4bdeb9a917370c78d11ab838282787cdc45b35f604bddf6c65f4079bd7606a40f219bbe940e25e6a54a8b9850ea0decb10013ae99aa920303f35f6283c0211e1bf12f33926840ec6acc53babc28b29c5aee0f626c48d58b092644823fc0b71a57d7125bc35ddf9ec7019d89a3497aa65fb4f34b169c535ce30d695dbb88f278e730d2e4f1394ed4b843885d8fa33b39152398fd2f6bb77520a84e4135e1995e9568bc4d3e60b98e1452ada5893bfc1a7574570a09fa21064ad12aa22af9195fe351cd34a5e3adac29da4669e09abf318d17c4b564f2ed0a7844c840a729fed5c106861f479fedf326d93b39f186c40e4fc59e064c6d090cc9ecf27630ab471817e3bf8acfa1518c6f0f6b2f4c0905e9249af04c8019d3fe12acd69e0a3085e01d673ffa5f2bb6d26717f611de3a0bdb7b838f0d156c06395bbb9294cb0e293f43baf60df683b35c4ff83bfd71b74fb25762079843d6484fa76a610b8cd6affeaf1930a47aa9aec77fee8b6b6a806527597f769570bb62af13a9da2d81254e102134e256f15126d21a7e5e6865989b1eb5c9752d059bea9eff27f7fed5f0ed40413ac11c20e68aa43baf4fc6a59e049e6bdb3ea3ebc5734b0ad0c6c9be761c5c248d2b50584ddfa2399884b091894f19061f4eb9ffa86097c11ee9fdb04d4ca44f91edded8e541adfab1b71c93305e85a41ca5f4eb9cf15820bf677694325c9c55cb443a7cb5e3d18157bd01bb23c1ede5dd5babc2751bead25b2f18860a085584ebf5211d67f74fd70edbecdbbf435d71db84fa96b9878a4166e2b0cc492f0f9eb82ad4fb4cdd5644e20f296feaa8f147e0e20a7c0f37767bf2a47fee3141447043fd990bb39dd56153eee38d05538b43627891f057a07526bf6848e171247549f53e0ba495a108f99e412a178e12001135e27b0184542ac579e0e22987b6b60fe5fc07954587556a53e1b326888d482f519c2e65f57193cb7f328e865db95b757d370200cb643a4da7596a13391d7b1017d842ecacaac3b0a3f53f388301374ad9033ff34d7d18db497c78a1ec8661c8e78e1d498f5a615649f3ecfe2c8ef3ee616ae455a42a06aacd64f1b2904dd111acd54d349dbb2ea2acf9e8fad483a53eb211018f6f2245c519c50fb3453b956c49a05a140b7270939f4f8216da940564f7facc9a83adae647c9fd43790577ed43dbe77420459a74237593fd5b703c0d4076ab1accd9ba686e621f189f41a66df608f7db2dfb1b08137f2f91413e670f3835dd7bca62a078c1cd14683ed4d9ff8d9025477aacffcc38c330c3940ce55ba0742d8ffb4e0a3220177529978390e19167e40dede952fc0cb5e6e8ad6863c6160f517d714bcf18256eb9d0eec8413dbec13a7bd637a77e328d4db8f61493eb0f26eca93137fc4420e0c5bd8d4a1b700bf0608daddec7d40d24751698f2dc89b8a04ae03d3349511a50f988b02cbfacf2c0455a9c8f034d671972368ceed715f3dfc2e9a143ff5c6275c8b714aee89c48c6b10aaf007e363ae17765dffea8b265a27793f55b86c214bbce2b3745f392109ece5688bdccd6dccf33407932dac4a18783b2d26d6dafeff39146397a4e89d2fb32d27c8b86e02b6ffa8fb91499f51d481ade5aa2e89bf5d24cdb95771574c777df39144316c6d6fcd9d8fb2fcec5823adfea0550014dfd2b5a3f7e23116359d12bee8362b5b96c7816583dabda95117b089f37cb3f682aeafec74dd62ca9ed9f1e56f7789e3b1ea9fcd0e3362ce0819f7b73d5e6b73162452eb69a1625a74926e6f4ee83e443e22f035e28f8bb19cfdc79c4e623356d022866edaf6d75c1938b86aa475670015433496f6455e4178072f05210d023ddb30dbaa5c8549fe893880e9da44d7ef99bc67940e73823962c8cc5e5e2708e22ddf27b863e360b372b57771099ab70fb51538bb0f42684e9b8bee428a9292869ad2bda5c554653e592066acd8e8547987f8e734e9e63ce39aae30439d4a0d7d88c8c5b2ee3727b6e8f22e96b9571ac2290edf3aa74e5cd54f464417773ef295e90d43042ee731d129179bef03fafc424b38118b5bfaa2051da04fbe8c84ddb142b8b80a599e419c09e0946268a52c352e74a8c3ff5b4e554dfcb1ae8b9a7f16ff823022ba5cd25ba70b6d6f620c5b2eff4a318c2c38f71c62b66b6d242e8b6046b57589ae1c9da4c71a3da67ae491f3222f911144603238bc0e508f7f6166e95700e043837b5839ab0dcdbb85e9de812adbe76b47a840a5f1352af8ba", 0xfffffffffffffced, 0x400c881, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f00000033c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000180)=0x40) 622.236258ms ago: executing program 1 (id=1502): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000180), &(0x7f00000001c0)=0x28) r1 = socket(0x1, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r1}, 0x20) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x5452, &(0x7f0000000000)={'syztnl1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x58}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001500)={0x1, 0x58, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f00000018c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r9, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="20002abd7000fddb002515000000500001801400020067656e6576653100000000000000000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="1400020076657468315f746f5f62726964676500140002006d616373656330000000000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x20000002) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r10}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000004880)={'syztnl0\x00', r11, 0x2f, 0x3, 0x10, 0x3, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, @private1, 0x700, 0x8000, 0x20, 0x2}}) sendto$packet(r9, &(0x7f0000004480)="e64ef2ec23c6f41b8d34222c234f36fc209b178771d1f973b56cc780259c6e6aafabd6729a2c69f2dc72367aeb61a1ef3e8692c3a9d888035a774ec3abc1dc4d2bfe7aaa78ae1949aa3baff3cf0c0adc8eb0490936262f4a4c7654588a9a1a49bbab8b11c7b8b3ad", 0x68, 0x10, &(0x7f0000004500)={0x11, 0xf9, r12, 0x1, 0x81, 0x6, @random="f3c7b924e806"}, 0x14) sendmsg$nl_route_sched(r9, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@gettclass={0x24, 0x2a, 0x100, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0xa, 0xfff2}, {0xfff1, 0x4}, {0xfff1, 0xfff0}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000005}, 0x801) sendmsg$nl_route(r7, &(0x7f00000049c0)={&(0x7f0000004900)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000004980)={&(0x7f0000004940)=@mpls_newroute={0x40, 0x18, 0x300, 0x70bd2d, 0x25dfdbfc, {0x1c, 0x14, 0x0, 0x20, 0xfe, 0x0, 0x0, 0x8}, [@RTA_VIA={0x14, 0x12, {0xf, "c0ec0a4c7ae26062dad636bb867b"}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x9}, @RTA_DST={0x8, 0x1, {0x86, 0x0, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x88090}, 0x4000000) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@getchain={0x3c, 0x66, 0x2, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x4, 0xc}, {0xa, 0x2}, {0x8, 0xe}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x80000001}, {0x8, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) 442.450039ms ago: executing program 1 (id=1503): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000cc0)={0x2c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4, 0xa}, @NL80211_KEY_IDX={0x5}]}]}, 0x2c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000003c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="10000000010000000000000000000025"], 0x10}, 0x1, 0x0, 0x0, 0x4040}, 0x20000001) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="0149000000009500"/24], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x4c}}, 0x0) r6 = socket$kcm(0x29, 0x0, 0x0) syz_emit_ethernet(0xf10, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000003c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$devlink(&(0x7f0000000b80), r7) socket$packet(0x11, 0x2, 0x300) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r8, 0x6, 0x4, 0x0, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x0, 0x0, 'wrr\x00'}, 0x2c) r10 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r10, &(0x7f0000001680)=[{&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="9e", 0x1}], 0x1}], 0x1, 0xfc) socket$nl_xfrm(0x10, 0x3, 0x6) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r11, &(0x7f0000000fc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='-\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd7000fedbdf2502000000080002000200000008000200020000000800010002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24045010}, 0x200048c0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0xfd3d, &(0x7f0000000080)={&(0x7f0000001080)=ANY=[@ANYBLOB="5800000013000100"/20, @ANYRES32=0x0, @ANYRESDEC=0x0], 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 426.970596ms ago: executing program 3 (id=1504): socket$kcm(0x10, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) socket$inet6(0xa, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000000000000000000000200000008000300", @ANYRES32=0x0, @ANYBLOB="080057009486b510d0a0e2340c01000080"], 0x24}, 0x1, 0x0, 0x0, 0x4c041}, 0x0) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8932, &(0x7f0000000900)={'veth0_to_hsr\x00'}) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) setsockopt$packet_int(r8, 0x107, 0x11, &(0x7f0000000240)=0x7, 0x4) sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000008c0)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x1, 0x0, 0x0, 0xfff, 0x1, 0x3}}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000013c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000000000000ff01000000000000000000000000000105000000200002000a00080000000000fe800000000000000000000000000000000000000d0001007564703aff03000000000000"], 0x6c}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x9) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000bc0)={'wpan1\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) 405.175941ms ago: executing program 2 (id=1505): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) r1 = accept(r0, &(0x7f0000000000)=@l2, &(0x7f0000000080)=0x80) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x57c7, @local}, 0x1c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r3, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, ']'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008005}, 0x20000000) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000240)={0x4, 0x0, 0xfb}, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1b, 0x1, &(0x7f0000000280)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f00000002c0)='syzkaller\x00', 0xff, 0x4a, &(0x7f0000000300)=""/74, 0x40f00, 0x32, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x3, 0x8001000}, 0x10, 0x0, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000400)=[{0x1, 0x3, 0x8, 0x3}, {0x3, 0x3, 0x3, 0xa}, {0x1, 0x4, 0x0, 0xe}, {0x3, 0x3, 0x10, 0xb}, {0x2, 0x4}], 0x10, 0x7fff}, 0x90) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x15, &(0x7f0000000540)=@raw=[@btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @map_val, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ff}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x8}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x6}], &(0x7f0000000600)='GPL\x00', 0x80000000, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x6, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000700)=[{0x1, 0x1, 0xb, 0x6}, {0x2, 0x4, 0x2, 0x4}, {0x4, 0x2, 0x10, 0xb}, {0x4, 0x5, 0x2, 0x1}, {0x4, 0x4, 0x2, 0xa}, {0x2, 0x5, 0x3, 0xa}, {0x4, 0x4, 0x9, 0x5}, {0x4, 0x5, 0x2, 0x5}, {0x5, 0x3, 0x9, 0x2}], 0x10, 0x7}, 0x90) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000880)={0xffffffffffffffff, r4, 0x4, r5}, 0x10) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000008c0), &(0x7f0000000900)=0x4) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000940)=""/184, &(0x7f0000000a00)=0xb8) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000ac0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000b00)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, r6, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x44014) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000c00)={0x6, 'bond0\x00', {0xc}, 0x6}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000c40)={0x0, 0x4}, 0x8) syz_genetlink_get_family_id$nbd(&(0x7f0000000c80), r2) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$packet(0x11, 0x2, 0x300) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x6c, &(0x7f0000000cc0)={0x0, 0xf1, "34b53f9fcf8ca7a954731ac600a2086c1a00052bf360e015773cd9825d95a6d09000882c0113ab3f26a99b468e57502f43da71c88a16c37d29bcdb0641aaf0a7c59a9080b5513c78699ba29b8f66120be14acc54c90fbd7089cb8bb2b1743b6397e0b0743c8ebfde2780b780590559040260f236508a77e705c12e7928a484d67a226acf27d3a2da8683c18bcdec118c9c3c3b723287ccbf860bf51381c5b239f4e2220e683912db61f1de6c6bbba65f9541119de3ccb762d670c999021b59bdb116f3cc389beed5e7eae76f8406d2479ac5fca6162d726f5813ca6f63a180ee6542d23c2014677c900f407301e4aa9b12"}, &(0x7f0000000dc0)=0xf9) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000e00)=0x1, 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000e80)=@o_path={&(0x7f0000000e40)='./file0\x00', r5, 0x4000, r4}, 0x18) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000ec0)=[@in6={0xa, 0x4e24, 0xff, @mcast1}, @in={0x2, 0x4e23, @private=0xa010102}], 0x2c) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x14, 0x5, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x1}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) sendto$packet(r11, &(0x7f0000001000)="1da9a2ab6b14144f8713136994165ec7f5b823afc526fdc57a9c4041d116ef8bc36209354c5d66f0465bc1b1cf061c46647e00cf006757aa1e41f5141840a714b788d9254374be73a4729c6a036f098b07a0a227328fbdd7a6a5f508db78a19e7c81136519b08a44b7e233738e0d4eab36242126ed6be2c257fa7a9fcb20f57c51ee146f904f52946edf8c6ac1e1559c3ef1b89826a77141a1193398176b7e9e7f65dd59b04790fe4d61fe371a8d361368c4ec154110ebb7212ae5fec8af6cae8dc476fcdcd587d6f5f12569535975c4c6e6f416b6cb708ed3bddc68d868114420", 0xe1, 0x20048855, &(0x7f00000011c0)={0x11, 0x18, 0x0, 0x1, 0x7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 166.432294ms ago: executing program 1 (id=1506): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000700)={r3}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0)={0x1, 0x8, 0x7e, 0xca, 0x5, 0x9, 0x2, 0xc, 0x2, 0x2, 0xf8, 0x7, 0x40}, 0xe) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x68, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x0, 0x0, @loopback}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) 0s ago: executing program 4 (id=1507): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000018008103e00312ba0d8105040a600000ff0f040b067c55a1bc000900b80006990300000015000500fe808178a8001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x2}, 0x9c) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a94000000060a0b0400000000000000000200000068000480640001800b00010072656a656374000054000280080001400000000105000200010000000500020002000000050002004000000005002100ff000000050002000800000005000200180000000500021907000000050002008500000008000140000000020900010073797a30000000000900020073797a32"], 0xbc}}, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x48) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000001580)={{r5}, "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"}) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001800010000000000800000000200000000000006000000000600150004000000100016800c00088008000180"], 0x34}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) (async) r7 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r7, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@deltfilter={0x34, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x4000c11) (async) r10 = openat$cgroup_int(r9, &(0x7f0000000140)='cpuset.memory_spread_page\x00', 0x2, 0x0) (async) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x401, 0x3f}, 0xc) (async) r11 = openat$cgroup_procs(r9, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendfile(r11, r10, 0x0, 0x4) (async) sendfile(r10, r11, 0x0, 0x0) kernel console output (not intermixed with test programs): ev nbd3: unable to read RDB block 0 [ 114.899176][ T5279] nbd3: unable to read partition table [ 115.362847][ T6542] SET target dimension over the limit! [ 115.498285][ T6546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.323'. [ 115.588843][ T6546] dummy0: entered promiscuous mode [ 115.608702][ T6546] macvtap1: entered promiscuous mode [ 115.613038][ T6555] netlink: 2 bytes leftover after parsing attributes in process `syz.0.326'. [ 115.622476][ T6546] macvtap1: entered allmulticast mode [ 115.668927][ T6546] dummy0: entered allmulticast mode [ 115.704752][ T6550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.323'. [ 115.748252][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.324'. [ 115.787723][ T6550] dummy0: left allmulticast mode [ 115.792986][ T6550] dummy0: left promiscuous mode [ 115.830366][ T6550] macvtap1: left promiscuous mode [ 115.838800][ T6550] macvtap1: left allmulticast mode [ 116.830270][ T6602] delete_channel: no stack [ 117.137097][ T6616] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 118.204916][ T6657] IPVS: Scheduler module ip_vs_sip not found [ 118.724962][ T6679] xt_hashlimit: max too large, truncated to 1048576 [ 120.677778][ T6678] netlink: 'syz.4.358': attribute type 10 has an invalid length. [ 120.702664][ T6678] bond0: (slave netdevsim0): Releasing backup interface [ 120.731598][ T6678] team0: Port device netdevsim0 added [ 120.752117][ T6681] __nla_validate_parse: 13 callbacks suppressed [ 120.752138][ T6681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.358'. [ 120.780530][ T6682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.358'. [ 120.899970][ T6699] netlink: 16 bytes leftover after parsing attributes in process `syz.0.363'. [ 121.185772][ T6705] syzkaller0: entered promiscuous mode [ 121.203055][ T6705] syzkaller0: entered allmulticast mode [ 121.221933][ T6713] netlink: 16 bytes leftover after parsing attributes in process `syz.1.366'. [ 121.231914][ T6704] netlink: 16 bytes leftover after parsing attributes in process `syz.3.364'. [ 121.621580][ T6735] netlink: 'syz.3.371': attribute type 3 has an invalid length. [ 122.319074][ T6730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.841084][ T6735] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 122.848901][ T6735] IPv6: NLM_F_CREATE should be set when creating new route [ 123.070029][ T6737] syzkaller0: entered promiscuous mode [ 123.075567][ T6737] syzkaller0: entered allmulticast mode [ 124.727550][ T6776] tipc: Started in network mode [ 124.752426][ T6776] tipc: Node identity ac1414, cluster identity 4711 [ 124.781558][ T6776] tipc: New replicast peer: 0.0.0.0 [ 124.800502][ T6776] tipc: Enabled bearer , priority 10 [ 124.927509][ T6788] netlink: 44 bytes leftover after parsing attributes in process `syz.0.381'. [ 125.035399][ T6784] netlink: 20 bytes leftover after parsing attributes in process `syz.3.379'. [ 125.918258][ T5283] tipc: Node number set to 2886996992 [ 126.178734][ T6817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.390'. [ 126.250415][ T6817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.390'. [ 126.272124][ T6819] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 126.285579][ T6821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.391'. [ 126.376747][ T6817] nbd4: detected capacity change from 0 to 256 [ 126.399691][ T5279] block nbd4: Send control failed (result -89) [ 126.428752][ T5279] block nbd4: Request send failed, requeueing [ 126.455600][ T5232] block nbd4: Receive control failed (result -32) [ 126.455683][ T6007] block nbd4: Dead connection, failed to find a fallback [ 126.470672][ T6007] block nbd4: shutting down sockets [ 126.475918][ T6007] blk_print_req_error: 27 callbacks suppressed [ 126.475934][ T6007] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.491443][ T6007] buffer_io_error: 27 callbacks suppressed [ 126.491459][ T6007] Buffer I/O error on dev nbd4, logical block 0, async page read [ 126.505386][ T5279] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.550109][ T5279] Buffer I/O error on dev nbd4, logical block 0, async page read [ 126.593608][ T5279] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.603861][ T5279] Buffer I/O error on dev nbd4, logical block 0, async page read [ 126.611965][ T5279] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.621837][ T5279] Buffer I/O error on dev nbd4, logical block 0, async page read [ 126.630201][ T5279] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.672244][ T5279] Buffer I/O error on dev nbd4, logical block 0, async page read [ 126.716994][ T5279] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.763905][ T5279] Buffer I/O error on dev nbd4, logical block 0, async page read [ 126.789938][ T5279] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.817389][ T5279] Buffer I/O error on dev nbd4, logical block 0, async page read [ 126.825289][ T5279] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.848001][ T6845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.397'. [ 126.898082][ T5279] Buffer I/O error on dev nbd4, logical block 0, async page read [ 126.919921][ T5279] ldm_validate_partition_table(): Disk read failed. [ 126.934111][ T5279] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.986122][ T5279] Buffer I/O error on dev nbd4, logical block 0, async page read [ 127.019266][ T5279] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 127.063148][ T6858] netlink: 32 bytes leftover after parsing attributes in process `syz.1.397'. [ 127.072311][ T5279] Buffer I/O error on dev nbd4, logical block 0, async page read [ 127.075470][ T6856] netlink: 24 bytes leftover after parsing attributes in process `syz.2.400'. [ 127.111181][ T5279] Dev nbd4: unable to read RDB block 0 [ 127.134284][ T5279] nbd4: unable to read partition table [ 127.187877][ T5279] ldm_validate_partition_table(): Disk read failed. [ 127.227839][ T5279] Dev nbd4: unable to read RDB block 0 [ 127.235511][ T5279] nbd4: unable to read partition table [ 127.487338][ T6868] netlink: 28 bytes leftover after parsing attributes in process `syz.0.402'. [ 127.501391][ T6868] netlink: 28 bytes leftover after parsing attributes in process `syz.0.402'. [ 127.687376][ T6881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.407'. [ 127.768584][ T6881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.407'. [ 127.866420][ T6881] nbd5: detected capacity change from 0 to 256 [ 127.900579][ T5279] block nbd5: Send control failed (result -89) [ 127.922707][ T5279] block nbd5: Request send failed, requeueing [ 127.955948][ T5235] block nbd5: Receive control failed (result -32) [ 127.956202][ T6007] block nbd5: Dead connection, failed to find a fallback [ 127.970224][ T6007] block nbd5: shutting down sockets [ 127.978312][ T5279] ldm_validate_partition_table(): Disk read failed. [ 127.991723][ T5279] Dev nbd5: unable to read RDB block 0 [ 128.038334][ T5279] nbd5: unable to read partition table [ 128.078417][ T5279] ldm_validate_partition_table(): Disk read failed. [ 128.092444][ T5279] Dev nbd5: unable to read RDB block 0 [ 128.107284][ T5279] nbd5: unable to read partition table [ 128.214145][ T6900] mac80211_hwsim hwsim4 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 128.553954][ T6902] team0: Port device team_slave_1 removed [ 129.056892][ T5235] Bluetooth: hci4: command 0x0405 tx timeout [ 129.457110][ T6934] netlink: 'syz.0.422': attribute type 1 has an invalid length. [ 129.529432][ T6939] openvswitch: netlink: Key type 29 is not supported [ 129.725438][ T6942] netlink: 'syz.0.423': attribute type 21 has an invalid length. [ 129.771570][ T6942] netlink: 'syz.0.423': attribute type 6 has an invalid length. [ 130.420287][ T6965] batadv_slave_1: entered promiscuous mode [ 130.477914][ T6964] batadv_slave_1: left promiscuous mode [ 130.984922][ T6989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.538315][ T7013] __nla_validate_parse: 4 callbacks suppressed [ 131.538337][ T7013] netlink: 28 bytes leftover after parsing attributes in process `syz.4.437'. [ 131.562273][ T7013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.437'. [ 131.853274][ T7022] netlink: 'syz.0.440': attribute type 10 has an invalid length. [ 131.921579][ T7022] batman_adv: batadv0: Adding interface: team0 [ 131.952524][ T7022] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.007014][ T7022] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 132.048190][ T7026] netlink: 'syz.0.440': attribute type 10 has an invalid length. [ 132.086639][ T7026] netlink: 2 bytes leftover after parsing attributes in process `syz.0.440'. [ 132.106898][ T60] wlan0: Trigger new scan to find an IBSS to join [ 132.117304][ T7026] team0: entered promiscuous mode [ 132.130596][ T7026] team_slave_0: entered promiscuous mode [ 132.142833][ T7026] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.150588][ T7026] batman_adv: batadv0: Interface activated: team0 [ 132.158058][ T7026] batman_adv: batadv0: Interface deactivated: team0 [ 132.165102][ T7026] batman_adv: batadv0: Removing interface: team0 [ 132.672404][ T7029] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 133.039967][ T7061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.452'. [ 133.053780][ T7061] netlink: 'syz.3.452': attribute type 18 has an invalid length. [ 133.069707][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.076690][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.083717][ T7061] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.093170][ T7061] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.102470][ T7061] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.111297][ T7061] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.125762][ T7061] vxlan0: entered promiscuous mode [ 133.668835][ T7090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.457'. [ 133.709199][ T7090] bridge_slave_1: left allmulticast mode [ 133.715111][ T7090] bridge_slave_1: left promiscuous mode [ 133.730223][ T7090] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.766703][ T7090] bridge_slave_0: left allmulticast mode [ 133.794358][ T7090] bridge_slave_0: left promiscuous mode [ 133.803879][ T7090] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.911501][ T7102] netlink: 'syz.4.462': attribute type 1 has an invalid length. [ 133.938301][ T7102] netlink: 224 bytes leftover after parsing attributes in process `syz.4.462'. [ 133.958999][ T7102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.462'. [ 134.215625][ T7114] netlink: 16 bytes leftover after parsing attributes in process `syz.2.463'. [ 134.218798][ T7118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.464'. [ 134.278685][ T7118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.464'. [ 134.376499][ T7118] nbd6: detected capacity change from 0 to 256 [ 134.389010][ T5279] block nbd6: Send control failed (result -89) [ 134.406399][ T5279] block nbd6: Request send failed, requeueing [ 134.433086][ T5232] block nbd6: Receive control failed (result -32) [ 134.433264][ T6007] block nbd6: Dead connection, failed to find a fallback [ 134.454698][ T6007] block nbd6: shutting down sockets [ 134.462745][ T6007] blk_print_req_error: 64 callbacks suppressed [ 134.462765][ T6007] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 134.479302][ T6007] buffer_io_error: 64 callbacks suppressed [ 134.479320][ T6007] Buffer I/O error on dev nbd6, logical block 0, async page read [ 134.494894][ T5279] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 134.504445][ T5279] Buffer I/O error on dev nbd6, logical block 0, async page read [ 134.571394][ T5279] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 134.587461][ T5279] Buffer I/O error on dev nbd6, logical block 0, async page read [ 134.598272][ T5279] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 134.614459][ T5279] Buffer I/O error on dev nbd6, logical block 0, async page read [ 134.624141][ T5279] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 134.635877][ T5279] Buffer I/O error on dev nbd6, logical block 0, async page read [ 134.655522][ T5279] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 134.685658][ T5279] Buffer I/O error on dev nbd6, logical block 0, async page read [ 134.708879][ T5279] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 134.744913][ T5279] Buffer I/O error on dev nbd6, logical block 0, async page read [ 134.780970][ T5279] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 134.836818][ T5279] Buffer I/O error on dev nbd6, logical block 0, async page read [ 134.891892][ T5279] ldm_validate_partition_table(): Disk read failed. [ 134.921316][ T5279] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 134.935951][ T5279] Buffer I/O error on dev nbd6, logical block 0, async page read [ 134.979697][ T5279] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 135.015289][ T5279] Buffer I/O error on dev nbd6, logical block 0, async page read [ 135.049894][ T5279] Dev nbd6: unable to read RDB block 0 [ 135.055879][ T5279] nbd6: unable to read partition table [ 135.125453][ T5279] ldm_validate_partition_table(): Disk read failed. [ 135.137860][ T2556] wlan0: Trigger new scan to find an IBSS to join [ 135.157219][ T5279] Dev nbd6: unable to read RDB block 0 [ 135.179573][ T5279] nbd6: unable to read partition table [ 135.357671][ T2556] tipc: Subscription rejected, illegal request [ 135.421953][ T7178] Bluetooth: hci3: unsupported parameter 43 [ 135.449803][ T7178] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 135.996957][ T7208] nbd7: detected capacity change from 0 to 256 [ 136.054831][ T5279] block nbd7: Send control failed (result -89) [ 136.076370][ T5279] block nbd7: Request send failed, requeueing [ 136.096740][ T6007] block nbd7: Dead connection, failed to find a fallback [ 136.097807][ T5232] block nbd7: Receive control failed (result -32) [ 136.103857][ T6007] block nbd7: shutting down sockets [ 136.104565][ T5279] ldm_validate_partition_table(): Disk read failed. [ 136.140235][ T5279] Dev nbd7: unable to read RDB block 0 [ 136.152768][ T5279] nbd7: unable to read partition table [ 136.203780][ T5279] ldm_validate_partition_table(): Disk read failed. [ 136.233433][ T5279] Dev nbd7: unable to read RDB block 0 [ 136.239476][ T11] wlan0: Creating new IBSS network, BSSID 1e:92:7d:91:05:38 [ 136.255791][ T5279] nbd7: unable to read partition table [ 136.432673][ T7233] syzkaller0: mtu less than device minimum [ 136.487449][ T7233] syzkaller0: entered allmulticast mode [ 136.732681][ T7245] netlink: 'syz.0.493': attribute type 29 has an invalid length. [ 136.871678][ T7252] __nla_validate_parse: 6 callbacks suppressed [ 136.871700][ T7252] netlink: 40 bytes leftover after parsing attributes in process `syz.2.495'. [ 136.938957][ T7257] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.497'. [ 137.601650][ T7290] netlink: 'syz.4.506': attribute type 1 has an invalid length. [ 137.894398][ T7310] netlink: 'syz.4.510': attribute type 10 has an invalid length. [ 138.032101][ T7317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.511'. [ 138.041320][ T7316] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 138.553305][ T7338] netlink: 'syz.1.518': attribute type 1 has an invalid length. [ 139.043067][ T7367] netlink: 24 bytes leftover after parsing attributes in process `syz.2.524'. [ 139.741565][ T7403] : entered promiscuous mode [ 139.758882][ T7403] netlink: 550 bytes leftover after parsing attributes in process `syz.2.525'. [ 139.790020][ T7406] netlink: 12 bytes leftover after parsing attributes in process `syz.4.526'. [ 140.005903][ T7414] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 140.028130][ T7414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.530'. [ 140.074507][ T7415] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 140.126837][ T7417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.250058][ T7417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.289021][ T7417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.316501][ T7427] ieee802154 phy0 wpan0: encryption failed: -90 [ 140.632274][ T7443] netlink: 20 bytes leftover after parsing attributes in process `syz.2.537'. [ 140.683151][ T7447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.539'. [ 141.140642][ T7472] netlink: 16 bytes leftover after parsing attributes in process `syz.0.546'. [ 141.201556][ T7478] IPv6: sit1: Disabled Multicast RS [ 141.228098][ T7478] sit1: entered allmulticast mode [ 141.799546][ T7512] syzkaller0: entered allmulticast mode [ 141.844502][ T7512] netlink: 'syz.2.555': attribute type 1 has an invalid length. [ 142.021070][ T7527] bridge0: entered promiscuous mode [ 142.060344][ T7515] __nla_validate_parse: 3 callbacks suppressed [ 142.060367][ T7515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.557'. [ 142.104099][ T5232] Bluetooth: hci0: command tx timeout [ 142.190834][ T7534] netlink: 'syz.2.562': attribute type 1 has an invalid length. [ 142.200852][ T7534] netlink: 9304 bytes leftover after parsing attributes in process `syz.2.562'. [ 142.215065][ T7534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.562'. [ 142.229543][ T7534] netlink: 596 bytes leftover after parsing attributes in process `syz.2.562'. [ 142.378475][ T7536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.564'. [ 142.411478][ T7541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.563'. [ 142.448306][ T7538] netlink: 120 bytes leftover after parsing attributes in process `syz.0.565'. [ 142.495514][ T7538] netdevsim0 speed is unknown, defaulting to 1000 [ 142.524873][ T7538] netdevsim0 speed is unknown, defaulting to 1000 [ 142.574459][ T7538] netdevsim0 speed is unknown, defaulting to 1000 [ 142.655751][ T7538] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 142.682566][ T7538] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 142.771966][ T7538] netdevsim0 speed is unknown, defaulting to 1000 [ 142.791575][ T7538] netdevsim0 speed is unknown, defaulting to 1000 [ 142.801932][ T7538] netdevsim0 speed is unknown, defaulting to 1000 [ 142.825979][ T7538] netdevsim0 speed is unknown, defaulting to 1000 [ 142.845170][ T7538] netdevsim0 speed is unknown, defaulting to 1000 [ 142.913177][ T7570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.573'. [ 143.025771][ T7570] delete_channel: no stack [ 143.155606][ T7587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.578'. [ 143.173910][ T7588] netlink: 32 bytes leftover after parsing attributes in process `syz.0.575'. [ 143.190159][ T7582] netlink: 'syz.3.576': attribute type 2 has an invalid length. [ 143.221072][ T7589] netlink: 'syz.1.577': attribute type 21 has an invalid length. [ 143.463807][ T7594] tipc: Started in network mode [ 143.496678][ T7594] tipc: Node identity 4e34c2c8ee08, cluster identity 4711 [ 143.504268][ T7594] tipc: Enabled bearer , priority 0 [ 143.616943][ T7604] tunl0: entered promiscuous mode [ 143.635275][ T7604] netlink: 'syz.0.583': attribute type 3 has an invalid length. [ 143.720078][ T7598] netdevsim0 speed is unknown, defaulting to 1000 [ 143.964727][ T7612] IPv6: Can't replace route, no match found [ 144.616883][ T5388] tipc: Node number set to 2688336584 [ 145.548292][ T7683] openvswitch: netlink: Key type 29 is not supported [ 145.667173][ T7685] netlink: 'syz.2.602': attribute type 32 has an invalid length. [ 145.748883][ T7689] unsupported nlmsg_type 40 [ 145.799377][ T7691] x_tables: duplicate underflow at hook 1 [ 145.877928][ T7700] netlink: 'syz.1.604': attribute type 1 has an invalid length. [ 146.145809][ T7717] syzkaller0: left allmulticast mode [ 146.588862][ T7737] netlink: 'syz.0.617': attribute type 7 has an invalid length. [ 146.600137][ T7737] netlink: 'syz.0.617': attribute type 1 has an invalid length. [ 146.629129][ T7737] bond1: entered promiscuous mode [ 147.288794][ T7763] team0: entered promiscuous mode [ 147.316720][ T7763] team_slave_0: entered promiscuous mode [ 147.333246][ T7763] team_slave_1: entered promiscuous mode [ 147.356668][ T7763] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 147.391722][ T7763] dummy0: entered promiscuous mode [ 147.409127][ T7763] dummy0: left promiscuous mode [ 147.433882][ T7763] team0: left promiscuous mode [ 147.446424][ T7763] team_slave_0: left promiscuous mode [ 147.458637][ T7763] team_slave_1: left promiscuous mode [ 147.464499][ T7763] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 147.490841][ T7764] __nla_validate_parse: 12 callbacks suppressed [ 147.490862][ T7764] netlink: 28 bytes leftover after parsing attributes in process `syz.1.625'. [ 147.772515][ T7797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.633'. [ 147.826536][ T7797] netlink: 20 bytes leftover after parsing attributes in process `syz.1.633'. [ 147.838157][ T7799] netlink: 48 bytes leftover after parsing attributes in process `syz.0.635'. [ 147.858472][ T7797] netlink: 20 bytes leftover after parsing attributes in process `syz.1.633'. [ 147.916833][ T7805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.637'. [ 147.925079][ T7804] netlink: 'syz.1.633': attribute type 9 has an invalid length. [ 147.947071][ T7804] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.633'. [ 148.021089][ T7811] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 148.048261][ T7811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.639'. [ 148.250810][ T7818] netlink: 32 bytes leftover after parsing attributes in process `syz.2.640'. [ 148.331902][ T7820] netdevsim0 speed is unknown, defaulting to 1000 [ 148.463969][ T7829] netlink: 'syz.2.643': attribute type 29 has an invalid length. [ 148.570124][ T7829] netlink: 'syz.2.643': attribute type 1 has an invalid length. [ 148.574382][ T7832] netlink: 'syz.0.644': attribute type 8 has an invalid length. [ 148.590295][ T7829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.643'. [ 149.379747][ T7871] vlan0: entered allmulticast mode [ 149.747252][ T7878] veth1: entered promiscuous mode [ 149.752750][ T7878] macvtap1: entered promiscuous mode [ 149.759774][ T7878] macvtap1: entered allmulticast mode [ 149.765254][ T7878] veth1: entered allmulticast mode [ 149.786240][ T7879] veth1: left allmulticast mode [ 149.791797][ T7879] veth1: left promiscuous mode [ 149.798732][ T7879] macvtap1: left promiscuous mode [ 149.803798][ T7879] macvtap1: left allmulticast mode [ 150.195723][ T7897] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 150.524610][ T7915] netdevsim0 speed is unknown, defaulting to 1000 [ 150.722659][ T7934] bond_slave_0: entered promiscuous mode [ 150.728843][ T7934] bond_slave_1: entered promiscuous mode [ 150.755809][ T7934] bond0: entered promiscuous mode [ 150.795837][ T7935] netlink: 'syz.1.675': attribute type 4 has an invalid length. [ 150.895411][ T7929] bond0: left promiscuous mode [ 150.925026][ T7929] bond_slave_0: left promiscuous mode [ 150.930864][ T7929] bond_slave_1: left promiscuous mode [ 151.664590][ T7971] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 152.217650][ T7990] €Â: renamed from vlan0 (while UP) [ 153.038784][ T8026] __nla_validate_parse: 16 callbacks suppressed [ 153.038804][ T8026] netlink: 72 bytes leftover after parsing attributes in process `syz.1.697'. [ 153.710391][ T8043] pim6reg1: entered allmulticast mode [ 153.821356][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.834296][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.843095][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.855418][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.866166][ T5235] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.874326][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.997812][ T8050] netdevsim0 speed is unknown, defaulting to 1000 [ 154.155719][ T8057] netlink: 32 bytes leftover after parsing attributes in process `syz.2.705'. [ 154.451900][ T8050] chnl_net:caif_netlink_parms(): no params data found [ 154.475940][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.709'. [ 154.732518][ T8084] netlink: 892 bytes leftover after parsing attributes in process `syz.2.711'. [ 154.760689][ T8050] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.773760][ T8050] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.781323][ T8050] bridge_slave_0: entered allmulticast mode [ 154.792269][ T8050] bridge_slave_0: entered promiscuous mode [ 154.819525][ T8050] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.837066][ T8050] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.854974][ T8050] bridge_slave_1: entered allmulticast mode [ 154.877524][ T8050] bridge_slave_1: entered promiscuous mode [ 154.890609][ T8084] team0: entered promiscuous mode [ 154.896012][ T8084] team_slave_0: entered promiscuous mode [ 154.946615][ T8090] team_slave_0: entered allmulticast mode [ 154.980505][ T8090] team0: Port device team_slave_0 removed [ 155.016637][ T8098] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 155.078299][ T8083] team0: left promiscuous mode [ 155.100557][ T8050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.114378][ T8050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.338036][ T8050] team0: Port device team_slave_0 added [ 155.370172][ T8050] team0: Port device team_slave_1 added [ 155.517114][ T8108] netlink: 24 bytes leftover after parsing attributes in process `syz.2.718'. [ 155.619441][ T8050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.633815][ T8050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.662890][ T8050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.715951][ T8050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.739137][ T8050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.801161][ T8050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.937835][ T5235] Bluetooth: hci1: command tx timeout [ 156.039377][ T8050] hsr_slave_0: entered promiscuous mode [ 156.087083][ T8050] hsr_slave_1: entered promiscuous mode [ 156.108145][ T8050] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.115784][ T8050] Cannot create hsr debugfs directory [ 156.166752][ T8136] netlink: 'syz.4.724': attribute type 64 has an invalid length. [ 156.181676][ T8136] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 156.279326][ T8140] IPv6: Can't replace route, no match found [ 156.498123][ T8150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.729'. [ 156.579013][ T8150] netlink: 28 bytes leftover after parsing attributes in process `syz.2.729'. [ 156.668534][ T8050] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.680839][ T8050] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.829435][ T8050] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.843723][ T8050] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.993968][ T8165] netlink: 32 bytes leftover after parsing attributes in process `syz.2.732'. [ 157.023333][ T8050] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.043920][ T8050] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.073699][ T8159] delete_channel: no stack [ 157.113647][ T8164] netdevsim0 speed is unknown, defaulting to 1000 [ 157.231637][ T8050] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.255800][ T8171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.269795][ T8050] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.327261][ T25] netdevsim0 speed is unknown, defaulting to 1000 [ 157.365539][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.736'. [ 157.375651][ T8172] veth1_macvtap: left promiscuous mode [ 157.397751][ T8173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.735'. [ 157.597230][ T8176] netlink: 'syz.2.737': attribute type 2 has an invalid length. [ 157.735136][ T8050] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 157.874782][ T8050] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 157.939976][ T8050] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 158.017182][ T5235] Bluetooth: hci1: command tx timeout [ 158.090444][ T8196] netlink: 'syz.4.741': attribute type 11 has an invalid length. [ 158.109136][ T8196] __nla_validate_parse: 1 callbacks suppressed [ 158.109157][ T8196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.741'. [ 158.200184][ T8050] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 158.289710][ T8209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.742'. [ 158.541834][ T8222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.747'. [ 158.676195][ T8050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.739080][ T8050] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.772043][ T5283] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.779451][ T5283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.815671][ T5283] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.824025][ T5283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.307920][ T8261] netlink: 28 bytes leftover after parsing attributes in process `syz.2.755'. [ 159.332779][ T8260] netlink: 'syz.4.754': attribute type 21 has an invalid length. [ 159.357389][ T8260] netlink: 132 bytes leftover after parsing attributes in process `syz.4.754'. [ 159.367495][ T8260] netlink: 28 bytes leftover after parsing attributes in process `syz.4.754'. [ 159.378431][ T8266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.753'. [ 159.394085][ T8266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.753'. [ 159.473421][ T8050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.616000][ T8276] Bluetooth: MGMT ver 1.23 [ 159.628116][ T8050] veth0_vlan: entered promiscuous mode [ 159.708279][ T8050] veth1_vlan: entered promiscuous mode [ 159.812469][ T8050] veth0_macvtap: entered promiscuous mode [ 159.833561][ T8050] veth1_macvtap: entered promiscuous mode [ 159.888954][ T8050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.911683][ T8050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.932100][ T8050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.950808][ T8050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.968337][ T8050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.979641][ T8050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.990221][ T8050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.002346][ T8050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.013662][ T8050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.024931][ T8050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.050366][ T8050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.096824][ T5235] Bluetooth: hci1: command tx timeout [ 160.113542][ T8050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.153041][ T8050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.176964][ T8050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.209081][ T8050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.219403][ T8050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.230040][ T8050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.240474][ T8050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.254566][ T8050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.273062][ T8050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.287467][ T8050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.311600][ T8050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.349586][ T8050] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.360075][ T8050] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.369382][ T8050] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.379467][ T8050] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.407821][ T8312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.548181][ T8109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.576013][ T8109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.642356][ T8109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.651711][ T8109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.211307][ T8340] netlink: 132 bytes leftover after parsing attributes in process `syz.4.773'. [ 161.258715][ T8337] pim6reg1: entered promiscuous mode [ 161.297653][ T8337] pim6reg1: entered allmulticast mode [ 161.477089][ T8349] netlink: 'syz.4.776': attribute type 10 has an invalid length. [ 161.613908][ T8357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.778'. [ 162.246213][ T8395] bridge0: port 2(bond0) entered blocking state [ 162.262409][ T8395] bridge0: port 2(bond0) entered disabled state [ 162.270318][ T8395] bond0: entered allmulticast mode [ 162.284598][ T8395] bond_slave_0: entered allmulticast mode [ 162.291885][ T8395] bond_slave_1: entered allmulticast mode [ 162.316887][ T8395] bond0: entered promiscuous mode [ 162.327731][ T8395] bond_slave_0: entered promiscuous mode [ 162.345256][ T8395] bond_slave_1: entered promiscuous mode [ 162.353610][ T8395] bridge0: port 2(bond0) entered blocking state [ 162.360126][ T8395] bridge0: port 2(bond0) entered forwarding state [ 162.391503][ T8399] netlink: 'syz.1.786': attribute type 29 has an invalid length. [ 162.461160][ T8400] netlink: 'syz.1.786': attribute type 29 has an invalid length. [ 162.544592][ T8399] netlink: 'syz.1.786': attribute type 29 has an invalid length. [ 162.624097][ T8399] netlink: 'syz.1.786': attribute type 29 has an invalid length. [ 163.083267][ T7391] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.860222][ T8453] netlink: 'syz.2.799': attribute type 3 has an invalid length. [ 163.876530][ T8453] __nla_validate_parse: 4 callbacks suppressed [ 163.876549][ T8453] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.799'. [ 164.008416][ T8458] netlink: 20 bytes leftover after parsing attributes in process `syz.4.798'. [ 164.082460][ T8458] xt_CT: You must specify a L4 protocol and not use inversions on it [ 164.163258][ T5232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 164.174478][ T5232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 164.200519][ T5232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 164.226772][ T5232] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 164.238202][ T5232] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 164.248270][ T5232] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 164.415806][ T7391] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.547937][ T8486] netlink: 36 bytes leftover after parsing attributes in process `syz.2.804'. [ 164.624075][ T7391] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.769439][ T8492] pim6reg1: entered promiscuous mode [ 164.786618][ T8492] pim6reg1: entered allmulticast mode [ 164.798881][ T8493] IPVS: Error connecting to the multicast addr [ 165.054388][ T7391] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.574614][ T8523] netlink: 'syz.3.815': attribute type 34 has an invalid length. [ 165.596452][ T8518] netlink: 12 bytes leftover after parsing attributes in process `syz.4.814'. [ 165.626225][ T7391] bridge_slave_1: left allmulticast mode [ 165.636010][ T7391] bridge_slave_1: left promiscuous mode [ 165.653875][ T7391] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.671681][ T7391] bridge_slave_0: left allmulticast mode [ 165.690089][ T7391] bridge_slave_0: left promiscuous mode [ 165.696172][ T7391] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.745479][ T8531] TCP: tcp_parse_options: Illegal window scaling value 253 > 14 received [ 166.229841][ T7391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.243537][ T7391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.255293][ T7391] bond0 (unregistering): Released all slaves [ 166.286628][ T8521] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 166.314234][ T8520] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 166.341024][ T5235] Bluetooth: hci1: command tx timeout [ 166.415018][ T8531] netlink: 128 bytes leftover after parsing attributes in process `syz.4.814'. [ 166.623266][ T8470] chnl_net:caif_netlink_parms(): no params data found [ 166.633546][ T8549] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 166.912697][ T8564] xt_ecn: cannot match TCP bits for non-tcp packets [ 166.946086][ T8564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.823'. [ 167.040022][ T7391] hsr_slave_0: left promiscuous mode [ 167.046040][ T7391] hsr_slave_1: left promiscuous mode [ 167.054656][ T7391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.062333][ T7391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.075403][ T7391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.083032][ T7391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.131109][ T7391] veth1_macvtap: left promiscuous mode [ 167.137879][ T7391] veth0_macvtap: left promiscuous mode [ 167.143712][ T7391] veth1_vlan: left promiscuous mode [ 167.155661][ T7391] veth0_vlan: left promiscuous mode [ 167.481032][ T8579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.827'. [ 167.537515][ T8579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.827'. [ 167.566741][ T8583] netlink: 'syz.1.828': attribute type 1 has an invalid length. [ 167.636469][ T8579] nbd8: detected capacity change from 0 to 256 [ 167.931614][ T7391] team0 (unregistering): Port device team_slave_1 removed [ 167.976228][ T7391] team0 (unregistering): Port device team_slave_0 removed [ 168.258155][ T1105] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 168.418948][ T5232] Bluetooth: hci1: command tx timeout [ 169.157309][ T8581] nlmon0: left allmulticast mode [ 169.503992][ T8581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.611004][ T8581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.133606][ T8581] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.143154][ T8581] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.153208][ T8581] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.166497][ T8581] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.298178][ T8581] : left promiscuous mode [ 170.302768][ T8581] bond_slave_0: left promiscuous mode [ 170.310349][ T8581] bond_slave_1: left promiscuous mode [ 170.333739][ T8581] vlan2: left promiscuous mode [ 170.339021][ T8581] vlan2: left allmulticast mode [ 170.345909][ T8583] netlink: 84 bytes leftover after parsing attributes in process `syz.1.828'. [ 170.365651][ T8470] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.383479][ T8470] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.398809][ T8470] bridge_slave_0: entered allmulticast mode [ 170.408205][ T8470] bridge_slave_0: entered promiscuous mode [ 170.429541][ T8470] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.446483][ T8470] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.453785][ T8470] bridge_slave_1: entered allmulticast mode [ 170.471585][ T8470] bridge_slave_1: entered promiscuous mode [ 170.485658][ T8592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.831'. [ 170.497468][ T5232] Bluetooth: hci1: command tx timeout [ 170.662964][ T8470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.666437][ T8618] netlink: 256 bytes leftover after parsing attributes in process `syz.3.832'. [ 170.735519][ T8470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.910087][ T8470] team0: Port device team_slave_0 added [ 170.938088][ T8470] team0: Port device team_slave_1 added [ 170.956861][ T8628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.836'. [ 171.103560][ T8629] syzkaller1: entered promiscuous mode [ 171.116503][ T8629] syzkaller1: entered allmulticast mode [ 171.138106][ T8470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.145630][ T8470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.221033][ T8470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.234380][ T8636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.837'. [ 171.244045][ T8636] netlink: 'syz.3.837': attribute type 15 has an invalid length. [ 171.254868][ T8638] netlink: 'syz.4.838': attribute type 6 has an invalid length. [ 171.265242][ T8470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.281599][ T8470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.308705][ T8470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.408384][ T8470] hsr_slave_0: entered promiscuous mode [ 171.420104][ T8470] hsr_slave_1: entered promiscuous mode [ 171.427625][ T8470] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.436761][ T8470] Cannot create hsr debugfs directory [ 171.464463][ T8647] bond0: entered allmulticast mode [ 171.479491][ T8647] bond_slave_0: entered allmulticast mode [ 171.485524][ T8647] bond_slave_1: entered allmulticast mode [ 171.495852][ T8647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.102972][ T8665] netlink: 'syz.1.844': attribute type 21 has an invalid length. [ 172.124004][ T8665] netlink: 15998 bytes leftover after parsing attributes in process `syz.1.844'. [ 172.157344][ T8662] tipc: Enabling of bearer rejected, already enabled [ 172.208587][ T8664] syzkaller0: entered promiscuous mode [ 172.214201][ T8664] syzkaller0: entered allmulticast mode [ 172.230285][ T8672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.845'. [ 172.539947][ T8684] netlink: 'syz.2.847': attribute type 1 has an invalid length. [ 172.556660][ T8684] netlink: 'syz.2.847': attribute type 2 has an invalid length. [ 172.576765][ T5232] Bluetooth: hci1: command tx timeout [ 172.614867][ T8688] netlink: 'syz.1.849': attribute type 11 has an invalid length. [ 172.623170][ T8688] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.849'. [ 172.648550][ T8685] netlink: 'syz.2.847': attribute type 7 has an invalid length. [ 172.686022][ T8684] netlink: 'syz.2.847': attribute type 7 has an invalid length. [ 172.942737][ T8470] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 172.967579][ T8470] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 173.001782][ T8470] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 173.043913][ T8470] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 173.183607][ T8700] netlink: 'syz.2.853': attribute type 24 has an invalid length. [ 173.324740][ T8470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.411004][ T8470] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.535007][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.542277][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.560973][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.568273][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.207723][ T8470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.372520][ T8470] veth0_vlan: entered promiscuous mode [ 174.432266][ T8470] veth1_vlan: entered promiscuous mode [ 174.570344][ T8470] veth0_macvtap: entered promiscuous mode [ 174.603427][ T8470] veth1_macvtap: entered promiscuous mode [ 174.665870][ T8470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.697675][ T8470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.734150][ T8470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.757730][ T8470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.780870][ T8470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.808377][ T8470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.826517][ T8470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.851852][ T8470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.888071][ T8470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.919632][ T8470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.936459][ T8470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.956340][ T8470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.975205][ T8470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.996202][ T8470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.007058][ T8470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.016981][ T8470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.028005][ T8470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.045695][ T8470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.367640][ T8470] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.392997][ T8770] netlink: 100 bytes leftover after parsing attributes in process `syz.2.872'. [ 175.402071][ T8470] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.428253][ T8470] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.451427][ T8470] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.489857][ T8771] netlink: 40 bytes leftover after parsing attributes in process `syz.2.872'. [ 175.526792][ T8770] sit0: entered allmulticast mode [ 175.555460][ T8774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.598231][ T8774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.641797][ T8774] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 175.643814][ T8771] sit0: entered promiscuous mode [ 175.786154][ T8777] netlink: 44 bytes leftover after parsing attributes in process `syz.3.874'. [ 175.957016][ T8109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.985359][ T8109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.069403][ T7391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.088137][ T7391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.111569][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.876'. [ 176.177904][ T8781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.876'. [ 176.276714][ T8781] nbd9: detected capacity change from 0 to 256 [ 177.042730][ T8810] Cannot find set identified by id 0 to match [ 177.077918][ T8810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.882'. [ 177.094465][ T8813] vlan2: entered promiscuous mode [ 177.107970][ T8813] veth1: entered promiscuous mode [ 177.121901][ T8813] team0: Port device vlan2 added [ 177.701979][ T4615] Bluetooth: hci0: command tx timeout [ 177.717092][ T8834] ax25_connect(): syz.3.890 uses autobind, please contact jreuter@yaina.de [ 177.801405][ T8837] netlink: 16 bytes leftover after parsing attributes in process `syz.3.893'. [ 177.813308][ T8837] netlink: 'syz.3.893': attribute type 10 has an invalid length. [ 178.061994][ T7391] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.143896][ T8845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.892'. [ 178.186608][ T8845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.892'. [ 178.215641][ T8845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.892'. [ 178.425228][ T8852] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 178.456907][ T8852] macvlan2: entered allmulticast mode [ 178.486057][ T8852] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 178.777521][ T8863] ebtables: ebtables: counters copy to user failed while replacing table [ 179.013892][ T5228] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 179.025126][ T5228] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 179.034875][ T5228] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 179.055012][ T5228] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 179.063986][ T5228] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 179.064487][ T7391] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.085974][ T5228] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 179.343399][ T7391] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.392810][ T8867] syz.3.898 (8867) used greatest stack depth: 17552 bytes left [ 179.503241][ T7391] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.914934][ T8899] macvlan0: entered promiscuous mode [ 179.942488][ T8899] macvlan0: entered allmulticast mode [ 179.975874][ T7391] bridge_slave_1: left allmulticast mode [ 179.996417][ T7391] bridge_slave_1: left promiscuous mode [ 180.015903][ T7391] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.039837][ T7391] bridge_slave_0: left allmulticast mode [ 180.052267][ T7391] bridge_slave_0: left promiscuous mode [ 180.062831][ T7391] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.837002][ T7391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.865998][ T7391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.888855][ T7391] bond0 (unregistering): Released all slaves [ 180.934000][ T8902] veth1_vlan: entered allmulticast mode [ 180.940875][ T8902] macvlan0: left promiscuous mode [ 180.955966][ T8902] macvlan0: left allmulticast mode [ 180.967569][ T8902] veth1_vlan: left allmulticast mode [ 181.138003][ T5228] Bluetooth: hci1: command tx timeout [ 181.319217][ T8932] __nla_validate_parse: 12 callbacks suppressed [ 181.319239][ T8932] netlink: 60 bytes leftover after parsing attributes in process `syz.4.915'. [ 181.404643][ T8877] chnl_net:caif_netlink_parms(): no params data found [ 181.623277][ T8940] netlink: 'syz.4.918': attribute type 1 has an invalid length. [ 181.636756][ T8940] netlink: 9372 bytes leftover after parsing attributes in process `syz.4.918'. [ 181.647579][ T8940] netlink: 11 bytes leftover after parsing attributes in process `syz.4.918'. [ 181.648325][ T7391] hsr_slave_0: left promiscuous mode [ 181.656589][ T8940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.918'. [ 181.698320][ T7391] hsr_slave_1: left promiscuous mode [ 181.717423][ T7391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.722824][ T8951] ebt_among: dst integrity fail: 200 [ 181.725025][ T7391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.739008][ T7391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.747437][ T7391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.775839][ T7391] veth1_macvtap: left promiscuous mode [ 181.781697][ T7391] veth0_macvtap: left promiscuous mode [ 181.787540][ T7391] veth1_vlan: left promiscuous mode [ 181.800316][ T7391] veth0_vlan: left promiscuous mode [ 182.457761][ T7391] team0 (unregistering): Port device team_slave_1 removed [ 182.504835][ T7391] team0 (unregistering): Port device team_slave_0 removed [ 182.550110][ T8950] dccp_close: ABORT with 72 bytes unread [ 183.104055][ T8877] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.118191][ T8877] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.147154][ T8877] bridge_slave_0: entered allmulticast mode [ 183.155087][ T8877] bridge_slave_0: entered promiscuous mode [ 183.198545][ T8877] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.205752][ T8877] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.216688][ T5228] Bluetooth: hci1: command tx timeout [ 183.269609][ T8877] bridge_slave_1: entered allmulticast mode [ 183.298429][ T8877] bridge_slave_1: entered promiscuous mode [ 183.374133][ T8979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.928'. [ 183.473603][ T8979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.928'. [ 183.496023][ T8877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.519205][ T8877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.699225][ T8877] team0: Port device team_slave_0 added [ 183.725622][ T8982] tipc: Started in network mode [ 183.740370][ T8982] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 183.760685][ T8982] tipc: Enabled bearer , priority 10 [ 183.809106][ T8877] team0: Port device team_slave_1 added [ 183.932106][ T8877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.940028][ T8877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.977120][ T8877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.024693][ T8877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.051779][ T8877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.078482][ T8877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.321332][ T8877] hsr_slave_0: entered promiscuous mode [ 184.348906][ T8877] hsr_slave_1: entered promiscuous mode [ 184.372774][ T8877] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.396374][ T8877] Cannot create hsr debugfs directory [ 184.883514][ T5282] tipc: Node number set to 10136234 [ 184.959220][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.939'. [ 184.987728][ T9032] netlink: 24 bytes leftover after parsing attributes in process `syz.3.939'. [ 185.297340][ T5228] Bluetooth: hci1: command tx timeout [ 185.302648][ T9043] netlink: 'syz.2.944': attribute type 21 has an invalid length. [ 185.340838][ T9043] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 185.417202][ T9051] netlink: 45 bytes leftover after parsing attributes in process `syz.3.946'. [ 185.721131][ T9058] netlink: 20 bytes leftover after parsing attributes in process `syz.2.948'. [ 185.763496][ T9058] vlan1: entered promiscuous mode [ 185.799464][ T8877] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 185.953929][ T8877] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 185.969249][ T8877] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 186.021023][ T8877] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 186.334406][ T9085] syzkaller0: entered promiscuous mode [ 186.356920][ T9085] syzkaller0: entered allmulticast mode [ 186.413227][ T8877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.467952][ T8877] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.509576][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.516852][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.587505][ T9094] __nla_validate_parse: 3 callbacks suppressed [ 186.587527][ T9094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.958'. [ 186.610944][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.618210][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.651765][ T9094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.958'. [ 186.670941][ T9094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.958'. [ 186.705257][ T9094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.958'. [ 186.784478][ T9103] syzkaller0: left promiscuous mode [ 186.790763][ T9103] syzkaller0: left allmulticast mode [ 187.085055][ T8877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.239843][ T8877] veth0_vlan: entered promiscuous mode [ 187.280281][ T8877] veth1_vlan: entered promiscuous mode [ 187.396724][ T5228] Bluetooth: hci1: command tx timeout [ 187.430023][ T8877] veth0_macvtap: entered promiscuous mode [ 187.465604][ T8877] veth1_macvtap: entered promiscuous mode [ 187.493480][ T9135] netlink: 20 bytes leftover after parsing attributes in process `syz.4.969'. [ 187.524195][ T9137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.972'. [ 187.538826][ T9141] netlink: 56 bytes leftover after parsing attributes in process `syz.1.971'. [ 187.555604][ T9135] bridge_slave_1: left allmulticast mode [ 187.562127][ T9135] bridge_slave_1: left promiscuous mode [ 187.572625][ T9135] bridge1: port 1(bridge_slave_1) entered disabled state [ 187.593129][ T9135] bridge3: port 1(bridge_slave_1) entered blocking state [ 187.608089][ T9135] bridge3: port 1(bridge_slave_1) entered disabled state [ 187.615366][ T9135] bridge_slave_1: entered allmulticast mode [ 187.641696][ T9135] bridge_slave_1: entered promiscuous mode [ 187.655070][ T9135] bridge3: port 1(bridge_slave_1) entered blocking state [ 187.662337][ T9135] bridge3: port 1(bridge_slave_1) entered forwarding state [ 187.725442][ T9142] veth1_to_bond: left allmulticast mode [ 187.738076][ T9142] veth1_to_bond: left promiscuous mode [ 187.751333][ T9142] bridge1: port 2(veth1_to_bond) entered disabled state [ 187.810094][ T9142] bridge3: port 2(veth1_to_bond) entered blocking state [ 187.819195][ T9142] bridge3: port 2(veth1_to_bond) entered disabled state [ 187.832314][ T9142] veth1_to_bond: entered allmulticast mode [ 187.842722][ T9142] veth1_to_bond: entered promiscuous mode [ 187.849584][ T9142] bridge3: port 2(veth1_to_bond) entered blocking state [ 187.856763][ T9142] bridge3: port 2(veth1_to_bond) entered forwarding state [ 187.899184][ T8877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.927660][ T8877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.946904][ T8877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.958353][ T8877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.968887][ T8877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.980603][ T8877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.990801][ T8877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.003098][ T8877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.015518][ T8877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.131847][ T8877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.187621][ T8877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.211962][ T8877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.255656][ T8877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.276638][ T8877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.311565][ T8877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.334970][ T8877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.366210][ T8877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.415727][ T8877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.560408][ T8877] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.600318][ T8877] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.627882][ T8877] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.650219][ T8877] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.959443][ T7391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.986540][ T7391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.096653][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.111720][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.175290][ T9197] netlink: 'syz.1.986': attribute type 10 has an invalid length. [ 189.188413][ T9197] : (slave wlan1): Enslaving as an active interface with an up link [ 189.930942][ T9229] bond0: left allmulticast mode [ 189.946219][ T9229] bond_slave_0: left allmulticast mode [ 189.952053][ T9229] bond_slave_1: left allmulticast mode [ 189.967620][ T9229] bond0: left promiscuous mode [ 189.973451][ T9229] bond_slave_0: left promiscuous mode [ 189.983895][ T9229] bond_slave_1: left promiscuous mode [ 189.996897][ T9229] bridge0: port 2(bond0) entered disabled state [ 190.011425][ T9229] bridge_slave_0: left allmulticast mode [ 190.025107][ T9229] bridge_slave_0: left promiscuous mode [ 190.033148][ T9229] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.064869][ T9229] bridge_slave_1: left allmulticast mode [ 190.082516][ T9229] bridge_slave_1: left promiscuous mode [ 190.091803][ T9229] bridge3: port 1(bridge_slave_1) entered disabled state [ 190.120718][ T9229] bond0: (slave bond_slave_0): Releasing backup interface [ 190.134008][ T9229] veth1_to_bond: left allmulticast mode [ 190.140235][ T9229] veth1_to_bond: left promiscuous mode [ 190.145886][ T9229] bridge3: port 2(veth1_to_bond) entered disabled state [ 190.181738][ T9229] bond0: (slave bond_slave_1): Releasing backup interface [ 190.242699][ T9229] team0: Port device team_slave_0 removed [ 190.269810][ T9229] team0: Port device team_slave_1 removed [ 190.285405][ T9229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.293758][ T9229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.308694][ T9229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.316208][ T9229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.339260][ T9229] team0: Port device netdevsim0 removed [ 190.350006][ T9229] batman_adv: batadv0: Removing interface: vlan2 [ 190.385416][ T9234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.402056][ T9234] team0: Port device bond0 added [ 190.485654][ T9246] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1000'. [ 190.499991][ T9246] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 190.605556][ T9249] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1002'. [ 190.757566][ T9255] x_tables: unsorted underflow at hook 3 [ 190.824631][ T9257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1005'. [ 190.893643][ T9259] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 191.623423][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.638006][ T9287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1013'. [ 191.939184][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.006505][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.069661][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.192630][ T11] bridge_slave_1: left allmulticast mode [ 192.201235][ T11] bridge_slave_1: left promiscuous mode [ 192.207398][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.219085][ T11] bridge_slave_0: left allmulticast mode [ 192.224759][ T11] bridge_slave_0: left promiscuous mode [ 192.230671][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.556424][ T9307] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1016'. [ 192.878526][ T4615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 192.888596][ T4615] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 192.908098][ T4615] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 192.927202][ T4615] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 192.942811][ T4615] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 192.950598][ T4615] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 193.040308][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.054407][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.067991][ T11] bond0 (unregistering): Released all slaves [ 193.615965][ T9345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1024'. [ 193.628895][ T9347] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1024'. [ 193.722426][ T9346] tipc: Enabling of bearer rejected, failed to enable media [ 193.882940][ T11] hsr_slave_0: left promiscuous mode [ 193.891730][ T11] hsr_slave_1: left promiscuous mode [ 193.909565][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.920868][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.931577][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.940948][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.008037][ T11] veth1_macvtap: left promiscuous mode [ 194.013645][ T11] veth0_macvtap: left promiscuous mode [ 194.019719][ T11] veth1_vlan: left promiscuous mode [ 194.025086][ T11] veth0_vlan: left promiscuous mode [ 194.519282][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.538956][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.986878][ T11] team0 (unregistering): Port device team_slave_1 removed [ 195.036173][ T11] team0 (unregistering): Port device team_slave_0 removed [ 195.075150][ T5240] Bluetooth: hci1: command tx timeout [ 195.532928][ T9362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1028'. [ 195.544108][ T9370] netlink: 'syz.4.1031': attribute type 33 has an invalid length. [ 195.606730][ T9374] sch_fq: defrate 0 ignored. [ 195.645255][ T9377] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1031'. [ 195.655862][ T9377] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1031'. [ 195.767032][ T9314] chnl_net:caif_netlink_parms(): no params data found [ 196.077578][ T9314] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.092458][ T9403] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1039'. [ 196.094538][ T9314] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.122104][ T9314] bridge_slave_0: entered allmulticast mode [ 196.130587][ T9314] bridge_slave_0: entered promiscuous mode [ 196.143245][ T9314] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.152711][ T9314] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.160268][ T9314] bridge_slave_1: entered allmulticast mode [ 196.168889][ T9314] bridge_slave_1: entered promiscuous mode [ 196.264645][ T9314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.297773][ T9314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.409596][ T9314] team0: Port device team_slave_0 added [ 196.427984][ T9314] team0: Port device team_slave_1 added [ 196.580508][ T5240] Bluetooth: hci2: command 0x0406 tx timeout [ 196.586797][ T5240] Bluetooth: hci3: command 0x0406 tx timeout [ 196.636426][ T9412] netlink: 'syz.3.1042': attribute type 4 has an invalid length. [ 196.747703][ T9413] netlink: 'syz.3.1042': attribute type 4 has an invalid length. [ 196.761689][ T9314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.770610][ T9314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.797203][ T9314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.812517][ T9420] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1044'. [ 196.863472][ T9314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.887031][ T9314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.898805][ T9410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1042'. [ 196.943387][ T9314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.000273][ T9420] xfrm2: entered promiscuous mode [ 197.005557][ T9420] xfrm2: entered allmulticast mode [ 197.136889][ T5228] Bluetooth: hci1: command tx timeout [ 197.225817][ T9314] hsr_slave_0: entered promiscuous mode [ 197.235752][ T9314] hsr_slave_1: entered promiscuous mode [ 197.242752][ T9314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.250590][ T9314] Cannot create hsr debugfs directory [ 198.550862][ T9314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 198.589854][ T9491] netlink: 'syz.1.1068': attribute type 6 has an invalid length. [ 198.612339][ T9314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 198.643048][ T9314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 198.680002][ T9314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 199.065664][ T9507] pim6reg1: entered promiscuous mode [ 199.078987][ T9507] pim6reg1: entered allmulticast mode [ 199.215808][ T9314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.223288][ T5228] Bluetooth: hci1: command tx timeout [ 199.401392][ T9314] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.479135][ T5282] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.486476][ T5282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.575116][ T5388] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.582380][ T5388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.623978][ T11] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 200.173572][ T9314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.320582][ T9314] veth0_vlan: entered promiscuous mode [ 200.378319][ T9314] veth1_vlan: entered promiscuous mode [ 200.597242][ T9314] veth0_macvtap: entered promiscuous mode [ 200.631116][ T9314] veth1_macvtap: entered promiscuous mode [ 200.897276][ T9314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.911406][ T9314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.922311][ T9314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.939749][ T9314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.963835][ T9314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.987772][ T9314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.032931][ T9314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.103346][ T9314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.134985][ T9575] dccp_invalid_packet: P.Data Offset(0) too small [ 201.154689][ T9314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.176645][ T9314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.212297][ T9314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.239200][ T9314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.246602][ T9583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1103'. [ 201.259341][ T9314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.271802][ T9314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.296999][ T5228] Bluetooth: hci1: command tx timeout [ 201.335593][ T9314] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.357693][ T9586] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1104'. [ 201.380809][ T9314] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.401812][ T9314] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.414334][ T9314] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.479757][ T9589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1106'. [ 201.736580][ T9592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1107'. [ 201.756948][ T9595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1107'. [ 201.767479][ T9601] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 201.794787][ T9601] tipc: Enabled bearer , priority 10 [ 202.000132][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.022073][ T9608] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1110'. [ 202.027569][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.041426][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.047662][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.225715][ T9616] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1112'. [ 202.244315][ T9616] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1112'. [ 202.256192][ T9616] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1112'. [ 202.266780][ T9616] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1112'. [ 202.566919][ T9638] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1117'. [ 202.621891][ T9642] dvmrp0: entered allmulticast mode [ 203.100540][ T9659] can: request_module (can-proto-0) failed. [ 203.111619][ T9664] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1122'. [ 203.146991][ T9664] pim6reg: entered allmulticast mode [ 203.153845][ T9664] pim6reg: left allmulticast mode [ 203.246920][ T9667] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1122'. [ 203.303191][ T9668] pim6reg: entered allmulticast mode [ 203.496749][ T9681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1125'. [ 203.498971][ T9679] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1127'. [ 204.073476][ T9682] infiniband A: set active [ 204.099340][ T9682] infiniband A: added bridge_slave_0 [ 204.175261][ T9682] RDS/IB: A: added [ 204.180534][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.182336][ T9682] smc: adding ib device A with port count 1 [ 204.197783][ T9682] smc: ib device A port 1 has pnetid [ 204.524583][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.620968][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.724742][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.998157][ T11] bridge_slave_1: left allmulticast mode [ 205.024346][ T11] bridge_slave_1: left promiscuous mode [ 205.041831][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.118181][ T11] bridge_slave_0: left allmulticast mode [ 205.123890][ T11] bridge_slave_0: left promiscuous mode [ 205.155869][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.751682][ T4615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 205.774963][ T4615] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 205.790402][ T4615] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 205.804685][ T4615] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 205.815969][ T4615] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 205.828267][ T4615] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 206.156772][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.170971][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.182302][ T11] bond0 (unregistering): Released all slaves [ 206.746083][ T9757] sctp: [Deprecated]: syz.3.1148 (pid 9757) Use of int in max_burst socket option. [ 206.746083][ T9757] Use struct sctp_assoc_value instead [ 206.954326][ T9753] bond1: entered allmulticast mode [ 206.965188][ T9753] 8021q: adding VLAN 0 to HW filter on device bond1 [ 207.590188][ T9786] __nla_validate_parse: 11 callbacks suppressed [ 207.590210][ T9786] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1155'. [ 207.637091][ T9788] x_tables: duplicate underflow at hook 1 [ 207.918419][ T9795] netlink: 'syz.2.1157': attribute type 15 has an invalid length. [ 207.937172][ T5228] Bluetooth: hci1: command tx timeout [ 207.959721][ T9795] netlink: 46 bytes leftover after parsing attributes in process `syz.2.1157'. [ 208.228223][ T9724] chnl_net:caif_netlink_parms(): no params data found [ 208.283073][ T9806] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1161'. [ 208.338944][ T11] hsr_slave_0: left promiscuous mode [ 208.353263][ T11] hsr_slave_1: left promiscuous mode [ 208.371015][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.389125][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.413435][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.427506][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.506094][ T11] veth1_macvtap: left promiscuous mode [ 208.512155][ T11] veth0_macvtap: left promiscuous mode [ 208.532606][ T11] veth1_vlan: left promiscuous mode [ 208.547070][ T11] veth0_vlan: left promiscuous mode [ 209.160279][ T11] team0 (unregistering): Port device team_slave_1 removed [ 209.210391][ T11] team0 (unregistering): Port device team_slave_0 removed [ 209.722696][ T9806] netlink: 'syz.2.1161': attribute type 10 has an invalid length. [ 209.772259][ T9806] team0: Failed to send options change via netlink (err -105) [ 209.783997][ T9806] team0: Port device netdevsim0 added [ 209.790803][ T9808] netlink: 'syz.2.1161': attribute type 10 has an invalid length. [ 209.800999][ T9808] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 209.820900][ T9808] team0: Failed to send options change via netlink (err -105) [ 209.828787][ T9808] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 209.838853][ T9808] team0: Port device netdevsim0 removed [ 209.848852][ T9808] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 209.860397][ T9808] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 210.017000][ T5228] Bluetooth: hci1: command tx timeout [ 210.367880][ T9724] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.385625][ T9724] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.409291][ T9724] bridge_slave_0: entered allmulticast mode [ 210.421152][ T9724] bridge_slave_0: entered promiscuous mode [ 210.477803][ T9724] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.490066][ T9724] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.505123][ T9724] bridge_slave_1: entered allmulticast mode [ 210.514999][ T9724] bridge_slave_1: entered promiscuous mode [ 210.618114][ T9859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1172'. [ 210.628017][ T9859] netlink: 'syz.4.1172': attribute type 25 has an invalid length. [ 210.645814][ T9859] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.654721][ T9859] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.664041][ T9859] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.672955][ T9859] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.749151][ T9724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.792997][ T9865] IPVS: Unknown mcast interface: lo [ 210.831043][ T9724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.904446][ T9874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1176'. [ 210.914195][ T9874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1176'. [ 210.923539][ T9874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1176'. [ 211.021704][ T9724] team0: Port device team_slave_0 added [ 211.047731][ T9724] team0: Port device team_slave_1 added [ 211.219766][ T9724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.236630][ T9724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.326072][ T9724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.382835][ T9724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.407471][ T9724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.462670][ T9724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.681638][ T9724] hsr_slave_0: entered promiscuous mode [ 211.752695][ T9724] hsr_slave_1: entered promiscuous mode [ 211.778987][ T9724] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.814898][ T9724] Cannot create hsr debugfs directory [ 212.018170][ T9933] netlink: 'syz.4.1189': attribute type 3 has an invalid length. [ 212.098289][ T5228] Bluetooth: hci1: command tx timeout [ 212.284077][ T9944] bond0: entered promiscuous mode [ 212.321052][ T9953] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1193'. [ 212.371077][ T9944] bond0: left promiscuous mode [ 212.573142][ T5280] IPVS: starting estimator thread 0... [ 212.666929][ T9959] IPVS: using max 18 ests per chain, 43200 per kthread [ 212.758973][ T9724] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 212.775198][ T9724] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 212.790326][ T9724] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 212.813906][ T9724] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 213.042793][ T9724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.113485][ T9724] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.159339][ T8603] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.166579][ T8603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.188689][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.195900][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.309081][ T9978] tipc: Can't bind to reserved service type 1 [ 213.368323][ T9980] x_tables: ip_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 214.000845][ T9724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.176785][ T5228] Bluetooth: hci1: command tx timeout [ 214.200690][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 214.213664][ T9724] veth0_vlan: entered promiscuous mode [ 214.252194][ T9724] veth1_vlan: entered promiscuous mode [ 214.405090][ T9724] veth0_macvtap: entered promiscuous mode [ 214.442178][ T9724] veth1_macvtap: entered promiscuous mode [ 214.503576][ T9724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.515632][ T9724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.526197][ T9724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.537768][ T9724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.547795][ T9724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.575560][ T9724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.600930][ T9724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.625359][T10025] netlink: 'syz.3.1214': attribute type 10 has an invalid length. [ 214.687925][T10025] team0: Port device netdevsim0 added [ 214.714803][ T9724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.737392][ T9724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.749526][ T9724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.767362][ T9724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.785116][ T9724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.817761][ T9724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.831205][ T9724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.841297][T10029] netlink: 'syz.1.1216': attribute type 11 has an invalid length. [ 214.859892][T10029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1216'. [ 214.921289][ T9724] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.943769][ T9724] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.965380][ T9724] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.985210][ T9724] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.263677][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.286597][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.353689][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.372443][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.946125][T10045] vlan1: entered promiscuous mode [ 215.977665][T10045] batadv0: entered promiscuous mode [ 215.995806][T10045] vlan1: entered allmulticast mode [ 216.015794][T10045] batadv0: entered allmulticast mode [ 216.030053][T10045] bond0: (slave vlan1): Enslaving as an active interface with an up link [ 216.650508][T10055] sctp: [Deprecated]: syz.2.1223 (pid 10055) Use of struct sctp_assoc_value in delayed_ack socket option. [ 216.650508][T10055] Use struct sctp_sack_info instead [ 216.828935][T10065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.831313][T10066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.011598][T10080] netlink: 'syz.4.1228': attribute type 27 has an invalid length. [ 217.020185][T10080] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1228'. [ 217.046774][T10080] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 217.204112][T10089] pim6reg1: entered promiscuous mode [ 217.219960][T10089] pim6reg1: entered allmulticast mode [ 217.613458][T10107] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1235'. [ 217.898292][T10123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1239'. [ 217.981349][T10126] netlink: 'syz.2.1240': attribute type 11 has an invalid length. [ 218.091652][T10135] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1243'. [ 218.268096][ T1105] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.313591][T10145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1245'. [ 218.393707][T10145] netlink: 'syz.4.1245': attribute type 29 has an invalid length. [ 218.437532][T10145] netlink: 'syz.4.1245': attribute type 29 has an invalid length. [ 219.397961][T10168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1251'. [ 219.442201][T10161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.468301][T10161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.496170][T10161] bond0 (unregistering): Released all slaves [ 219.569530][ T1105] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.615229][ T4615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 219.622560][T10166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1251'. [ 219.641743][ T4615] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 219.668412][ T4615] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 219.680241][ T4615] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 219.690146][ T4615] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 219.700650][ T4615] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 219.750856][ T1105] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.915658][ T1105] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.215286][T10181] xt_CT: You must specify a L4 protocol and not use inversions on it [ 220.226894][T10181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1254'. [ 220.304587][ T1105] bridge_slave_1: left allmulticast mode [ 220.316278][ T1105] bridge_slave_1: left promiscuous mode [ 220.343125][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.408014][ T1105] bridge_slave_0: left allmulticast mode [ 220.413723][ T1105] bridge_slave_0: left promiscuous mode [ 220.431776][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.929969][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.942624][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.954427][ T1105] bond0 (unregistering): Released all slaves [ 221.246554][T10214] IPVS: set_ctl: invalid protocol: 60 100.1.1.2:20003 [ 221.407696][T10222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1264'. [ 221.470332][T10226] netlink: 5300 bytes leftover after parsing attributes in process `syz.4.1265'. [ 221.487554][T10226] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 221.497637][T10222] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.1264'. [ 221.528026][T10222] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1264'. [ 221.786451][ T4615] Bluetooth: hci1: command tx timeout [ 221.854561][T10246] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1271'. [ 221.867572][T10248] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1271'. [ 221.984175][ T1105] hsr_slave_0: left promiscuous mode [ 221.992247][ T1105] hsr_slave_1: left promiscuous mode [ 222.004608][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.012912][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.022036][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.030894][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.082014][ T1105] veth1_macvtap: left promiscuous mode [ 222.088768][ T1105] veth0_macvtap: left promiscuous mode [ 222.094697][ T1105] veth1_vlan: left promiscuous mode [ 222.100411][ T1105] veth0_vlan: left promiscuous mode [ 222.294812][T10257] dccp_invalid_packet: P.Data Offset(172) too large [ 222.942677][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 223.000478][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 223.454907][T10257] 8021q: VLANs not supported on lo [ 223.571724][T10170] chnl_net:caif_netlink_parms(): no params data found [ 223.858329][ T4615] Bluetooth: hci1: command tx timeout [ 223.926550][T10300] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1279'. [ 224.304913][T10170] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.327375][T10170] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.366542][T10170] bridge_slave_0: entered allmulticast mode [ 224.399145][T10170] bridge_slave_0: entered promiscuous mode [ 224.457277][T10170] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.473931][T10170] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.502582][T10170] bridge_slave_1: entered allmulticast mode [ 224.520448][T10170] bridge_slave_1: entered promiscuous mode [ 224.605054][T10312] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1285'. [ 224.691155][T10170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.740037][T10317] netlink: 'syz.2.1286': attribute type 11 has an invalid length. [ 224.747608][T10170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.791151][T10315] netlink: 'syz.2.1286': attribute type 11 has an invalid length. [ 224.816303][T10315] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1286'. [ 224.954427][T10170] team0: Port device team_slave_0 added [ 224.983587][T10170] team0: Port device team_slave_1 added [ 224.997005][T10315] netlink: 'syz.2.1286': attribute type 30 has an invalid length. [ 225.145660][T10170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.172882][T10170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.230182][T10170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.267145][T10329] netlink: 'syz.3.1289': attribute type 4 has an invalid length. [ 225.330741][T10170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.356379][T10170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.426307][T10170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.696098][T10170] hsr_slave_0: entered promiscuous mode [ 225.723745][T10170] hsr_slave_1: entered promiscuous mode [ 225.740570][T10170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.756489][T10170] Cannot create hsr debugfs directory [ 225.936695][ T4615] Bluetooth: hci1: command tx timeout [ 226.279112][T10352] __nla_validate_parse: 1 callbacks suppressed [ 226.279136][T10352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1295'. [ 226.332118][T10352] veth0_vlan: left promiscuous mode [ 226.644452][T10362] netlink: 'syz.1.1297': attribute type 27 has an invalid length. [ 226.676017][T10363] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 226.712257][T10362] bond1: left allmulticast mode [ 226.948096][T10367] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1299'. [ 227.720925][T10170] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 227.772304][T10170] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 227.822412][T10170] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 227.861639][T10170] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 228.017458][ T4615] Bluetooth: hci1: command tx timeout [ 228.075266][T10170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.101763][T10403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1308'. [ 228.103799][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1308'. [ 228.121188][T10170] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.131425][T10403] A link change request failed with some changes committed already. Interface bM may have been left with an inconsistent configuration, please check. [ 228.155560][T10403] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1308'. [ 228.170311][ T8595] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.177542][ T8595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.221708][T10406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1307'. [ 228.244388][T10406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1307'. [ 228.288028][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.295294][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.538823][T10420] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1311'. [ 228.754076][T10170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.815139][T10431] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1315'. [ 228.870497][T10170] veth0_vlan: entered promiscuous mode [ 228.882911][T10431] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1315'. [ 228.913429][T10170] veth1_vlan: entered promiscuous mode [ 229.015649][T10170] veth0_macvtap: entered promiscuous mode [ 229.050081][T10170] veth1_macvtap: entered promiscuous mode [ 229.103508][T10170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.119585][T10170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.130308][T10170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.148500][T10170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.158642][T10170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.171965][T10170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.190828][T10170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.199208][T10443] netlink: 'syz.3.1318': attribute type 4 has an invalid length. [ 229.225761][T10443] netlink: 'syz.3.1318': attribute type 4 has an invalid length. [ 229.242856][T10170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.268629][T10170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.282797][T10170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.295239][T10170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.315331][T10170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.346570][T10170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.374203][T10170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.410608][T10170] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.435195][T10170] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.466364][T10170] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.483326][T10170] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.754065][ T7402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.777100][ T7402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.854562][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.895863][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.286905][T10530] __nla_validate_parse: 9 callbacks suppressed [ 231.286929][T10530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1344'. [ 231.367071][T10530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1344'. [ 231.399566][T10530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1344'. [ 231.521086][T10535] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1347'. [ 231.535340][T10546] x_tables: duplicate underflow at hook 1 [ 231.591507][T10542] pim6reg1: entered promiscuous mode [ 231.609027][T10542] pim6reg1: entered allmulticast mode [ 231.627700][ T8109] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 231.740275][T10554] syzkaller0: entered promiscuous mode [ 231.745799][T10554] syzkaller0: entered allmulticast mode [ 231.967907][T10575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1354'. [ 232.158867][T10581] dccp_invalid_packet: P.type (SYNC) not Data || [Data]Ack, while P.X == 0 [ 232.243248][T10585] netlink: 'syz.1.1358': attribute type 6 has an invalid length. [ 232.300607][T10585] netlink: 280 bytes leftover after parsing attributes in process `syz.1.1358'. [ 232.335291][T10585] unsupported nla_type 8192 [ 232.462709][ T8109] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.546780][T10594] netlink: 'syz.4.1361': attribute type 5 has an invalid length. [ 233.503900][T10605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1363'. [ 233.521101][T10601] netlink: 'syz.2.1364': attribute type 3 has an invalid length. [ 233.556436][T10601] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1364'. [ 233.583187][T10605] batman_adv: batadv3: Adding interface: netdevsim0 [ 233.596738][T10605] batman_adv: batadv3: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.680529][T10605] batman_adv: batadv3: Not using interface netdevsim0 (retrying later): interface not active [ 233.732125][T10606] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1366'. [ 233.980646][ T5228] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 233.999064][ T5228] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 234.008234][ T5228] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 234.021714][ T5228] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 234.031976][ T5228] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 234.042819][ T5228] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 234.241364][ T8109] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.394732][ T8109] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.498186][T10629] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1371'. [ 234.510334][ T8109] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.767221][ T8109] bridge_slave_1: left allmulticast mode [ 234.773907][ T8109] bridge_slave_1: left promiscuous mode [ 234.779917][ T8109] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.790726][ T8109] bridge_slave_0: left allmulticast mode [ 234.799403][ T8109] bridge_slave_0: left promiscuous mode [ 234.805165][ T8109] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.251935][ T8109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.266056][ T8109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.290078][ T8109] bond0 (unregistering): Released all slaves [ 235.894298][T10652] gretap0: entered promiscuous mode [ 236.102509][ T5228] Bluetooth: hci1: command tx timeout [ 236.167600][T10666] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 236.174968][T10666] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 236.195753][T10663] x_tables: duplicate entry at hook 3 [ 236.271851][T10666] hsr_slave_0: left promiscuous mode [ 236.315875][T10666] hsr_slave_1: left promiscuous mode [ 236.455697][T10668] bond0: option miimon: invalid value (18446744073072082944) [ 236.473517][T10668] bond0: option miimon: allowed values 0 - 2147483647 [ 236.525743][ T8109] hsr_slave_0: left promiscuous mode [ 236.540940][ T8109] hsr_slave_1: left promiscuous mode [ 236.548105][ T8109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.555687][ T8109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.565003][ T8109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.580950][ T8109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.614451][ T8109] veth1_macvtap: left promiscuous mode [ 236.620282][ T8109] veth0_macvtap: left promiscuous mode [ 236.625906][ T8109] veth1_vlan: left promiscuous mode [ 236.631353][ T8109] veth0_vlan: left promiscuous mode [ 237.263331][ T8109] team0 (unregistering): Port device team_slave_1 removed [ 237.310645][ T8109] team0 (unregistering): Port device team_slave_0 removed [ 238.032930][T10693] netlink: 'syz.1.1384': attribute type 1 has an invalid length. [ 238.088351][T10694] netlink: 'syz.1.1384': attribute type 10 has an invalid length. [ 238.117197][T10694] batman_adv: batadv3: Removing interface: netdevsim0 [ 238.170088][T10694] team0: Port device netdevsim0 added [ 238.176498][ T5228] Bluetooth: hci1: command tx timeout [ 238.188053][T10616] chnl_net:caif_netlink_parms(): no params data found [ 238.412353][T10710] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 238.464131][T10707] __nla_validate_parse: 4 callbacks suppressed [ 238.464153][T10707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1387'. [ 238.564523][T10616] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.592833][T10616] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.609311][T10616] bridge_slave_0: entered allmulticast mode [ 238.619380][T10616] bridge_slave_0: entered promiscuous mode [ 238.630053][T10616] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.637680][T10616] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.645385][T10616] bridge_slave_1: entered allmulticast mode [ 238.654912][T10616] bridge_slave_1: entered promiscuous mode [ 238.708741][T10727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1391'. [ 238.788681][T10727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.839410][T10616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.881189][T10723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.882164][T10616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.947973][T10733] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1394'. [ 239.090726][T10733] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.109898][T10733] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.291812][T10616] team0: Port device team_slave_0 added [ 239.513980][T10733] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.537297][T10733] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.575307][T10737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1393'. [ 239.666002][T10616] team0: Port device team_slave_1 added [ 239.713588][T10733] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.725577][T10733] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.948069][T10733] team0: Port device netdevsim0 removed [ 239.978740][T10733] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.006632][T10733] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.058185][T10616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.065281][T10616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.167951][T10616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.253063][T10616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.256839][ T5228] Bluetooth: hci1: command tx timeout [ 240.277311][T10616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.305146][T10616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.525145][T10733] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.543575][T10733] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.621368][T10616] hsr_slave_0: entered promiscuous mode [ 240.629870][T10770] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 240.648350][T10616] hsr_slave_1: entered promiscuous mode [ 240.664729][T10616] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.677708][T10616] Cannot create hsr debugfs directory [ 240.702998][T10733] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.712132][T10733] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.805639][T10733] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.814495][T10733] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.890381][T10733] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.901002][T10733] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.972419][T10783] netlink: 'syz.4.1405': attribute type 4 has an invalid length. [ 241.037599][T10789] netlink: 'syz.4.1405': attribute type 4 has an invalid length. [ 241.294073][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.303024][T10800] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20002 [ 241.303543][T10797] veth0_vlan: left promiscuous mode [ 241.310100][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.487271][T10803] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1410'. [ 241.542560][T10810] netlink: 'syz.1.1411': attribute type 21 has an invalid length. [ 241.557061][T10810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1411'. [ 241.652617][T10812] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.1412'. [ 241.808127][T10818] bridge0: port 3(team0) entered blocking state [ 241.814553][T10818] bridge0: port 3(team0) entered disabled state [ 241.833300][T10818] team0: entered allmulticast mode [ 241.896809][T10818] team_slave_0: entered allmulticast mode [ 242.055588][T10818] team_slave_1: entered allmulticast mode [ 242.118030][T10818] vlan2: entered allmulticast mode [ 242.123227][T10818] veth1: entered allmulticast mode [ 242.155861][T10818] team0: entered promiscuous mode [ 242.196868][T10818] team_slave_0: entered promiscuous mode [ 242.203095][T10818] team_slave_1: entered promiscuous mode [ 242.211317][T10818] bridge0: port 3(team0) entered blocking state [ 242.217836][T10818] bridge0: port 3(team0) entered forwarding state [ 242.281376][T10834] syz_tun: entered promiscuous mode [ 242.307698][T10834] macsec1: entered promiscuous mode [ 242.332633][T10834] syz_tun: left promiscuous mode [ 242.336670][ T5228] Bluetooth: hci1: command tx timeout [ 242.456057][T10844] netlink: 'syz.1.1420': attribute type 142 has an invalid length. [ 242.458570][T10616] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 242.512593][T10616] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 242.588248][T10616] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 242.674967][T10616] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 242.840298][T10866] TCP: TCP_TX_DELAY enabled [ 243.046052][T10616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.098110][T10875] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1428'. [ 243.120666][T10616] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.151451][ T5280] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.158733][ T5280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.190278][ T5280] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.197539][ T5280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.393481][T10882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1431'. [ 243.538469][T10886] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 243.565195][T10889] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1433'. [ 243.963286][T10616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.080467][T10902] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1436'. [ 244.112478][T10616] veth0_vlan: entered promiscuous mode [ 244.149663][T10616] veth1_vlan: entered promiscuous mode [ 244.290762][T10616] veth0_macvtap: entered promiscuous mode [ 244.344547][T10616] veth1_macvtap: entered promiscuous mode [ 244.370674][T10911] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1440'. [ 244.405083][T10616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.431445][T10616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.450268][T10616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.461357][T10616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.471978][T10616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.484986][T10616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.517667][T10616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.541832][T10616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.581275][T10616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.592351][T10616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.603947][T10616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.614208][T10616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.626395][T10616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.639283][T10616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.665041][T10926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1444'. [ 244.704881][T10920] netlink: 'syz.3.1442': attribute type 29 has an invalid length. [ 244.714151][T10917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1441'. [ 244.749408][T10917] bond2: entered promiscuous mode [ 244.755303][T10924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1441'. [ 244.766072][T10924] bond2: left promiscuous mode [ 244.771660][T10924] 8021q: adding VLAN 0 to HW filter on device bond2 [ 244.785290][T10921] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1442'. [ 244.848385][T10616] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.861751][T10934] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1445'. [ 244.886312][T10616] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.905612][T10616] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.929409][T10616] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.258065][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.265950][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.338482][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.346852][T10948] netlink: 'syz.3.1449': attribute type 10 has an invalid length. [ 245.361429][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.397536][T10952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1450'. [ 245.998906][T10973] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1455'. [ 247.130110][T11011] x_tables: duplicate entry at hook 3 [ 248.192573][ T60] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.494348][ T60] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.600159][ T60] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.716099][ T60] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.883121][ T60] bridge_slave_1: left allmulticast mode [ 248.889315][ T60] bridge_slave_1: left promiscuous mode [ 248.895041][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.907136][ T60] bridge_slave_0: left allmulticast mode [ 248.912926][ T60] bridge_slave_0: left promiscuous mode [ 248.919622][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.017652][T11048] netlink: 'syz.4.1474': attribute type 2 has an invalid length. [ 249.039802][T11048] netlink: 'syz.4.1474': attribute type 1 has an invalid length. [ 249.051328][T11048] netlink: 'syz.4.1474': attribute type 3 has an invalid length. [ 249.073050][T11048] __nla_validate_parse: 2 callbacks suppressed [ 249.073073][T11048] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1474'. [ 249.314446][T11062] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1473'. [ 249.468592][ T4615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 249.487780][ T4615] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 249.499959][ T4615] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 249.518497][ T4615] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 249.529789][ T4615] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 249.542292][ T4615] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 249.786800][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.801327][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.813765][ T60] bond0 (unregistering): Released all slaves [ 250.089738][T11067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1475'. [ 250.144369][T11073] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1475'. [ 250.174790][T11074] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1478'. [ 250.226323][T11074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1478'. [ 251.264734][ T60] hsr_slave_0: left promiscuous mode [ 251.301789][ T60] hsr_slave_1: left promiscuous mode [ 251.317271][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.325686][T11122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1488'. [ 251.335763][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.347757][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.356386][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.449769][ T60] veth1_macvtap: left promiscuous mode [ 251.455353][ T60] veth0_macvtap: left promiscuous mode [ 251.461344][ T60] veth1_vlan: left promiscuous mode [ 251.466945][ T60] veth0_vlan: left promiscuous mode [ 251.617475][ T5228] Bluetooth: hci1: command tx timeout [ 252.195832][ T60] team0 (unregistering): Port device team_slave_1 removed [ 252.249647][ T60] team0 (unregistering): Port device team_slave_0 removed [ 252.670866][T11141] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1492'. [ 252.724511][T11142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1492'. [ 252.729298][T11143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1492'. [ 253.130268][T11160] ipt_rpfilter: unknown options [ 253.185052][T11063] chnl_net:caif_netlink_parms(): no params data found [ 253.238584][T11162] openvswitch: netlink: Message has 3074 unknown bytes. [ 253.534103][T11063] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.560421][T11063] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.578236][T11063] bridge_slave_0: entered allmulticast mode [ 253.596648][T11063] bridge_slave_0: entered promiscuous mode [ 253.619107][T11063] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.651244][T11063] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.675803][T11063] bridge_slave_1: entered allmulticast mode [ 253.688041][T11063] bridge_slave_1: entered promiscuous mode [ 253.696812][ T5228] Bluetooth: hci1: command tx timeout [ 253.716575][ T58] IPVS: starting estimator thread 0... [ 253.796137][T11063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.807460][T11183] IPVS: using max 17 ests per chain, 40800 per kthread [ 253.842124][T11063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.019072][ T30] INFO: task kworker/1:1H:59 blocked for more than 143 seconds. [ 254.032463][ T30] Not tainted 6.11.0-rc1-syzkaller-00159-g16dc75e500a3 #0 [ 254.056265][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 254.065107][ T30] task:kworker/1:1H state:D stack:25648 pid:59 tgid:59 ppid:2 flags:0x00004000 [ 254.084380][ T30] Workqueue: kblockd blk_mq_requeue_work [ 254.103174][ T30] Call Trace: [ 254.115549][ T30] [ 254.125495][ T30] __schedule+0x1800/0x4a60 [ 254.143943][ T30] ? __pfx___schedule+0x10/0x10 [ 254.160976][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 254.174701][ T30] ? __pfx_lock_release+0x10/0x10 [ 254.181030][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 254.209815][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 254.215124][ T30] ? schedule+0x90/0x320 [ 254.242207][ T30] schedule+0x14b/0x320 [ 254.253847][ T30] schedule_timeout+0x1be/0x310 [ 254.263159][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 254.276370][ T30] ? __pfx_process_timeout+0x10/0x10 [ 254.281770][ T30] ? prepare_to_wait_event+0x3ba/0x400 [ 254.287587][ T30] nbd_queue_rq+0x7cd/0x2f70 [ 254.292240][ T30] ? validate_chain+0x11e/0x5900 [ 254.297600][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 254.303973][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 254.309138][ T30] ? __lock_acquire+0x137a/0x2040 [ 254.314226][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 254.321775][ T30] blk_mq_dispatch_rq_list+0xb89/0x1b30 [ 254.327918][ T30] ? sbitmap_find_bit+0x435/0x4c0 [ 254.332991][ T30] ? sbitmap_get+0x289/0x3f0 [ 254.337742][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 254.343855][ T30] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 254.349809][ T30] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 254.357071][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 254.363890][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 254.369693][ T30] ? __pfx___might_resched+0x10/0x10 [ 254.375013][ T30] ? xa_find+0x36c/0x420 [ 254.379566][ T30] ? __pfx_xa_find+0x10/0x10 [ 254.384191][ T30] blk_mq_sched_dispatch_requests+0xcb/0x140 [ 254.390286][ T30] ? blk_mq_run_hw_queue+0x54d/0xae0 [ 254.395596][ T30] blk_mq_run_hw_queue+0x576/0xae0 [ 254.401106][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 254.406571][ T30] blk_mq_run_hw_queues+0x2b6/0x360 [ 254.411816][ T30] ? __pfx_blk_mq_run_hw_queues+0x10/0x10 [ 254.418818][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 254.424094][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 254.431161][ T30] blk_mq_requeue_work+0x8b1/0x900 [ 254.436384][ T30] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 254.442064][ T30] ? process_scheduled_works+0x945/0x1830 [ 254.447974][ T30] process_scheduled_works+0xa2c/0x1830 [ 254.453596][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 254.460617][ T30] ? assign_work+0x364/0x3d0 [ 254.465252][ T30] worker_thread+0x86d/0xd40 [ 254.469947][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 254.475869][ T30] ? __kthread_parkme+0x169/0x1d0 [ 254.480941][ T30] ? __pfx_worker_thread+0x10/0x10 [ 254.486058][ T30] kthread+0x2f0/0x390 [ 254.490675][ T30] ? __pfx_worker_thread+0x10/0x10 [ 254.495812][ T30] ? __pfx_kthread+0x10/0x10 [ 254.500658][ T30] ret_from_fork+0x4b/0x80 [ 254.505106][ T30] ? __pfx_kthread+0x10/0x10 [ 254.509774][ T30] ret_from_fork_asm+0x1a/0x30 [ 254.514597][ T30] [ 254.519978][ T30] [ 254.519978][ T30] Showing all locks held in the system: [ 254.536333][ T30] 1 lock held by khungtaskd/30: [ 254.541314][ T30] #0: ffffffff8e9377a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 254.551816][ T30] 3 locks held by kworker/u8:2/35: [ 254.557500][ T30] 2 locks held by kworker/u8:3/52: [ 254.563403][ T30] 4 locks held by kworker/1:1H/59: [ 254.568712][ T30] #0: ffff888018eead48 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 254.585903][ T30] #1: ffffc9000134fd00 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 254.599773][ T30] #2: ffff88801f9df410 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 254.609468][ T30] #3: ffff888020df8180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 254.619223][ T30] 4 locks held by kworker/u8:4/60: [ 254.624342][ T30] #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 254.635441][ T30] #1: ffffc90001467d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 254.646255][ T30] #2: ffffffff8fc735d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 254.655774][ T30] #3: ffffffff8fc80148 (rtnl_mutex){+.+.}-{3:3}, at: cleanup_net+0x6af/0xcc0 [ 254.665561][ T30] 2 locks held by getty/4983: [ 254.670386][ T30] #0: ffff88802b4bf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 254.680375][ T30] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 254.690662][ T30] 2 locks held by kworker/u9:3/5232: [ 254.695962][ T30] #0: ffff8880214aa148 ((wq_completion)nbd9-recv){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 254.707448][ T30] #1: ffffc90003a4fd00 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 254.719315][ T30] 2 locks held by kworker/u9:4/5235: [ 254.724658][ T30] #0: ffff888020f73948 ((wq_completion)nbd8-recv){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 254.738161][ T30] #1: ffffc90003a6fd00 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 254.750199][ T30] 1 lock held by udevd/5277: [ 254.754816][ T30] #0: ffff888020a8e4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 254.764146][ T30] 1 lock held by syz-executor/11063: [ 254.769632][ T30] #0: ffffffff8e93cb78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 254.780627][ T30] 2 locks held by syz.3.1504/11184: [ 254.785842][ T30] #0: ffffffff8fce58b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 254.794195][ T30] #1: ffffffff8fce5768 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 254.803251][ T30] 2 locks held by syz.3.1504/11190: [ 254.808597][ T30] #0: ffffffff8fce58b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 254.817503][ T30] #1: ffffffff8fce5768 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 254.826692][ T30] 3 locks held by syz.3.1504/11195: [ 254.831913][ T30] #0: ffffffff8fce58b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 254.840213][ T30] #1: ffffffff8fce5768 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 254.850442][ T30] #2: ffffffff8fc80148 (rtnl_mutex){+.+.}-{3:3}, at: tipc_nl_bearer_enable+0x17/0x40 [ 254.860162][ T30] 2 locks held by syz.2.1505/11185: [ 254.865372][ T30] #0: ffff888054d35c08 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 254.875873][ T30] #1: ffffffff8fc80148 (rtnl_mutex){+.+.}-{3:3}, at: raw_release+0x1b8/0x8a0 [ 254.884898][ T30] 2 locks held by syz.4.1507/11204: [ 254.890234][ T30] #0: ffff88802e0de258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_setsockopt+0x754/0x1970 [ 254.900440][ T30] #1: ffffffff8e93cb78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 254.911622][ T30] [ 254.913985][ T30] ============================================= [ 254.913985][ T30] [ 254.936358][ T30] NMI backtrace for cpu 1 [ 254.940763][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc1-syzkaller-00159-g16dc75e500a3 #0 [ 254.951389][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 254.961487][ T30] Call Trace: [ 254.964791][ T30] [ 254.967743][ T30] dump_stack_lvl+0x241/0x360 [ 254.972476][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.977723][ T30] ? __pfx__printk+0x10/0x10 [ 254.982352][ T30] ? vprintk_emit+0x631/0x770 [ 254.987073][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 254.992138][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 254.997126][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 255.002643][ T30] ? _printk+0xd5/0x120 [ 255.006854][ T30] ? __pfx__printk+0x10/0x10 [ 255.011487][ T30] ? __wake_up_klogd+0xcc/0x110 [ 255.016371][ T30] ? __pfx__printk+0x10/0x10 [ 255.020999][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 255.026066][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 255.032091][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 255.038133][ T30] watchdog+0xfee/0x1030 [ 255.042428][ T30] ? watchdog+0x1ea/0x1030 [ 255.046895][ T30] ? __pfx_watchdog+0x10/0x10 [ 255.051710][ T30] kthread+0x2f0/0x390 [ 255.055816][ T30] ? __pfx_watchdog+0x10/0x10 [ 255.060529][ T30] ? __pfx_kthread+0x10/0x10 [ 255.065144][ T30] ret_from_fork+0x4b/0x80 [ 255.069577][ T30] ? __pfx_kthread+0x10/0x10 [ 255.074178][ T30] ret_from_fork_asm+0x1a/0x30 [ 255.078973][ T30] [ 255.082809][ T30] Sending NMI from CPU 1 to CPUs 0: [ 255.088142][ C0] NMI backtrace for cpu 0 [ 255.088160][ C0] CPU: 0 UID: 0 PID: 60 Comm: kworker/u8:4 Not tainted 6.11.0-rc1-syzkaller-00159-g16dc75e500a3 #0 [ 255.088182][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 255.088194][ C0] Workqueue: netns cleanup_net [ 255.088223][ C0] RIP: 0010:sysfs_remove_group+0xf4/0x2c0 [ 255.088247][ C0] Code: db 0f 84 89 00 00 00 4c 89 2c 24 49 83 c4 08 4d 89 e5 48 89 d8 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 ff f2 c2 ff 48 8b 33 <4c> 89 ff 31 d2 e8 62 24 ff ff 4c 89 e8 48 c1 e8 03 80 3c 28 00 74 [ 255.088263][ C0] RSP: 0018:ffffc90001467650 EFLAGS: 00000246 [ 255.088277][ C0] RAX: 1ffffffff1f91de8 RBX: ffffffff8fc8ef40 RCX: ffff888015fa8000 [ 255.088292][ C0] RDX: 0000000000000000 RSI: ffffffff8d0d9760 RDI: 0000000000000001 [ 255.088304][ C0] RBP: dffffc0000000000 R08: ffff8880166e68df R09: 1ffff11002cdcd1b [ 255.088317][ C0] R10: dffffc0000000000 R11: ffffed1002cdcd1c R12: ffffffff8e29cd88 [ 255.088331][ C0] R13: ffffffff8e29cd88 R14: ffffffff8d0d9440 R15: ffff88802f7175a0 [ 255.088345][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 255.088360][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 255.088373][ C0] CR2: 0000000000000000 CR3: 000000000e734000 CR4: 00000000003506f0 [ 255.088388][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 255.088399][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 255.088416][ C0] Call Trace: [ 255.088423][ C0] [ 255.088430][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 255.088459][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 255.088487][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 255.088514][ C0] ? nmi_handle+0x2a/0x5a0 [ 255.088541][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 255.088564][ C0] ? nmi_handle+0x14f/0x5a0 [ 255.088581][ C0] ? nmi_handle+0x2a/0x5a0 [ 255.088609][ C0] ? sysfs_remove_group+0xf4/0x2c0 [ 255.088629][ C0] ? default_do_nmi+0x63/0x160 [ 255.088648][ C0] ? exc_nmi+0x123/0x1f0 [ 255.088664][ C0] ? end_repeat_nmi+0xf/0x53 [ 255.088689][ C0] ? sysfs_remove_group+0xf4/0x2c0 [ 255.088710][ C0] ? sysfs_remove_group+0xf4/0x2c0 [ 255.088731][ C0] ? sysfs_remove_group+0xf4/0x2c0 [ 255.088752][ C0] [ 255.088757][ C0] [ 255.088767][ C0] sysfs_remove_groups+0x54/0xb0 [ 255.088789][ C0] device_remove_attrs+0x23a/0x290 [ 255.088819][ C0] ? __pfx_device_remove_attrs+0x10/0x10 [ 255.088849][ C0] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 255.088876][ C0] device_del+0x572/0x9b0 [ 255.088907][ C0] ? __pfx_device_del+0x10/0x10 [ 255.088935][ C0] ? netdev_unregister_kobject+0x178/0x250 [ 255.088962][ C0] unregister_netdevice_many_notify+0x1709/0x1c40 [ 255.088992][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 255.089013][ C0] ? net_generic+0x1f/0x240 [ 255.089037][ C0] ? __pfx_lock_release+0x10/0x10 [ 255.089060][ C0] ? vxlan_exit_batch_rtnl+0x36f/0x400 [ 255.089099][ C0] ? nexthop_net_exit_batch_rtnl+0x100/0x150 [ 255.089129][ C0] cleanup_net+0x75d/0xcc0 [ 255.089158][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 255.089189][ C0] ? process_scheduled_works+0x945/0x1830 [ 255.089213][ C0] process_scheduled_works+0xa2c/0x1830 [ 255.089254][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 255.089283][ C0] ? assign_work+0x364/0x3d0 [ 255.089309][ C0] worker_thread+0x86d/0xd40 [ 255.089342][ C0] ? __kthread_parkme+0x169/0x1d0 [ 255.089369][ C0] ? __pfx_worker_thread+0x10/0x10 [ 255.089393][ C0] kthread+0x2f0/0x390 [ 255.089409][ C0] ? __pfx_worker_thread+0x10/0x10 [ 255.089438][ C0] ? __pfx_kthread+0x10/0x10 [ 255.089455][ C0] ret_from_fork+0x4b/0x80 [ 255.089480][ C0] ? __pfx_kthread+0x10/0x10 [ 255.089496][ C0] ret_from_fork_asm+0x1a/0x30 [ 255.089531][ C0] [ 255.500528][T11195] tipc: Enabling of bearer rejected, failed to enable media [ 255.512006][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 255.518915][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc1-syzkaller-00159-g16dc75e500a3 #0 [ 255.529447][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 255.539541][ T30] Call Trace: [ 255.542846][ T30] [ 255.545797][ T30] dump_stack_lvl+0x241/0x360 [ 255.550515][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.555749][ T30] ? __pfx__printk+0x10/0x10 [ 255.560376][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 255.566402][ T30] ? vscnprintf+0x5d/0x90 [ 255.570777][ T30] panic+0x349/0x860 [ 255.574716][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 255.580920][ T30] ? __pfx_panic+0x10/0x10 [ 255.585378][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 255.590874][ T30] ? __irq_work_queue_local+0x137/0x410 [ 255.596467][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 255.601939][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 255.608142][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 255.614330][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 255.620531][ T30] watchdog+0x102d/0x1030 [ 255.624917][ T30] ? watchdog+0x1ea/0x1030 [ 255.629355][ T30] ? __pfx_watchdog+0x10/0x10 [ 255.634068][ T30] kthread+0x2f0/0x390 [ 255.638143][ T30] ? __pfx_watchdog+0x10/0x10 [ 255.642854][ T30] ? __pfx_kthread+0x10/0x10 [ 255.647461][ T30] ret_from_fork+0x4b/0x80 [ 255.651904][ T30] ? __pfx_kthread+0x10/0x10 [ 255.656508][ T30] ret_from_fork_asm+0x1a/0x30 [ 255.661379][ T30] [ 255.664728][ T30] Kernel Offset: disabled [ 255.669055][ T30] Rebooting in 86400 seconds..