last executing test programs: 1m18.237558211s ago: executing program 0 (id=1125): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@gettclass={0x24, 0x2a, 0x4, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0x2}, {0xe, 0xffff}, {0xe, 0x10}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xfff4}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @loopback}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xff}]}}]}, 0x44}}, 0x44050) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m5.710016259s ago: executing program 0 (id=1125): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@gettclass={0x24, 0x2a, 0x4, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0x2}, {0xe, 0xffff}, {0xe, 0x10}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xfff4}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @loopback}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xff}]}}]}, 0x44}}, 0x44050) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 56.938280268s ago: executing program 3 (id=2636): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r1, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x300048c0) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r1, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x300048c0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x4c, r4, 0x5, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="f2df48165621"}, @crypto_settings=[@NL80211_ATTR_PMK={0x24, 0xfe, "75e56d3c77525e9c63160b689fb2eb1447c1b47ea7f853900fc7caa09bdb81bc"}]]}, 0x4c}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x4c, r4, 0x5, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="f2df48165621"}, @crypto_settings=[@NL80211_ATTR_PMK={0x24, 0xfe, "75e56d3c77525e9c63160b689fb2eb1447c1b47ea7f853900fc7caa09bdb81bc"}]]}, 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r3) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x20000041) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) sendmsg$NFC_CMD_GET_TARGET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r7) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r7) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r7) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="0100000000800000000007"], 0x1c}}, 0x80) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="0100000000800000000007"], 0x1c}}, 0x80) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r9) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x1c, r10, 0x852dd6c070cd7e4d, 0xffdfffff, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}]}, 0x1c}, 0x4, 0xfd, 0x0, 0x10}, 0x0) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000025bd7000fedbdf250d00000008000c00030000000c000600030000000100000008000300", @ANYRES32=r12, @ANYBLOB="050001000200000000000d000c000100000008000300000000000000", @ANYRES32=0x0, @ANYBLOB="08000c000400000008000c0001000000"], 0x60}, 0x1, 0x0, 0x0, 0x20008001}, 0x40804) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), r0) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), r0) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, 0x0, 0x4000000) 56.690443061s ago: executing program 3 (id=2641): r0 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1, 0xe000000}]}]}}, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETUID(r4, 0x891a, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c1000007e6b75c91b7d4800080080000000002abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="a5fdad88ec4200000a000100bbbbbbbbbbbb0000"], 0x2c}}, 0x0) 53.652413877s ago: executing program 0 (id=1125): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@gettclass={0x24, 0x2a, 0x4, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0x2}, {0xe, 0xffff}, {0xe, 0x10}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xfff4}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @loopback}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xff}]}}]}, 0x44}}, 0x44050) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 46.085597354s ago: executing program 3 (id=2641): r0 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1, 0xe000000}]}]}}, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETUID(r4, 0x891a, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c1000007e6b75c91b7d4800080080000000002abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="a5fdad88ec4200000a000100bbbbbbbbbbbb0000"], 0x2c}}, 0x0) 36.82871001s ago: executing program 0 (id=1125): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@gettclass={0x24, 0x2a, 0x4, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0x2}, {0xe, 0xffff}, {0xe, 0x10}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xfff4}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @loopback}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xff}]}}]}, 0x44}}, 0x44050) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 34.886123471s ago: executing program 3 (id=2641): r0 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1, 0xe000000}]}]}}, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETUID(r4, 0x891a, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c1000007e6b75c91b7d4800080080000000002abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="a5fdad88ec4200000a000100bbbbbbbbbbbb0000"], 0x2c}}, 0x0) 17.692173006s ago: executing program 0 (id=1125): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@gettclass={0x24, 0x2a, 0x4, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0x2}, {0xe, 0xffff}, {0xe, 0x10}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xfff4}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @loopback}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xff}]}}]}, 0x44}}, 0x44050) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16.531979258s ago: executing program 3 (id=2641): r0 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1, 0xe000000}]}]}}, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETUID(r4, 0x891a, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c1000007e6b75c91b7d4800080080000000002abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="a5fdad88ec4200000a000100bbbbbbbbbbbb0000"], 0x2c}}, 0x0) 3.168400285s ago: executing program 1 (id=3034): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) (async) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) (async) r1 = accept(r0, &(0x7f0000000140)=@nl, &(0x7f0000000000)=0x80) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb4, r2, 0x210, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x68, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "287a499fa84cd7f57a8d0a72b5"}, @NL80211_KEY_DEFAULT_TYPES={0x2c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "d754e19ed5f4c891fd837d83ae"}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x24040000) (async) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000004e40)="0349ee47070c03607b5bae292ac8b762044157dd1ea30758ca9a7bfbd23efe5ba3cf173f0478438cbae7a57fe81ae074996dfd64d0c8db1c53c331a33a95a0d2cb94d0cd09f710c11df6be5cc730821bae016a0ea4073e7e4bd62cc1aff09c799d1ebe2a8388a02e50dd19c4b7b1e91a0a1d8904b32b45710d16dc796b719e7adabac89602c834ff01f6b5839643d5a2d8edb9d77af834a7fb82c2fdbdedbab80f961971ed25e2cee13220d342969544a6ce40ead993604e38deb309b330177ed7d23f919596f483ece2d540a95568272a0e879281d83615f589c89e1a7b0cea2a2fac406dbe67256f354a79cb99de0f7e1f4aa617405f284bca8cea6048f1155a89e98746e6912a7509caca768fd2b1ae942cce6a29d848f660b18ca860f9e5f9d95562c4a19fdd9b59932a453a934f0b98fa91129d29dfa2f8f21424c590ed8fe31a79ba09ef72c497ddd5ce7826e096e30746772e34cfc47e9eb5b56187132d87702b56e40d6751a58f9e6aa732d610f7aa631759a3afa266f730a0ee4a8d93555ba710d1bfb9ea4d633faee1529b8565af53eb34cfaca3e31dda587c2be2df3fe5a5a0e2a500eb8cc40db50854a6ec225fca2900148eb7a83c9189cedd69b7eb874f92f00f7635510d2dc062cfcfd8c9a473ac15c7ffbcc56399f6150750d7090917358870f16f684528a9d69bac3046256ad4e101073115712a89b0dd76fe5e8648696ce8dfe82b3220807dd7a446cd158fdf9426b7ddab8584eefb4152d25757e2642b77a21b364327ea38e911f60e6e6718730942c1db47cf80f16aac0950a5c2d412c620b526dca7f601a25b0089f69652889f0ac0667980d074e48dd8d20096097b772317cb8ba11531bd353d584f278e5b2565456f4997f73541add2e336a9beba29baeea7df3bbc5ad5f00c7c6f3c1ba93fbc1dba159497752eefa611d14f26b7c9a07aacda2e9b7572ea3fa66f67c04ee30f0e8f94038c01de81689c12fc44c71ed2b93b31ddc0d9acf62e6e9d71699d0d987ae87c529fcd79ab48433a43ed86d09095bf8d9798f80bbdd36d4ddeb90e752ac9e96079cfa4595daaed34df23e3771b791f3a54f86be3fe4a41f41c8d0f3a28cac2bf926eb95c8badf9fd2d0eb767664872417a08dade17937cadc00a8e3afe349d0e7a3cdfc1b1af108a7a5142a2b5832e99aff5ef27b525d4ea83d1523210c6cc673bcf42cc2e4561d2e8abad128992074d0aaa467eae584f62d347b70fa4f282f463ea0c916ec2e5b8490c87347bc70a11e9748a844d45cc744847e89acbb2e0bc03014c4865d426f52a460b1c0354fb90e4b882e23b674606737e5b878d1f18628f8f2389a071b0d2c64bcdb634b59e2effaabed7ee7812002956e776c039b16bd1cb0b663f4c8a16ad422856f7e6de282b33f268ff11f7972678bd337373b399e514c4dbebfcb812edc05f0e60b68df71682244b458009b85ee038722fc4b6b0c322d6d59ae9d290870d9c86707ad7f080f53d883454526ca942d6b6232cac0b378f0f2bb5209d93e2487a80a9677ac6b850d88cf1f8d47a5f5b534ad4cbf459235fd3662513ac1c53f0ba321b3cf9ede7b9a7e712fc5bf0b17cd164ef34178b3b06ec995106af31c7ffbe5a2bda35a9df9cd31d877d304dd1bd16caf5560ed991dadf378d9deb8f495b0d084ff28f871dbf36ac9e41e91448b3e515dc6acd7b61589c10bb0e68dc10eef57e9e59aaba78c04c59c6f8c1d860227133fca4ff352634eb6caad1afbbbfe47fa2646819ec282ca1fb73bcbbc7315782e574b2fb1e842ed83862f9fc380a7e92b3c02af1", 0x50a}, {&(0x7f0000002640)="67bc1270103215f70b9f2603356704de3f11ad536ac56c6f09b31d750a398764a2f7b7b27c48446c315fff2cbbe5cec1650a8654e49f14", 0x37}], 0x2}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)="3912c1d03d9f66103940872256d8995b00c720af0cfa51b2b3b1448411fe107e64af467c85a200ebafdbee2c35b8ad1677fe7bb27ca22acbe83c449484972354b3baa1809633e690474a9154f95bd6874f20a0b290c590d44a9f5cd01414544ad719b82a550f2a7215e33e2dfdc1ce61a75637323b8828c5e5ef1f77b3d93114d46ceddb9d976eea7e20bb95e24e1e8b9974397bb8d73856a38618eac0ab333267fc833503b4df7838f5e522192252f4fd72ae45d21b55414a82ec84ff620a1ee2fe4691573a8afc79adaac5f0618cb457b14013f9e048cdec329a9e3343140213a41330b43e3290ef836c8839b303f0639a7561361247db2646977014051dcf3dc1246225f9aae3ca02943571bb39ecfdfa5b9ebc30a0476103c6133c7da6313848373c719a1f43ba5a765b8aa97caf7717fa063166951aa4e72d5616e6b42d6866fb308970430b2ff44c25b7dde2494389d1717c83f83ac7a632da0472bd6b0295b9f1fd1fc43099b1062bef744785158264f636cbf13926e7fcde7ebc1560a20961df3286df51b246ee7fe9474a8d51498bd90230bc89ea8dccb85035edd01aa93ed2f82297c3c3703990cb5201c7b92a04ea7abf9a36a488369161a9bfa42664d84860974fddbabed7eb509350917a3bbd427fe226bd1dd34275dfd3882c0a7d711641babb2e36d9637c0b33a41a3578861d75e7e93c22ee94e9594258dc186ec2d749cad6e03b767555610c200efb5f104f91be7fb2513c97f3f279da2baedf7f91ed97ae33edef2ab348dded9df075b1ca5855866843aff902b6678075cb4a3d988ffd8ed61885400d1bcf6dc38c6be9b6428d4eba30711556510eb41b5c04590f11e393317a4fc988b39ecdbe322344c5ec4ed178e1dd35182a00f3ac345bfeea9936b6a015151332962bd28c5e1dbcdd825d51c78ef6db73170d9cfd47f2ca210ce8c103d37be1c61427bd3cf1bb5bcf9888f6e1631f404ea51f9cd8e0725459f9a531af19e2b533532f0b66fb5e9614d0895d35ccda358ac482a824fe67165bdaedcda5ddd86924c4fe5f22a043f92aed7a105fb54ec323273e660c17b8ae89d1546022320711ae0cab37564fc6b394f39e0b216227fa74b76c2a020d42f167891cbaf960fc0288547f2d31dceff3787135659a65878e5df65ce0004104a665098be576ebaf3733b6ba57e40f40ac74aad7d8b41db0f55513389faa84b1ce0fafed7018bcc5a687118bfab115b7a3163fb22af534406206065acf06066a5fb65f0b928cd25838c0c1a7b06bc42e622f502e515b87426b2a184b593bf35a4d454dc56881bbda1b9350f956e086196447a5052288aa0556e638d292bfd1abad58ef5db98f92694b30c3eda5b25a44688b24eadf579616c034ef688fad705c3dc99aafda0f7bbb591fd20e0ff96e8941188b9676b833aa91ba5ab1cf7acbdf16f14c843dd3cfeedf8e7628051f361ba328496c8a05aa68997257cb505dba270e132c437bc6df39134b0807fea53ecb84714ab0d9d8cda271e15bddac37ae4e0534322d649b74c90499919b771679c7211b4df2c80864809991750f966f52d217f63e80b7142b9205576133469a0a950060cd2fa0c25554b89900ebb6a991954990adeee517e55ff3abe4f3f7c07cb735b80be674d53ccc5bef27421c7bb602c7f22dde056ae0c85086f9850fe6a7dd108fd29c7f99f3d1316da10415b2e4e029762a39369cd8738e0a840690c5e2167099a6c1d59a6cc8827630b699da0d592e01c2db8af46daa48575fc2f4eeca2c3abf26ec776906572e712c6f0c57ec39ab4e004d994a341570a6e117edc13626aeaf794266a0f3103c84ae1300e6928b749cce7a1ba4e7609ceca262324cbc503cde9c897848a015c4d7cdb02cfc0c", 0x541}, {0x0}, {0x0}, {0x0}, {&(0x7f0000002680)="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", 0x1000}, {&(0x7f0000003680)="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", 0x1000}], 0x6}}], 0x2, 0x8090) (async) shutdown(r0, 0x1) 3.030907509s ago: executing program 1 (id=3035): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002580)={0x0, 0x0}, &(0x7f00000025c0)=0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@deltfilter={0x3c, 0x2d, 0x1, 0x78bd31, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0x3}, {0x0, 0xffff}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x20044000) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x3c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r10}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x11, 0x10d, 0x0, 0x1, [@generic="905176c518740da397a9423603"]}]}]}, 0x3c}], 0x1}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000039c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003980)={&(0x7f0000002600)=@acquire={0x1370, 0x17, 0x300, 0x70bd2a, 0x25dfdbfe, {{@in=@multicast2, 0x4d4, 0xd4}, @in=@loopback, {@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x2, 0x0}, 0x4e24, 0x7e, 0x4e22, 0x1, 0xa, 0x80, 0x20, 0x3c, r3, r4}, {{@in=@remote, @in=@dev={0xac, 0x14, 0x14, 0x16}, 0x4e24, 0x9c, 0x4e24, 0xfff, 0x2, 0xa0, 0xa0, 0x2e, r7, r10}, {0x9, 0x0, 0x5, 0x101, 0xc, 0x4, 0x5, 0x8}, {0xffffffffffffffff, 0xeb3c, 0xfffffffffffffffa, 0x6}, 0x0, 0x6e6bb6, 0x0, 0x1, 0x3, 0x1}, 0x10, 0x6, 0x401, 0x70bd28}, [@tmpl={0x44, 0x5, [{{@in6=@mcast1, 0x4d6, 0x3c}, 0xa, @in=@local, 0x3504, 0x1, 0x3, 0xc0, 0x1ff, 0xd, 0x2}]}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @XFRMA_SET_MARK={0x8, 0x1d, 0x9}, @coaddr={0x14, 0xe, @in=@empty}, @tmpl={0x144, 0x5, [{{@in=@rand_addr=0x64010100, 0x4d4, 0x2b}, 0xa, @in6=@remote, 0x3504, 0x0, 0x3, 0x7, 0x6, 0x80000000, 0x10001}, {{@in6=@mcast1, 0x4d2, 0xff}, 0x2, @in=@local, 0x0, 0x0, 0x2, 0xf7, 0x3, 0x7980, 0xffff}, {{@in6=@private0, 0x4d3, 0x6c}, 0xa, @in=@multicast1, 0x3505, 0x4, 0x3, 0x4, 0x8001, 0x0, 0x5}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d5, 0xff}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x3501, 0x1, 0x1, 0x3, 0x63, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x3c}, 0x2, @in6=@mcast2, 0x34ff, 0x3, 0x2, 0x10, 0x7f, 0x0, 0xfffffffd}]}, @replay_esn_val={0x24, 0x17, {0x2, 0x70bd2c, 0x70bd26, 0x70bd2a, 0x70bd2c, 0x1, [0x32, 0x6]}}, @algo_aead={0x104c, 0x12, {{'morus1280-generic\x00'}, 0x8000, 0xa0, "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"}}, @etimer_thresh={0x8, 0xc, 0xfc1}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e23, 0x4e23, @in6=@local}}, @etimer_thresh={0x8, 0xc, 0x568e}]}, 0x1370}}, 0x24040) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002140)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x10, 0x4}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r11}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$netlink(0x10, 0x3, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r13, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000140)=ANY=[@ANYBLOB="56be6d5a92dbf0913d89d6d9120c6833bde4c3c5a5988367966bab12122f9f5fcf4faa0dfa80e00909cacae8a07f34d758a7ffebb32c165c1dfeef4b75474d44643522f4768931d45104f3baed263dc949831509bc7942210cf7000c45529ecd5168ae1c84619b64265c6afe", @ANYRES16=0x0, @ANYBLOB="000000000000000000000e000000"], 0x14}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r14, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r15 = socket$alg(0x26, 0x5, 0x0) bind$alg(r15, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r16 = accept4(r15, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r16, 0x89f0, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x29, 0xfd, 0xf0, 0x6, 0x0, @empty, @loopback, 0x40, 0x80, 0x5, 0x400}}) 2.958673856s ago: executing program 2 (id=3036): r0 = socket$igmp(0x2, 0x3, 0x2) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@mcast2, 0x0}, &(0x7f0000000040)=0x14) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0xd, 0xbd9, @vifc_lcl_ifindex=r1, @multicast1}, 0x10) 2.82101442s ago: executing program 0 (id=1125): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@gettclass={0x24, 0x2a, 0x4, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0x2}, {0xe, 0xffff}, {0xe, 0x10}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xfff4}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @loopback}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xff}]}}]}, 0x44}}, 0x44050) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.777984842s ago: executing program 2 (id=3038): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x4, [@decl_tag={0x5, 0x0, 0x0, 0x11, 0x1, 0xffffffffffffffff}, @volatile={0xb, 0x0, 0x0, 0x9, 0x1}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x41, 0x0, 0x41, 0x2}, @enum64={0x7, 0x5, 0x0, 0x13, 0x0, 0x2, [{0x5, 0x6, 0x7fff}, {0x3, 0x2, 0x4}, {0xb, 0x1, 0x5}, {0x2, 0x5, 0x1}, {0x3, 0x8, 0x6}]}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x5, 0x7}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0xd7}}]}, {0x0, [0x1e, 0x6f]}}, &(0x7f0000000140)=""/193, 0xb8, 0xc1, 0x0, 0x4, 0x0, @void, @value}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendto(r3, &(0x7f00000003c0)="4d4ab0e56c3d020ff00d2f2e7cc554f647a9bee74d9cc6362149515ebbf749647d35f18bef03ea011624cc0ca74eeb962a3d2d2d12c2671d4a590f8822711e252d4f7419c1ec06550da329f0ac831d1e2d1911eed1d643d22bee4f236ad690869cbae5b548c465e738b780d74d94fa1744bb856229482cfef910b483c04878", 0x7f, 0x2004c0c4, &(0x7f0000000440)=@in6={0xa, 0x4e23, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10001}, 0x80) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="49723b3ab53a13274c", 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xf, 0x1b, &(0x7f0000000240)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x46}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xc}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @generic={0x3, 0x6, 0x0, 0x1, 0x7}, @map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6a}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.772658165s ago: executing program 4 (id=3039): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071123400000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$sock(r0, &(0x7f0000000780)={&(0x7f0000000280)=@pppoe={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, 'veth0_to_hsr\x00'}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000300)="84819d77509a729488a634cee2473deb3c1ffe9a179646f30d9945cb2fe09a158b46aeeb35f242b19dc09c1106770d0625fa9b76b2a9f3d39c62485efd99b10f9d8759b534f336e9e5fbc3e3f32f89dd3b017da8297f2676a20c1cb2df5ad7076f7bdaa3d397e8598c39fc27838f4893f87992a4fe0e0193a3c836691ed594ebd5c51a83c891c5c2d2845f6ee39f26e3fab5467495414a8ee4e463fee8b5e297000f5c3f376853f5256a4f9c164d96114ccff2d074", 0xb5}, {&(0x7f00000003c0)="f7083c6eb2861958b616035ebb6f3bfd829ff08432d66492ef1382882d0746d2b992eeb086f03272aefbe97d24f08f479b28e1c279a17ed51d9095fe687573d65a0d1f963c82754aafa35a58cd9b412c5674037b84d0719b8bb6193ce8f8e5ecf1c095b395af157ada14a25cc3295ca4882d6fdfedb76e64eb5d112287eb17f2113f2e9a1617dea2d34170bfa944a6b7f9966168ce0c6becb4b7f11ac34bc252ade7ca718087173279ff654385f6c8211aee4a3b7678", 0xb6}, {&(0x7f0000000180)="49497af535d1143209a7ea7291fcb07a75bdece031147bc0119c66991e9e4417abae4e9d99fd4fcb92", 0x29}, {&(0x7f0000000480)="d62573ae9ceb536d318ebab292288de0cc263ff3423877f290069d54fd6495b46749b2bd9c40f3505f823ab2562f9815deae70ceca17566d3e475f2542443ec95cbbb03cf65cdc5d4131ca05a2f9236b790f081dcdb16a05ceac0b209b80fb35", 0x60}, {&(0x7f0000000600)="49676da5c4699e5aefd347f24e718342fe64c82f4f68358d980fe295e97412d447f5ccb0010a8208c9571ef4579b2037b33e8ce7e9efcad77d9ff1fe64eb31ee9154bb7d5f40252bd53a3692b4f565204ad693f0e1b8d0ab51f590a3f95fc1f06e522e42b435df4bf9e2b6adb9be725451779a7cdaccead6bb60b9791c108e9192d8357e6d37e76fd4cf1aae617f9722ab15eb7095d404b0de096f99ff4b2e3ccc7161e342d483e24a8e753039e9b461752b4514d393a730c6ce4507e8b7d496bacde60c0fdae992d75025e724fdfa422b4f41", 0xd3}, {&(0x7f0000000500)="f22503e8bf4e6da9ca8336e94edfe733001ae384b127def03fb665836af21ea7cf16ae69a0e1d84e110f18790de8d259c3d17570389648cb282ea23c37e28b331f95632b41f97967c93a5801c2849f8a65b8", 0x52}], 0x6, &(0x7f0000000580)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x30}, 0x4814) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x20, 0x40, 0x7f, 0x8, {{0x15, 0x4, 0x1, 0x9, 0x54, 0x66, 0x0, 0x87, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, {[@timestamp_addr={0x44, 0x24, 0xa8, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@remote, 0x7}, {@empty, 0x3}, {@multicast1, 0x6}]}, @rr={0x7, 0xf, 0xb4, [@rand_addr=0x64010101, @empty, @local]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0x12, [@local]}]}}}}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0x1) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x4000) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) listen(r3, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000001c40)=@bpq0, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8b7, '\x00', r1, r2, 0x5, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) 1.610834554s ago: executing program 1 (id=3040): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = accept4$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x10, 0x69b41fffcc39e6e6) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000200)) sendto$inet(r2, &(0x7f0000000040)="d100766bf256da05ffbea3e6dda3e896874875fc024f476d24b19cb6babbfcc76e5f22eac69708003a", 0x29, 0x0, &(0x7f0000000340)={0x2, 0x4e1c, @rand_addr=0x64010100}, 0x10) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x4e20, @multicast1=0xe000cc02}}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x8, 0x20, 0x0, 0x4}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000003c0)={r4, @in={{0x2, 0x4e23, @multicast2}}, [0x81, 0x0, 0xe2fa, 0x5, 0x5, 0x2, 0x263, 0x7, 0xfffffffffffffffa, 0x0, 0x5, 0x49e9, 0x1fb, 0x0, 0x7]}, &(0x7f00000000c0)=0x100) 1.609905499s ago: executing program 2 (id=3041): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd603000bb00082b00fc020000000000000000000000000000fe8000000000000000000000000000aa000000000008907856ccf095e1bba50760a1c3579f97ce2eec"], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0xac8}, 0x1, 0x0, 0x0, 0x40}, 0x20000001) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x15, 0xa, 0x301, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40048c0}, 0xd0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x3c, r4, 0x8007023327f40d31, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@key_params, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MAC={0xa, 0x6, @random="53c97c97e8a8"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000010) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000200)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0xb) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r9, @ANYBLOB="08002600b40900000800270000000000050018013c0000000800a100000000e5a5af15"], 0x3c}}, 0x0) r10 = getpid() r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x7a44, 0x1700) ioctl$FS_IOC_RESVSP(r11, 0x40305829, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6}) r12 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r4, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xc, 0x60}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r10}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r11}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x13}, @NL80211_ATTR_PID={0x8, 0x52, r12}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000100)={'wg1\x00'}) 1.606815576s ago: executing program 3 (id=2641): r0 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1, 0xe000000}]}]}}, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETUID(r4, 0x891a, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c1000007e6b75c91b7d4800080080000000002abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="a5fdad88ec4200000a000100bbbbbbbbbbbb0000"], 0x2c}}, 0x0) 1.04980767s ago: executing program 4 (id=3042): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000007110ab0000000000950000000008000000"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040810}, 0x8011) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d000000040000000200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000080000000000000000f6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r2}, 0x20) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x9, 0xe0fc, 0x7, 0x69208, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2, 0xf, @value, @void, @void, @value}, 0x50) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x1, 0x8}, {}, {0xb, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0xf507}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_XOR={0x8, 0x7, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x408c014) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1d, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000500000000000000ce19032395000000003f7c75"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, &(0x7f00000000c0), 0x40f00, 0x24, '\x00', r10, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x9, 0xffffffff}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0x2, 0x1, 0x3}, 0x10, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000600)=[r11], &(0x7f0000000640)=[{0x3, 0x3, 0xe, 0xa}, {0x5, 0x1, 0xe}], 0x10, 0x9, @void, @value}, 0x94) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@jmp={0x5, 0x1, 0x7, 0x0, 0x5, 0x8, 0x4}, @generic={0x9, 0x3, 0x7, 0x2, 0xeabc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0xf7, 0x19, &(0x7f0000000900)=""/25, 0x40f00, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000980)={0x2, 0x0, 0x4, 0x46d}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000f80)=[r11, r5, 0xffffffffffffffff, r1, r4], &(0x7f0000000fc0)=[{0x5, 0x2, 0xd}, {0x5, 0x4, 0x8, 0x8}, {0x5, 0x1, 0xe, 0x3}], 0x10, 0x6, @void, @value}, 0x94) r13 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r13) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@map=r13, 0x14, 0x1, 0x3, &(0x7f00000000c0)=[0x0], 0x1, 0x0, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r14 = openat$cgroup_ro(r0, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r15 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r15, 0x107, 0x12, &(0x7f0000000280)={0x0, 0x9003}, 0x4) close(r14) ioctl$TUNDETACHFILTER(r14, 0x401054d6, 0x0) 856.974868ms ago: executing program 2 (id=3043): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f00000001c0)={0x9, 0x91}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='veth1_vlan\x00', 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='sched_kthread_stop\x00', r2}, 0x18) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000140)={0x5e, 0x0, 0xa, 0x400000b, 0x36, 0x81}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r4, 0x800, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x1}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0xf7}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$OSF_MSG_ADD(r6, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x4bc, 0x0, 0x5, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [{{0x254, 0x1, {{0x2, 0x3}, 0x5, 0x3, 0x3, 0x4, 0x1f, 'syz0\x00', "682bb4b92fb7004c98d93ed0ed64779ad846cc5f95d940063af7dcad15723d7f", "43536f1707d2d3d8d86cfa51a43f9ead51a4c77ef7c2070b77a29ce404e952ea", [{0x10, 0x3, {0x1, 0x6}}, {0xd, 0x9, {0x0, 0x200}}, {0x6, 0x1000, {0x94afea607e367229, 0x3}}, {0x1, 0x6, {0x1, 0x8}}, {0x3, 0xab, {0x0, 0x3}}, {0xffe3, 0x1, {0x3, 0x2}}, {0x4, 0x8, {0x0, 0x6}}, {0x0, 0x5, {0x3, 0x80000000}}, {0x4, 0x6dc, {0x1, 0x2b8}}, {0x3ff, 0x3cf, {0x2, 0x78}}, {0x10, 0x5, {0x2, 0x9}}, {0x765, 0xf, {0x0, 0x8}}, {0x7, 0x6712, {0x0, 0x7}}, {0x9, 0x7, {0x3, 0x3}}, {0x8000, 0x0, {0x2, 0x7}}, {0x2, 0xde1, {0x2, 0x1}}, {0x7, 0xce5d, {0x1, 0x2}}, {0x9eb, 0x2, {0x2, 0x1}}, {0x3, 0x2, {0x1, 0x4}}, {0xda0, 0x7, {0x3, 0x101}}, {0x101, 0x8001, {0x1, 0x7}}, {0xd, 0x5, {0x2, 0x7f}}, {0x4b, 0x3, {0x1, 0x8}}, {0x2, 0x679, {0x3, 0xd}}, {0x1208, 0x3, {0x3, 0x9}}, {0x8, 0x7, {0x0, 0xa401}}, {0x4b5, 0x4, {0x1, 0x7}}, {0x8000, 0xfff8, {0x2, 0x4}}, {0xfbfe, 0xcb, {0x2, 0x4}}, {0xfff9, 0x8, {0x0, 0x4}}, {0x8831, 0x9, {0x1, 0x5}}, {0x6, 0x7, {0x1, 0x6}}, {0xc1, 0x0, {0x0, 0x401}}, {0x7, 0x2, {0x3, 0x2}}, {0x4, 0xb6, {0x3, 0x45e}}, {0x0, 0xb, {0x0, 0x94a1}}, {0x3, 0x6, {0x3, 0xbb89}}, {0x96b, 0xe, {0x1, 0x3}}, {0x3b01, 0x4, {0x3, 0x6}}, {0xd6, 0x3, {0x3, 0x51c}}]}}}, {{0x254, 0x1, {{0x1, 0x1}, 0x6, 0x9, 0x7ff, 0x2, 0x9, 'syz0\x00', "23221e2d4f065064e15394414d808f1a6f557b6b014bdd85b9b7cce7c071a6a2", "4de1b8500ee2c5acb6223659539a6d29d1bb4d2009e0cef6d4784506a8cddd01", [{0x81, 0x800, {0x1}}, {0x6, 0x8000, {0x2, 0x6710}}, {0x8, 0x0, {0x3, 0x4009}}, {0x6, 0x2, {0x2, 0x9}}, {0x8ddc, 0x73e, {0x1, 0x3}}, {0x40, 0x5e37, {0x3, 0xfa56}}, {0x3, 0x200, {0x1, 0xfffffff1}}, {0x7, 0x7, {0x2, 0xf}}, {0x8, 0x9, {0x0, 0x5}}, {0x9, 0x3, {0x2, 0xf44c}}, {0xd, 0x0, {0x1, 0x2}}, {0x7, 0x2, {0x0, 0x10000}}, {0x9, 0xe, {0x3, 0x3}}, {0x33, 0x1, {0x2}}, {0x8, 0x9, {0x0, 0x10000}}, {0xd28, 0x81, {0x1, 0xb}}, {0x4, 0x6959, {0x0, 0x9}}, {0x6, 0xef62, {0x1, 0x2}}, {0xfc5f, 0x0, {0x1, 0x7}}, {0x2, 0x4, {0x1, 0x7}}, {0x10, 0xc0, {0x4, 0xffff}}, {0x2, 0x6, {0x1, 0x3}}, {0x3, 0x2, {0x2, 0x3}}, {0x8, 0x6, {0x0, 0xdd}}, {0x1, 0x6, {0x3, 0x7}}, {0xfff0, 0x9, {0x1, 0x81}}, {0x0, 0x9, {0x0, 0x6}}, {0x6fc, 0xfff, {0x0, 0x125}}, {0x53, 0x4, {0x3, 0xd}}, {0x2d32, 0x1, {0x1, 0x8000}}, {0x100, 0x7, {0x2, 0xf}}, {0x7, 0x74, {0x0, 0x2}}, {0x8000, 0x200, {0x2, 0x9}}, {0x1, 0x6, {0x3, 0x186}}, {0xfff6, 0x8001, {0x1, 0x8}}, {0x7ff, 0xfffc, {0x0, 0xb}}, {0xa9fb, 0x7e0b, {0x2, 0x7}}, {0x5, 0x0, {0x1, 0x4}}, {0x16a1, 0x6}, {0x2, 0x4, {0x3, 0x8}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x800}, 0x80) 817.468626ms ago: executing program 1 (id=3044): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a540000d90200000100000480240001800b000100736f636b65740000140002800800023f00000000080001"], 0x7c}}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001700)={0x58, r1, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac02}]}]}, 0x58}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001700)={0x58, r1, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac02}]}]}, 0x58}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e0000"], 0x50}}, 0x4000000) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e0000"], 0x50}}, 0x4000000) 634.084916ms ago: executing program 4 (id=3045): socket$tipc(0x1e, 0x5, 0x0) (async) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000240)=@name={0x1e, 0x2, 0x1, {{0x41, 0x4}, 0x4}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x1}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x1}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c0000000600010200000000000000000a0000000900010073797a30000000000900030073797a3200000000140000001100010000000000000000000000000a16583b7a5ce1fab0c6b804056cdbddce52cd62"], 0x80}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c0000000600010200000000000000000a0000000900010073797a30000000000900030073797a3200000000140000001100010000000000000000000000000a16583b7a5ce1fab0c6b804056cdbddce52cd62"], 0x80}}, 0x0) sendmsg$tipc(r1, &(0x7f00000006c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x0) 597.281954ms ago: executing program 4 (id=3046): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r1, &(0x7f0000000000)={{0x3, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x34, r3, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xb, 0x1, [0xffffffff, 0xfffffffd]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8000}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc01}, 0x0) 459.908796ms ago: executing program 1 (id=3047): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r1) sendmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="939f49e3d72966113c0f05974bc7a8c44161c8dc849dcf5da0fd3dfcb948770d51ed49bae67110f589e0afdd52dc91f74bd68050523a4d85e3a0346c75b960ffb9a92e4425bc36fad92c608156f071861ef135ed51e80388dc5f1a016c06c6984a81cfb80e950d92b091d9da17e20839be8d1bf415ed46af9d84dc7e5def04acbf6e112c230e3c0ef32789c3a1bd408f4b9890aa0ed672acbe82abb487a2ea31ede8cafde234a48a82227768fa6700312892415ac4557ad5eb1e4d8914d0ad94ec8e8193f9e7d82466a01f00ffd4", 0xce}, {&(0x7f0000001540)="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", 0xf12}], 0x2}, 0x4000) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x20, 0x8000, 0x7, 0x1, {{0x29, 0x4, 0x2, 0x7, 0xa4, 0x66, 0x0, 0xb8, 0x2f, 0x0, @private=0xa010102, @loopback, {[@generic={0x44, 0xf, "04dc13e57c9804817a2d5ece39"}, @timestamp={0x44, 0x14, 0x52, 0x0, 0x7, [0xc8a, 0x8000000, 0x6, 0x5fc2]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xf, 0x28, [@empty, @multicast1, @private=0xa010101]}, @timestamp_addr={0x44, 0x24, 0x39, 0x1, 0xd, [{@multicast1, 0x2}, {@private=0xa010101, 0xf}, {@local}, {@multicast2, 0x3}]}, @timestamp_prespec={0x44, 0x1c, 0x83, 0x3, 0x9, [{@multicast1, 0x7}, {@local, 0x2}, {@multicast1, 0x1}]}, @generic={0x7, 0xc, "3a27de0361f32f7b1f7f"}, @ssrr={0x89, 0x3, 0x69}, @timestamp={0x44, 0x8, 0x7e, 0x0, 0x9, [0xf112]}]}}}}}) (async) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r3, &(0x7f0000000180)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) (async) sendto$packet(r1, &(0x7f0000000200)="7c99f301fc3f61f9ce1382b78ed53976e563212ced37d146b34893296389842a50e435f7c727add055418dc854809565dfb1fa16411aa68bcc988be26a4a7c2cac29ef851b76dfaab807f2d879a410b5eb7296113029763349353af490a004c26d745d2f36e40ed4e482462e97c74f9b49ea531131faa582669a1f8b4843ce6296961363873271c7add758764d957abacdf5d2dedaa42c41fba2102cd54020dd8def7176c444620d42180fc91fda8e527d66cfe6c4fefb9b2866e83d38c0549dd97051a3", 0xc4, 0x40, &(0x7f0000000140)={0x11, 0x9, r2, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, 0x14) (async, rerun: 32) pselect6(0x40, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r4 = socket(0x2a, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x2}, {0x0, 0x1}}}, 0x24}}, 0x4014) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@newqdisc={0xc0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4eb}, @TCA_RATE={0x6, 0x5, {0x1, 0xfb}}, @qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x7f}}, @TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3c, 0x6, 0x937, 0x0, 0x0, 0x99, 0x8, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x7, 0x3, 0x5, 0x3, 0x2, 0xffffffc0, 0x0, 0x5}}, {0xe, 0x2, [0x5, 0x1, 0xfff7, 0x4000, 0x8]}}, {{0x1c, 0x1, {0x5, 0xa, 0xffff, 0x6, 0x0, 0x4, 0x3, 0x1}}, {0x6, 0x2, [0x7]}}]}]}, 0xc0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000008c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0xc, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r7 = socket(0xa, 0x3, 0x3a) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r9, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)='o', 0x1}], 0x1}}], 0x1, 0x0) (async) setsockopt(r9, 0x84, 0x7f, &(0x7f0000000040)="010000000980ffff", 0x8) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000340), 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x7800, 0x700, 0x1, 0x0, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x66, 0x0, 0xe, 0x4, 0x0, @multicast1, @local}}}}) ioctl$SIOCRSACCEPT(r7, 0x89e3) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0700000004000000080000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\t\x00'/28], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0700000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000007db679aba16b282257aa1af9d0da1c3b4ba0712ada90e6e0affce1bb68573be0df9f6520d5bdc392624997c903c79b55d8045d6607", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) 325.624513ms ago: executing program 4 (id=3048): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000000)="f53fb1daaa51a46a9e53cf395e20e950bca4013b1aca2e7cf7bcd98c6b9b05caa24e9989c4e9baf91a63a751d2d6c6d4c5ce6dd45492015f25d9a1862fb2d528d6868992a9e8f7ac8092e1736f59d39831", 0x51, 0x4800, 0x0, 0x0) r1 = accept4$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, &(0x7f00000000c0)=0x10, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000100), &(0x7f0000000140)=0xc) r2 = socket$caif_stream(0x25, 0x1, 0x1) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000000180)="a70f57a833cac4f9a167469ea63e9588613036c7d6dfd52afc6f684b2793bf17500ebab54d", 0x25) r3 = accept4(r2, &(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000240)=0x80, 0x80000) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000280)='dctcp\x00', 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000340)={0x408, 0x13, 0x800, 0x70bd26, 0x25dfdbfe, {0x1, 0x87, 0x4, 0x17, {0x4e24, 0x4e23, [0x8, 0x7, 0x8, 0x9], [0x5, 0x9f800, 0xf, 0x7], r4, [0x9, 0xc2]}, 0xfffffffd, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x7a, 0x1, "6625950c8f8250ebc7e536850f5940eea630d801e800db002995c86c9b9c744775d40080f987c0b50b75cd228ae2699ab379829edd8c999e2a9f6030f933d20be28b44992299ae5baa4dc48b7d8631feb6fe48aa4109e4e99eef6882c24553f559728034b1ab37197e7afdff5a1d8b69e312a9316b0a"}, @INET_DIAG_REQ_BYTECODE={0xb1, 0x1, "8d7f1c7732292ee88c1771d578362b55cfe9bf28b7a2dcb81dc185dcdfdf803895e4413b85c4cf52c3a7c216756aa51ee0cb2934aeed2e575220cd8cd3b8bd88634fe211073dba5ef4aa6a6b5baa8fdb210ec549c12adec986f4d86794fd2b78c10b5aafa10ecd3ad0ecbc0b70bcdc438ced515389573c8dd5ec5b7699a7f8b2c242cb9c0ae6979102790cacfb236e3a4d6b937c6e22fe21772a871a8d157ec04af8143a0909d829d4bfc6b0c5"}, @INET_DIAG_REQ_BYTECODE={0xa1, 0x1, "d36d4f7587afab5de88c91fe60cc73da161b465af50e375f32d03b5bfa3cf2f9bc34a9829c65db77a56d05d04151dd0005b7d72e38f25407683929c123c7ed1c7e9b2c291b3aaf11d29e77d781ce3c8240548a2101d99fd5d01f800ec14c33bdb1ff935a64b063f747ff75a593a0f77d7e3f08b0976e6a37829a391f7ef7b48a6c35f77929a6bb9117a2bfa613bc0dd66fe77cbe0b62c9420a927417ff"}, @INET_DIAG_REQ_BYTECODE={0x47, 0x1, "9f84fb8e666416c905901b5ffaa5a221d4df17298a6a1c226c5a366634272a9d341ec66165e611bd65e40d0ee0d26cae87124d7abaf13ca2dd3f0b5c3604957890cd04"}, @INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "e947f0afbd3456b2a673146007da6c2b06133437b556058a5b285d1945719fd2d4b4383c4fa94c3cb45cd550c42f63a8ef88fddf6dde72eab4196a76df9ecf6efc5f3c695fe1c9b5111eb5c63e8ba48adf9b92cca63690d91638ce5530fe02955dbf3b3592529cad23a3fa651d476c9a616437d636bad729ff8e723d006f80b108f41f3ea03d442c7dfe5ebea195c3012219d2f6337d87"}, @INET_DIAG_REQ_BYTECODE={0xd9, 0x1, "7103bbe2c44aaae4dfb52b2bd4ddd50f919fbf00314877b98191ad29156ef022b10d22a47f58ccd92bc22b2c9c6d63df9a411fd57ada88b2477fd9f1a09c0569499c5a013f77a2b9ecf9eff8c68977db51b7dc45af37428fc09b05d9331b078daafa2b418fed6e3e4150d685776e4883b34fcbb8f70c3971e81320399a4c7bf40505e4ed126ee4d8c4233f5a47e46889014de35ec2058cc6a7e6d912a1b74bea6c27156a31549aea547604ec2d251672030d0abc67f2b9d782e0ea2d3ba6d054540964d5d8afccd5b00eb9add6ff7e1b28019e568b"}, @INET_DIAG_REQ_BYTECODE={0x27, 0x1, "5ccf00e2f1af46cd66d53e4ef17c15cd3736eda40d3bcb7aeefaeddb7249bfe0915875"}]}, 0x408}, 0x1, 0x0, 0x0, 0x8040}, 0x4010) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x5, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20008041) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x54, 0x5, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}}, 0x20008850) recvmsg(r3, &(0x7f0000000b40)={&(0x7f0000000a40), 0x80, &(0x7f0000000b00)=[{&(0x7f0000000ac0)=""/48, 0x30}], 0x1}, 0x40000020) write$tun(0xffffffffffffffff, &(0x7f0000000b80)={@val={0x0, 0x6558}, @val={0x2, 0x80, 0x6, 0x2, 0x8}, @llc={@snap={0x1, 0xab, "da2b", "3bffd0", 0x16, "3246a0e5ccc10e3de4c2f8739bd9b98f9491e5bf04731be2bd2c74604004f7e020ca85c513ea43a36ca120fa07ebad9054c8c38d15dd48119903253a4e354a275662ef92c22bd7506de9b79bb0ae91a45e4be09c61aec38cdd92f872896731b85af8fbe2cb3f27bab9a9bbd69398d8a724657ac0640f1ac4ac0e713f77bd6da16b8e5ac1a0a4f85a6cad93d4688f003470739f92f600820864f0088f33881c3124ace128b03299937a082c4293ea5283b78bf60e36a69a80396abb7713d8e2262d52ed5ee68798014d6e21aabd90b2b0"}}}, 0xe7) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r3) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_KEK={0x21, 0xf2, "711df79199f8f1b702bb2eea1c43cea755e3061afb754331b33ead879f"}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008010}, 0x44804) sendmsg$inet(r2, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000e80)=[{&(0x7f0000000e00)="4072a614a43c9876923db7cb307ca0eb889d05f4da12ac762b5a521a695ff071b40a6bf409326950c12a6976cdb1e82cfaa4602f4d2314fcbd0066cfda3d1839e3aba2682dec147e1f222cfe38", 0x4d}], 0x1, &(0x7f0000000ec0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102}}}], 0x20}, 0x40805) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r6, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2b200ca0fac61307}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x64, 0x5, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x40) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001200)=0xffffffffffffffff, 0x4) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0xe, &(0x7f0000001280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd3bc}, [@alu={0x0, 0x0, 0x0, 0x1, 0x6, 0x2, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xa}, @tail_call, @cb_func={0x18, 0x8, 0x4, 0x0, 0x3}, @exit]}, &(0x7f0000001300)='syzkaller\x00', 0x7, 0xd9, &(0x7f0000001340)=""/217, 0x40f00, 0x10, '\x00', r4, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001440)={0x2, 0x5, 0x7, 0x5}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001480)=[{0x3, 0x5, 0xb, 0x6}, {0x3, 0x4, 0x4, 0xa}], 0x10, 0x2, @void, @value}, 0x94) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000001580), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001640)={{r0, 0xffffffffffffffff}, &(0x7f00000015c0), &(0x7f0000001600)}, 0x20) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001680)={0x1b, 0x0, 0x0, 0x548e, 0x0, 0xffffffffffffffff, 0xbab, '\x00', r4, 0xffffffffffffffff, 0x2, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x7, 0x3, &(0x7f00000010c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0xfffff242}], &(0x7f0000001100)='syzkaller\x00', 0x81, 0xad, &(0x7f0000001140)=""/173, 0x41000, 0x1a, '\x00', r4, @fallback=0x3c, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001240)={0x5, 0x1, 0x5, 0x800}, 0x10, 0xffffffffffffffff, r9, 0x3, &(0x7f0000001700)=[r10, r11, r12], &(0x7f0000001740)=[{0x2, 0x2, 0xa, 0x5}, {0x1, 0x3, 0x2}, {0x1, 0x1, 0xe, 0x9}], 0x10, 0x6, @void, @value}, 0x94) r13 = accept4$ax25(r10, &(0x7f0000001840)={{}, [@default, @netrom, @remote, @rose, @netrom, @default, @remote, @netrom]}, &(0x7f00000018c0)=0x48, 0x180000) getsockopt(r13, 0x4, 0xfffffffd, &(0x7f0000001900)=""/160, &(0x7f00000019c0)=0xa0) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x20, 0x5, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c4) 315.013404ms ago: executing program 2 (id=3049): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_ADDRESS={0xa}]}, 0x2c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x4, 0x25ffdbfe, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_NF_CALL_ARPTABLES={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 311.96323ms ago: executing program 1 (id=3050): r0 = socket(0x27, 0x1, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000140)=0x34fd, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f0000000080)) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000080)=""/10, &(0x7f00000000c0)=0xa) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x3, @multicast, 'macvtap0\x00'}}, 0x1e) (async) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x2) 65.757889ms ago: executing program 4 (id=3051): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08000300"/18, @ANYRES32=r3, @ANYBLOB="0a000600505050505050950006003600e6"], 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x4040000) r4 = socket$netlink(0x10, 0x3, 0xf) r5 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r5, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r6, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x1, 0x7fff, 0x8, 0x95af, 0x461f, 0xfc, 0x8, {0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}}, 0xfffff7ac, 0x8, 0x9, 0x8001, 0xfffff193}}, &(0x7f0000000180)=0xb0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0xd70d, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) r10 = socket$inet6(0x2d, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x11d, 0x76, 0x0, 0x0) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0xa5}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2d859a0b04913c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0x53}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140)}, {&(0x7f0000000100)="e4", 0x1}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r8, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101}, 0x14}}, 0x0) 0s ago: executing program 2 (id=3052): r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000300)) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x14, 0x2, 0x6, 0x5}, 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001800210200000000000000001d01000008000900", @ANYRESDEC=r1, @ANYRES8=r4], 0x24}}, 0x0) kernel console output (not intermixed with test programs): -generic failed with error -22 [ 398.549554][T13437] Cannot find set identified by id 752 to match [ 420.065938][T13509] netlink: 'syz.2.2125': attribute type 4 has an invalid length. [ 420.255462][T13521] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 420.424934][T13532] netlink: zone id is out of range [ 420.555060][T13547] __nla_validate_parse: 11 callbacks suppressed [ 420.555082][T13547] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2135'. [ 420.784100][T13562] unsupported nla_type 27400 [ 421.024873][T13581] IPVS: set_ctl: invalid protocol: 108 224.0.0.1:20003 [ 421.194676][T13592] No such timeout policy "syz0" [ 421.200111][T13595] sctp: [Deprecated]: syz.2.2148 (pid 13595) Use of struct sctp_assoc_value in delayed_ack socket option. [ 421.200111][T13595] Use struct sctp_sack_info instead [ 421.206101][T13594] bond2: entered promiscuous mode [ 421.222810][T13594] bond2: entered allmulticast mode [ 421.229585][T13594] 8021q: adding VLAN 0 to HW filter on device bond2 [ 421.447564][T13618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.490659][T13618] netlink: 'syz.4.2154': attribute type 10 has an invalid length. [ 421.723484][T13636] netlink: 'syz.3.2159': attribute type 1 has an invalid length. [ 421.754680][T13636] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2159'. [ 421.790656][T13641] netlink: 'syz.3.2159': attribute type 10 has an invalid length. [ 421.809047][T13636] netlink: 'syz.3.2159': attribute type 10 has an invalid length. [ 422.148111][T13661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2169'. [ 422.256479][T13667] syz_tun: entered allmulticast mode [ 422.330831][T13666] syz_tun: left allmulticast mode [ 422.526882][T13684] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2174'. [ 422.625331][T13691] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2176'. [ 423.019181][T13713] No such timeout policy "syz0" [ 423.225389][T13718] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2183'. [ 423.242476][T13718] nbd: illegal input index -8454144 [ 423.255115][T13718] sctp: [Deprecated]: syz.4.2183 (pid 13718) Use of struct sctp_assoc_value in delayed_ack socket option. [ 423.255115][T13718] Use struct sctp_sack_info instead [ 423.370742][T13726] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2185'. [ 423.739622][T13740] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2190'. [ 423.787239][T13743] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 423.787372][T13740] IPVS: stopping master sync thread 13743 ... [ 423.903403][T13747] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2193'. [ 424.679507][T13772] netlink: 'syz.4.2200': attribute type 1 has an invalid length. [ 424.718969][T13772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2200'. [ 424.871632][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.955759][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.022357][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.093634][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.178775][ T13] bridge_slave_1: left allmulticast mode [ 425.184925][ T13] bridge_slave_1: left promiscuous mode [ 425.190627][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.206823][ T13] bridge_slave_0: left allmulticast mode [ 425.212669][ T13] bridge_slave_0: left promiscuous mode [ 425.218749][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.557277][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.569238][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.579912][ T13] bond0 (unregistering): Released all slaves [ 425.983562][T13788] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2206'. [ 426.072436][T13793] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2207'. [ 426.104383][T13793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2207'. [ 426.138293][ T13] hsr_slave_0: left promiscuous mode [ 426.151046][ T13] hsr_slave_1: left promiscuous mode [ 426.152704][T13798] IPVS: length: 24 != 36888 [ 426.191291][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.198855][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.225035][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.241078][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.303366][ T13] veth1_macvtap: left promiscuous mode [ 426.308977][ T13] veth0_macvtap: left promiscuous mode [ 426.315196][ T13] veth1_vlan: left promiscuous mode [ 426.320582][ T13] veth0_vlan: left promiscuous mode [ 426.355838][T13803] SET target dimension over the limit! [ 426.490052][ T5143] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 426.508343][ T5143] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 426.517878][ T5143] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 426.528943][ T5143] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 426.536778][ T5143] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 426.878729][ T13] team0 (unregistering): Port device team_slave_1 removed [ 426.923728][ T13] team0 (unregistering): Port device team_slave_0 removed [ 427.571272][T13815] netlink: 'syz.2.2212': attribute type 3 has an invalid length. [ 428.345235][T13855] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2225'. [ 428.397174][T13806] chnl_net:caif_netlink_parms(): no params data found [ 428.592184][ T5143] Bluetooth: hci0: command tx timeout [ 428.733009][T13806] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.740408][T13806] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.756550][T13806] bridge_slave_0: entered allmulticast mode [ 428.768970][T13806] bridge_slave_0: entered promiscuous mode [ 428.780735][T13806] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.793939][T13806] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.805348][T13806] bridge_slave_1: entered allmulticast mode [ 428.814514][T13806] bridge_slave_1: entered promiscuous mode [ 428.975394][T13806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.998396][T13893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2237'. [ 429.050313][T13896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2237'. [ 429.079952][T13806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.155776][T13899] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 429.174501][T13901] netlink: 312 bytes leftover after parsing attributes in process `syz.4.2240'. [ 429.194628][T13901] netlink: 312 bytes leftover after parsing attributes in process `syz.4.2240'. [ 430.672822][ T5143] Bluetooth: hci0: command tx timeout [ 430.766784][T13806] team0: Port device team_slave_0 added [ 430.909739][T13806] team0: Port device team_slave_1 added [ 430.987733][T13806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.001079][T13806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.059387][T13806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.078801][T13921] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 431.088520][T13921] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 431.125364][T13806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.141723][T13806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.177060][T13806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.202048][T13927] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 431.410308][T13806] hsr_slave_0: entered promiscuous mode [ 431.422427][T13806] hsr_slave_1: entered promiscuous mode [ 431.429012][T13806] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 431.440568][T13806] Cannot create hsr debugfs directory [ 431.639422][T13955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2258'. [ 431.671387][T13955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2258'. [ 431.894166][T13966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2261'. [ 432.153355][T13979] netlink: 'syz.3.2266': attribute type 4 has an invalid length. [ 432.161439][T13983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2266'. [ 432.177711][T13979] netlink: 'syz.3.2266': attribute type 4 has an invalid length. [ 432.445473][T13806] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 432.475166][T13806] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 432.504863][T13806] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 432.556859][T13806] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 432.751316][ T5143] Bluetooth: hci0: command tx timeout [ 432.786648][T13806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.818212][T13806] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.842953][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.850217][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.888871][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.896167][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.971499][T14023] bridge0: entered promiscuous mode [ 432.983371][T14023] macvlan6: entered promiscuous mode [ 433.016856][T14023] macvlan7: entered promiscuous mode [ 433.148678][T14025] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2283'. [ 433.196010][T14025] gretap0: entered promiscuous mode [ 433.233976][T14031] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2283'. [ 433.253340][T14031] 0{X: renamed from gretap0 [ 433.283462][T14031] 0{X: left promiscuous mode [ 433.297814][T14031] 0{X: entered allmulticast mode [ 433.316554][T14031] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 433.522002][T14033] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.808606][T14052] netlink: 'syz.3.2292': attribute type 1 has an invalid length. [ 433.910107][T13806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.021405][T14063] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2296'. [ 434.029460][T13806] veth0_vlan: entered promiscuous mode [ 434.084808][T13806] veth1_vlan: entered promiscuous mode [ 434.155165][T14071] netlink: 'syz.3.2299': attribute type 1 has an invalid length. [ 434.175440][T14071] netlink: 'syz.3.2299': attribute type 2 has an invalid length. [ 434.208250][T14069] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2296'. [ 434.218276][T14069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2296'. [ 434.297031][T13806] veth0_macvtap: entered promiscuous mode [ 434.325944][T13806] veth1_macvtap: entered promiscuous mode [ 434.377511][T13806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.407826][T13806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.424434][T13806] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.434751][T13806] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.448410][T13806] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.458197][T13806] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.547320][T14093] xfrm0: mtu less than device minimum [ 434.730143][T14101] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 434.835624][ T5143] Bluetooth: hci0: command tx timeout [ 435.085333][ T30] audit: type=1107 audit(1745858786.190:4): pid=14096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 436.219377][T14097] bridge_slave_0: default FDB implementation only supports local addresses [ 436.320415][T14099] netlink: 'syz.3.2306': attribute type 3 has an invalid length. [ 436.330716][T14100] netem: change failed [ 436.338049][T14109] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 436.522352][T14118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2310'. [ 436.570177][ T2997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.587677][ T2997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.648579][ T2997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.668072][ T2997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.699763][T14128] __nla_validate_parse: 1 callbacks suppressed [ 436.699784][T14128] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2312'. [ 436.746962][T14132] netlink: 'syz.4.2314': attribute type 4 has an invalid length. [ 436.770343][T14135] xt_CT: No such helper "snmp" [ 436.900772][T14140] tipc: Started in network mode [ 436.907479][T14140] tipc: Node identity 000000002d0000000000000000000001, cluster identity 4711 [ 436.934818][T14140] tipc: Enabling of bearer rejected, failed to enable media [ 437.039112][T14144] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2318'. [ 437.065832][T14144] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2318'. [ 437.093682][T14125] infiniband syz1: set down [ 437.098425][T14125] infiniband syz1: added ipvlan0 [ 437.123458][T14149] openvswitch: netlink: Actions may not be safe on all matching packets [ 437.142568][T14149] x_tables: unsorted underflow at hook 3 [ 437.153774][T14149] netlink: 'syz.3.2319': attribute type 4 has an invalid length. [ 437.176198][T14125] RDS/IB: syz1: added [ 437.180274][T14125] smc: adding ib device syz1 with port count 1 [ 437.186634][T14125] smc: ib device syz1 port 1 has pnetid [ 437.339081][ T2934] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.506217][ T2934] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.662399][ T2934] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.042708][ T2934] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.200126][ T2934] bridge_slave_1: left allmulticast mode [ 438.210803][ T2934] bridge_slave_1: left promiscuous mode [ 438.216723][ T2934] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.235757][ T2934] bridge_slave_0: left allmulticast mode [ 438.246337][ T2934] bridge_slave_0: left promiscuous mode [ 438.253110][ T2934] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.626661][T14159] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 438.815662][T14166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2324'. [ 438.837542][ T2934] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.846563][T14166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2324'. [ 438.857685][T14172] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2325'. [ 438.880370][ T2934] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.923510][ T2934] bond0 (unregistering): Released all slaves [ 439.303521][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 439.320300][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 439.328553][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 439.345280][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 439.365498][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 439.731816][T14204] ip6gre1: entered allmulticast mode [ 439.834425][T14209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2334'. [ 440.102275][T14219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2338'. [ 440.283281][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.559630][T14235] netlink: 'syz.1.2341': attribute type 4 has an invalid length. [ 440.601741][T14235] netlink: 'syz.1.2341': attribute type 4 has an invalid length. [ 440.635076][T14239] netlink: 'syz.2.2343': attribute type 2 has an invalid length. [ 440.932201][T14248] netlink: 'syz.1.2346': attribute type 29 has an invalid length. [ 440.940084][T14248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2346'. [ 440.967923][T14253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2347'. [ 441.176792][T14257] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 441.330156][ T2934] hsr_slave_0: left promiscuous mode [ 441.353464][ T2934] hsr_slave_1: left promiscuous mode [ 441.359682][ T2934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.380823][ T2934] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.391090][ T5830] Bluetooth: hci0: command tx timeout [ 441.408224][ T2934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.416428][ T2934] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.463174][ T2934] veth1_macvtap: left promiscuous mode [ 441.468913][ T2934] veth0_macvtap: left promiscuous mode [ 441.475027][ T2934] veth1_vlan: left promiscuous mode [ 441.480578][ T2934] veth0_vlan: left promiscuous mode [ 441.603885][T14282] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 442.029788][ T2934] team0 (unregistering): Port device team_slave_1 removed [ 442.077336][ T2934] team0 (unregistering): Port device team_slave_0 removed [ 442.568152][T14187] chnl_net:caif_netlink_parms(): no params data found [ 442.783041][T14295] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 442.802822][T14288] __nla_validate_parse: 4 callbacks suppressed [ 442.802843][T14288] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2356'. [ 443.124405][T14187] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.141549][T14187] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.151210][T14187] bridge_slave_0: entered allmulticast mode [ 443.158967][T14187] bridge_slave_0: entered promiscuous mode [ 443.171717][T14309] Bluetooth: MGMT ver 1.23 [ 443.284326][T14187] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.301143][T14187] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.336259][T14187] bridge_slave_1: entered allmulticast mode [ 443.361183][T14187] bridge_slave_1: entered promiscuous mode [ 443.386340][T14319] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2364'. [ 443.395903][T14319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2364'. [ 443.474484][ T5830] Bluetooth: hci0: command tx timeout [ 443.516853][T14324] netlink: 'syz.4.2365': attribute type 1 has an invalid length. [ 443.547282][T14187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.560222][T14187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.670411][T14187] team0: Port device team_slave_0 added [ 443.697308][T14187] team0: Port device team_slave_1 added [ 443.709257][T14330] tipc: Enabled bearer , priority 0 [ 443.794385][T14334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2368'. [ 443.881760][T14187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.888903][T14187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.916976][T14187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.948537][T14187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.957078][T14187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.985038][T14187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.098413][T14344] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.112853][T14346] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.177591][T14187] hsr_slave_0: entered promiscuous mode [ 444.193687][T14187] hsr_slave_1: entered promiscuous mode [ 444.205869][T14187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 444.226654][T14187] Cannot create hsr debugfs directory [ 444.668552][T14357] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2376'. [ 444.711098][ T5836] tipc: Node number set to 754974721 [ 444.955894][T14365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2377'. [ 445.191503][T14376] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 445.207553][T14375] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 445.283772][T14376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2381'. [ 445.322343][T14376] bridge_slave_1: left allmulticast mode [ 445.330376][T14376] bridge_slave_1: left promiscuous mode [ 445.340162][T14376] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.382296][T14376] bridge_slave_0: left allmulticast mode [ 445.389600][T14376] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.551144][ T5830] Bluetooth: hci0: command tx timeout [ 445.725377][T14385] sctp: [Deprecated]: syz.2.2384 (pid 14385) Use of int in max_burst socket option. [ 445.725377][T14385] Use struct sctp_assoc_value instead [ 445.943269][T14187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 445.964706][T14187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 445.984231][T14187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 446.058812][T14187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 446.059843][T14399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2386'. [ 446.130940][T14399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2386'. [ 446.350340][T14407] ip6t_srh: unknown srh invflags 5F00 [ 446.387333][T14187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.420154][T14407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2389'. [ 446.483421][T14409] ip6t_srh: unknown srh invflags 5F00 [ 446.537744][T14187] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.613834][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.621085][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.679176][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.686422][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.211666][T14439] veth0: entered promiscuous mode [ 447.250614][T14187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.281888][T14436] veth0: left promiscuous mode [ 447.418331][T14187] veth0_vlan: entered promiscuous mode [ 447.460014][T14187] veth1_vlan: entered promiscuous mode [ 447.472159][T14448] netlink: 'syz.1.2398': attribute type 20 has an invalid length. [ 447.543061][T14448] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 447.574074][T14187] veth0_macvtap: entered promiscuous mode [ 447.628118][T14187] veth1_macvtap: entered promiscuous mode [ 447.636875][ T5830] Bluetooth: hci0: command tx timeout [ 447.698204][T14187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.789042][T14187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.828257][T14187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.857723][T14187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.880428][T14187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.901382][T14187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.168482][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.204599][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.302500][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.316931][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.407834][T14488] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 448.631802][T14496] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2413'. [ 448.795890][T14500] tipc: Enabling of bearer rejected, media not registered [ 448.977987][T14518] netlink: 'syz.3.2419': attribute type 11 has an invalid length. [ 448.992438][T14518] netlink: 'syz.3.2419': attribute type 11 has an invalid length. [ 449.000646][T14507] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2418'. [ 449.021059][T14518] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2419'. [ 449.039416][T14518] netlink: 'syz.3.2419': attribute type 11 has an invalid length. [ 449.049948][T14518] netlink: 'syz.3.2419': attribute type 11 has an invalid length. [ 449.061779][T14518] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2419'. [ 449.319309][T14539] netlink: 'syz.3.2423': attribute type 1 has an invalid length. [ 449.348757][T14539] netlink: 'syz.3.2423': attribute type 3 has an invalid length. [ 449.356157][T14542] erspan0: left promiscuous mode [ 449.358262][T14539] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2423'. [ 449.372796][T14542] macsec0: entered promiscuous mode [ 449.384813][T14542] erspan0: entered promiscuous mode [ 449.392169][T14542] macsec0: left promiscuous mode [ 449.545863][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.636322][T14554] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 449.680138][T14554] tipc: Enabled bearer , priority 10 [ 449.771127][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 449.803946][T14557] xt_CT: No such helper "snmp" [ 449.911238][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 449.978574][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.051074][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 450.191541][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 450.266045][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.322282][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.333035][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 450.430095][ T36] bridge_slave_1: left allmulticast mode [ 450.436452][ T36] bridge_slave_1: left promiscuous mode [ 450.442440][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.454204][ T36] bridge_slave_0: left allmulticast mode [ 450.460073][ T36] bridge_slave_0: left promiscuous mode [ 450.466064][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.473596][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 450.610945][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 450.755812][ T47] tipc: Node number set to 137233726 [ 450.819683][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.836585][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.847448][ T36] bond0 (unregistering): Released all slaves [ 450.891140][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 450.972029][T14566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2430'. [ 450.999986][T14566] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 451.004168][T14569] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2431'. [ 451.024852][T14572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2430'. [ 451.163975][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 451.254235][T14572] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 451.284371][T14577] C: renamed from lo (while UP) [ 451.466983][T14593] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2435'. [ 451.525938][ T5143] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 451.536312][ T5143] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 451.545074][ T5143] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 451.559667][ T5143] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 451.576510][ T5143] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 451.691054][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 451.697270][T14604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2437'. [ 452.177166][T14624] netlink: 'syz.4.2444': attribute type 15 has an invalid length. [ 452.299389][T14630] netlink: 'syz.1.2446': attribute type 1 has an invalid length. [ 452.407221][ T36] hsr_slave_0: left promiscuous mode [ 452.429182][ T36] hsr_slave_1: left promiscuous mode [ 452.440698][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.458624][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.497792][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.502980][T14641] x_tables: duplicate underflow at hook 3 [ 452.520371][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.557699][ T36] veth1_macvtap: left promiscuous mode [ 452.564475][ T36] veth0_macvtap: left promiscuous mode [ 452.570149][ T36] veth1_vlan: left promiscuous mode [ 452.577516][ T36] veth0_vlan: left promiscuous mode [ 452.750982][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 453.127404][ T36] team0 (unregistering): Port device team_slave_1 removed [ 453.174389][ T36] team0 (unregistering): Port device team_slave_0 removed [ 453.641311][ T5143] Bluetooth: hci0: command tx timeout [ 453.750008][T14641] tipc: Enabled bearer , priority 10 [ 453.790993][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 453.955463][T14659] tipc: Enabling of bearer rejected, failed to enable media [ 453.984899][T14661] __nla_validate_parse: 9 callbacks suppressed [ 453.984925][T14661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2455'. [ 454.678630][T14704] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2465'. [ 455.111604][T14595] chnl_net:caif_netlink_parms(): no params data found [ 455.182824][T14734] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2474'. [ 455.207992][T14734] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2474'. [ 455.265419][T14737] netlink: 'syz.1.2472': attribute type 12 has an invalid length. [ 455.313953][T14744] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2476'. [ 455.415773][T14745] xt_CT: No such helper "snmp" [ 455.587589][T14595] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.615706][T14595] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.644314][T14595] bridge_slave_0: entered allmulticast mode [ 455.674085][T14595] bridge_slave_0: entered promiscuous mode [ 455.703630][T14595] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.719674][ T5143] Bluetooth: hci0: command tx timeout [ 455.721436][T14595] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.803978][T14595] bridge_slave_1: entered allmulticast mode [ 455.832556][T14769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2484'. [ 455.849300][T14595] bridge_slave_1: entered promiscuous mode [ 455.870969][ C1] net_ratelimit: 1 callbacks suppressed [ 455.870988][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 456.217940][T14777] dvmrp1: entered allmulticast mode [ 456.267409][T14595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.294651][T14595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.411678][T14790] netlink: 'syz.2.2486': attribute type 16 has an invalid length. [ 456.423129][T14790] netlink: 'syz.2.2486': attribute type 17 has an invalid length. [ 456.456102][T14790] lo: left allmulticast mode [ 456.477688][T14790] tunl0: left allmulticast mode [ 456.485728][T14790] gre0: left allmulticast mode [ 456.505267][T14790] gretap0: left allmulticast mode [ 456.513470][T14790] erspan0: left allmulticast mode [ 456.520158][T14790] ip_vti0: left allmulticast mode [ 456.527890][T14790] ip6_vti0: left allmulticast mode [ 456.536822][T14790] sit0: left allmulticast mode [ 456.550685][T14790] ip6tnl0: left allmulticast mode [ 456.558688][T14790] ip6gre0: left allmulticast mode [ 456.569358][T14790] syz_tun: left allmulticast mode [ 456.583644][T14790] ip6gretap0: left allmulticast mode [ 456.595033][T14790] vcan0: left allmulticast mode [ 456.603147][T14790] bond0: left allmulticast mode [ 456.612207][T14790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.620119][T14790] team0: left allmulticast mode [ 456.627342][T14790] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.636291][T14790] dummy0: left allmulticast mode [ 456.643338][T14790] batman_adv: batadv0: Interface activated: dummy0 [ 456.649930][T14790] batadv0: mtu less than device minimum [ 456.659652][T14790] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 456.671660][T14790] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 456.683625][T14790] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 456.695579][T14790] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 456.707546][T14790] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 456.719514][T14790] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 456.731828][T14790] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 456.743824][T14790] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 456.813191][T14790] nlmon0: left allmulticast mode [ 456.822531][T14790] caif0: left allmulticast mode [ 456.837370][T14595] team0: Port device team_slave_0 added [ 456.886807][T14595] team0: Port device team_slave_1 added [ 457.015644][T14595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.041941][T14595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.125891][T14595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.177000][T14595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.213164][T14595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.297396][T14595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.506965][T14828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2500'. [ 457.540221][T14828] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2500'. [ 457.605988][T14595] hsr_slave_0: entered promiscuous mode [ 457.622337][T14595] hsr_slave_1: entered promiscuous mode [ 457.647073][T14595] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 457.666053][T14595] Cannot create hsr debugfs directory [ 457.792846][ T5143] Bluetooth: hci0: command tx timeout [ 458.197492][T14865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2512'. [ 458.370608][T14874] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2517'. [ 458.502065][ T5884] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 458.562043][ T5933] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 458.592528][T14595] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 458.615674][T14595] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 458.648855][T14595] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 458.675976][T14595] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 458.702481][ T5933] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 458.765037][ T5933] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 458.843477][ T5933] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 458.846786][T14894] tipc: Resetting bearer [ 458.877343][T14894] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 458.884658][T14894] IPv6: NLM_F_CREATE should be set when creating new route [ 458.891975][T14894] IPv6: NLM_F_CREATE should be set when creating new route [ 458.928926][T14894] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 458.937471][T14894] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 458.942413][ T5836] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 458.989044][T14595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.058509][T14595] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.073012][ T5836] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 459.103652][T14903] netlink: 'syz.3.2525': attribute type 21 has an invalid length. [ 459.115772][T14903] __nla_validate_parse: 2 callbacks suppressed [ 459.115789][T14903] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2525'. [ 459.134866][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.142298][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.157394][ T5933] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 459.214535][T14903] netlink: 'syz.3.2525': attribute type 5 has an invalid length. [ 459.222975][ T5933] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 459.228732][T14903] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2525'. [ 459.298253][ T2997] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.305530][ T2997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.421666][ T5884] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 459.437622][T14912] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2527'. [ 459.871974][ T5143] Bluetooth: hci0: command tx timeout [ 459.992807][T14933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2532'. [ 460.086019][T14595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.183977][T14941] netlink: 'syz.2.2535': attribute type 1 has an invalid length. [ 460.192606][T14941] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2535'. [ 460.202868][T14941] netlink: 'syz.2.2535': attribute type 1 has an invalid length. [ 460.210695][T14941] netlink: 'syz.2.2535': attribute type 2 has an invalid length. [ 460.216512][T14595] veth0_vlan: entered promiscuous mode [ 460.246603][T14595] veth1_vlan: entered promiscuous mode [ 460.334735][T14595] veth0_macvtap: entered promiscuous mode [ 460.355890][T14595] veth1_macvtap: entered promiscuous mode [ 460.426745][T14595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.431161][T14952] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2539'. [ 460.463985][T14595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.493247][T14595] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.521453][T14595] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.544915][T14595] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.563327][T14595] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.588323][T14962] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2541'. [ 460.813709][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.828950][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.857713][T14974] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2544'. [ 460.923843][T14980] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2544'. [ 460.948704][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.959243][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.071169][ C1] net_ratelimit: 17 callbacks suppressed [ 461.071189][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 461.353876][T15001] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2550'. [ 461.364000][T15001] netlink: 'syz.2.2550': attribute type 2 has an invalid length. [ 461.435972][T15004] netlink: 'syz.3.2551': attribute type 1 has an invalid length. [ 461.482337][T15004] 8021q: adding VLAN 0 to HW filter on device bond5 [ 461.528990][T15004] 8021q: adding VLAN 0 to HW filter on device bond5 [ 461.542329][T15004] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 461.564705][T15004] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 462.111076][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 462.249063][ T53] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.468600][ T53] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.777552][ T53] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.838231][ T53] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.963950][ T53] bridge_slave_1: left allmulticast mode [ 462.969732][ T53] bridge_slave_1: left promiscuous mode [ 462.976733][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.986756][ T53] bridge_slave_0: left allmulticast mode [ 462.993771][ T53] bridge_slave_0: left promiscuous mode [ 462.999515][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.161851][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 463.354633][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.366868][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.378746][ T53] bond0 (unregistering): Released all slaves [ 463.609349][T15045] ieee802154 phy1 wpan1: encryption failed: -22 [ 463.637030][T15043] netlink: 'syz.3.2563': attribute type 8 has an invalid length. [ 463.760526][T15043] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 464.190986][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 464.365363][T15074] __nla_validate_parse: 5 callbacks suppressed [ 464.365385][T15074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2573'. [ 464.400408][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 464.412874][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 464.423123][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 464.435126][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 464.457343][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 464.679595][ T53] hsr_slave_0: left promiscuous mode [ 464.738097][ T53] hsr_slave_1: left promiscuous mode [ 464.751449][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.758937][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.821965][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.829460][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.878404][ T53] veth1_macvtap: left promiscuous mode [ 464.903652][ T53] veth0_macvtap: left promiscuous mode [ 464.909385][ T53] veth1_vlan: left promiscuous mode [ 464.930280][ T53] veth0_vlan: left promiscuous mode [ 464.990246][T15099] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2578'. [ 465.241128][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 465.245781][T15102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2579'. [ 465.596742][ T53] team0 (unregistering): Port device team_slave_1 removed [ 465.648617][ T53] team0 (unregistering): Port device team_slave_0 removed [ 466.129807][T15093] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 466.148837][T15094] netlink: 'syz.1.2578': attribute type 29 has an invalid length. [ 466.175349][T15103] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2579'. [ 466.271401][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 466.396996][T15111] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 466.436498][T15109] netlink: 'syz.4.2581': attribute type 8 has an invalid length. [ 466.511209][ T5143] Bluetooth: hci0: command tx timeout [ 466.556560][T15117] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2584'. [ 466.600463][T15117] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2584'. [ 466.657901][T15117] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2584'. [ 467.311099][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 467.399247][T15072] chnl_net:caif_netlink_parms(): no params data found [ 467.866038][T15160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2595'. [ 467.887008][T15072] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.895227][T15160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2595'. [ 467.907929][T15072] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.917020][T15072] bridge_slave_0: entered allmulticast mode [ 467.921658][T15160] netlink: 'syz.2.2595': attribute type 13 has an invalid length. [ 467.930432][T15072] bridge_slave_0: entered promiscuous mode [ 467.940431][T15072] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.948621][T15072] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.956585][T15072] bridge_slave_1: entered allmulticast mode [ 467.966732][T15072] bridge_slave_1: entered promiscuous mode [ 468.015318][T15133] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 468.032218][T15133] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 468.202187][T15164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2596'. [ 468.228899][T15072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.302803][T15072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.360996][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 468.591326][ T5143] Bluetooth: hci0: command tx timeout [ 468.722972][T15072] team0: Port device team_slave_0 added [ 468.742972][T15182] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 468.799960][T15072] team0: Port device team_slave_1 added [ 468.816211][T15186] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 469.028652][T15072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.043642][T15072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.071355][T15072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.088496][T15204] tipc: Enabling of bearer rejected, already enabled [ 469.176365][T15200] bond3: entered promiscuous mode [ 469.191788][T15200] bond3: entered allmulticast mode [ 469.206205][T15200] 8021q: adding VLAN 0 to HW filter on device bond3 [ 469.230473][T15072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.239909][T15072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.269409][T15072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.381644][T15218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2614'. [ 469.395217][T15072] hsr_slave_0: entered promiscuous mode [ 469.401115][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 469.411938][T15072] hsr_slave_1: entered promiscuous mode [ 469.418318][T15072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 469.427093][T15072] Cannot create hsr debugfs directory [ 469.536516][T15224] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2615'. [ 469.555960][T15222] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2616'. [ 469.700183][T15230] netlink: 146840 bytes leftover after parsing attributes in process `syz.3.2618'. [ 470.343741][ T5143] block nbd2: Receive control failed (result -32) [ 470.385463][T15273] atomic_op ffff8880796c0998 conn xmit_atomic 0000000000000000 [ 470.431081][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 470.452067][T15072] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 470.520683][T15072] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 470.545877][T15072] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 470.604988][T15072] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 470.679908][ T5143] Bluetooth: hci0: command tx timeout [ 470.705110][T15278] netlink: 'syz.1.2634': attribute type 1 has an invalid length. [ 470.942534][T15292] netlink: 'syz.2.2639': attribute type 1 has an invalid length. [ 470.951450][T15293] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2640'. [ 470.970903][T15292] netlink: 'syz.2.2639': attribute type 2 has an invalid length. [ 470.997250][T15072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.060022][T15072] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.076664][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.083901][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.122099][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.129304][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.481004][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 471.712246][T15072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.833093][T15072] veth0_vlan: entered promiscuous mode [ 471.867858][T15072] veth1_vlan: entered promiscuous mode [ 471.946393][ T30] audit: type=1800 audit(1745858823.050:5): pid=15311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2643" name="cgroup.controllers" dev="tmpfs" ino=3029 res=0 errno=0 [ 471.991385][T15072] veth0_macvtap: entered promiscuous mode [ 472.013901][T15072] veth1_macvtap: entered promiscuous mode [ 472.079589][T15072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.113742][T15072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.138619][T15072] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.166998][T15072] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.186308][T15072] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.187644][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 472.208685][T15072] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.212364][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 472.227239][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 472.239241][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 472.249014][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 472.486127][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.501354][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.511042][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 472.568694][T15325] openvswitch: netlink: IP tunnel dst address not specified [ 472.606624][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.635243][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.717579][T15331] netlink: 'syz.4.2649': attribute type 39 has an invalid length. [ 472.741493][T15329] netlink: 'syz.4.2649': attribute type 39 has an invalid length. [ 472.764046][T15333] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 472.765177][ T5143] Bluetooth: hci0: command tx timeout [ 473.000547][T15339] dvmrp0: entered allmulticast mode [ 473.551625][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 473.784260][T15376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2664'. [ 473.828035][T15319] chnl_net:caif_netlink_parms(): no params data found [ 474.242042][ T1143] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.266724][T15394] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2670'. [ 474.307465][T15319] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.316227][T15319] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.324680][T15319] bridge_slave_0: entered allmulticast mode [ 474.332769][T15319] bridge_slave_0: entered promiscuous mode [ 474.344625][T15319] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.353907][T15319] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.362114][ T5143] Bluetooth: hci2: command tx timeout [ 474.368830][T15319] bridge_slave_1: entered allmulticast mode [ 474.378284][T15319] bridge_slave_1: entered promiscuous mode [ 474.414975][T15319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.427684][T15319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.473957][T15319] team0: Port device team_slave_0 added [ 474.483446][T15319] team0: Port device team_slave_1 added [ 474.519081][T15319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.526586][T15319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.553259][T15319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.566111][T15319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.573497][T15319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.599785][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 474.607293][T15319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.664108][T15319] hsr_slave_0: entered promiscuous mode [ 474.670636][T15319] hsr_slave_1: entered promiscuous mode [ 474.678331][T15319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 474.686594][T15319] Cannot create hsr debugfs directory [ 474.764798][ T1143] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.928099][ T1143] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.989628][ T1143] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.105673][ T1143] bridge_slave_1: left allmulticast mode [ 475.112262][ T1143] bridge_slave_1: left promiscuous mode [ 475.118050][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.129862][ T1143] bridge_slave_0: left allmulticast mode [ 475.136121][ T1143] bridge_slave_0: left promiscuous mode [ 475.142643][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.552842][T15397] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2671'. [ 475.579635][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.626348][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.635166][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 475.676204][ T1143] bond0 (unregistering): Released all slaves [ 475.983746][T15418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2676'. [ 476.277507][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 476.296415][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 476.306799][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 476.318162][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 476.328674][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 476.391838][T15429] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 476.438098][ T5143] Bluetooth: hci2: command tx timeout [ 476.454840][T15430] netlink: 'syz.2.2678': attribute type 10 has an invalid length. [ 476.571753][T15430] batadv0: left allmulticast mode [ 476.587248][T15430] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 24:02:48:ff:05:00 [ 476.607161][T15430] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 24:02:48:ff:05:00 [ 476.629873][T15430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.639282][ T53] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 476.661742][ T24] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 24:02:48:ff:05:00 [ 476.676710][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 476.709156][T15430] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 476.753248][T15430] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 476.875740][ T1143] hsr_slave_0: left promiscuous mode [ 476.900337][ T1143] hsr_slave_1: left promiscuous mode [ 476.919258][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.933362][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.945307][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.970096][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.004648][T15446] openvswitch: netlink: Message has 24 unknown bytes. [ 477.013760][T15446] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.081457][T15453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2681'. [ 477.129629][ T1143] veth1_macvtap: left promiscuous mode [ 477.139276][ T1143] veth0_macvtap: left promiscuous mode [ 477.145775][ T1143] veth1_vlan: left promiscuous mode [ 477.152487][ T1143] veth0_vlan: left promiscuous mode [ 477.269059][T15456] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2681'. [ 477.675334][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 477.721071][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 477.734069][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 478.188323][T15319] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 478.219466][T15453] macvlan4: entered promiscuous mode [ 478.241531][T15453] bridge0: entered promiscuous mode [ 478.279087][T15456] macvlan5: entered promiscuous mode [ 478.293579][T15319] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 478.304267][T15458] sctp: [Deprecated]: syz.2.2685 (pid 15458) Use of int in max_burst socket option. [ 478.304267][T15458] Use struct sctp_assoc_value instead [ 478.330352][T15319] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 478.372608][T15319] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 478.431226][ T5143] Bluetooth: hci0: command tx timeout [ 478.521686][ T5143] Bluetooth: hci2: command tx timeout [ 478.553655][T15319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.594699][T15467] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2688'. [ 478.606233][T15464] netlink: 'syz.1.2687': attribute type 27 has an invalid length. [ 478.655732][T15319] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.692435][T10815] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.699629][T10815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.797946][T10815] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.805250][T10815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.330410][T15319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.437429][T15498] ieee802154 phy1 wpan1: encryption failed: -22 [ 479.462495][T15319] veth0_vlan: entered promiscuous mode [ 479.493899][T15319] veth1_vlan: entered promiscuous mode [ 479.578407][T15319] veth0_macvtap: entered promiscuous mode [ 479.606296][T15319] veth1_macvtap: entered promiscuous mode [ 479.685045][T15319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.734251][T15319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.750383][T15319] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.777294][T15319] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.791657][T15319] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.802438][T15319] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.975662][T15518] bond0: entered allmulticast mode [ 480.185831][T15528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2705'. [ 480.196007][T15528] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2705'. [ 480.208901][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.234738][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.248135][T15528] 8021q: VLANs not supported on tunl0 [ 480.273084][T15530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2705'. [ 480.400774][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.409497][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.440475][T15537] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 480.511272][ T5143] Bluetooth: hci0: command tx timeout [ 480.540258][T15426] chnl_net:caif_netlink_parms(): no params data found [ 480.603132][ T5143] Bluetooth: hci2: command tx timeout [ 480.708901][T15548] tipc: Enabling of bearer rejected, media not registered [ 480.798288][T15557] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2712'. [ 480.916451][T15562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2714'. [ 480.950485][T15562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2714'. [ 480.968492][T15562] netlink: 'syz.4.2714': attribute type 20 has an invalid length. [ 480.989191][T15426] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.011801][T15426] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.019270][T15426] bridge_slave_0: entered allmulticast mode [ 481.028411][T15426] bridge_slave_0: entered promiscuous mode [ 481.038736][T15426] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.049786][T15426] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.058771][T15426] bridge_slave_1: entered allmulticast mode [ 481.059224][T15568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2716'. [ 481.068239][T15426] bridge_slave_1: entered promiscuous mode [ 481.084134][T15568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2716'. [ 481.109210][T15568] xt_CT: You must specify a L4 protocol and not use inversions on it [ 481.247821][T15426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.289662][T15426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.398043][T15582] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 481.497991][T15589] netlink: 300 bytes leftover after parsing attributes in process `syz.2.2722'. [ 481.528195][T15426] team0: Port device team_slave_0 added [ 481.539453][T15426] team0: Port device team_slave_1 added [ 481.646109][T15426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.662608][T15426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.691896][T15426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.714178][T15426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.733696][T15426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.771889][T15426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.830770][ T1143] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.881039][ C1] net_ratelimit: 8 callbacks suppressed [ 481.881059][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 481.993058][T15426] hsr_slave_0: entered promiscuous mode [ 481.999757][T15426] hsr_slave_1: entered promiscuous mode [ 482.058499][T15426] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 482.080901][T15426] Cannot create hsr debugfs directory [ 482.138064][ T1143] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.152156][T15606] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2728'. [ 482.159454][T15605] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2727'. [ 482.279735][ T1143] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.514158][ T1143] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.608038][ T5143] Bluetooth: hci0: command tx timeout [ 482.694403][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 482.709963][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 482.719559][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 482.750494][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 482.764114][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 482.838021][T15629] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2735'. [ 482.920977][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 483.266358][ T1143] bridge_slave_1: left allmulticast mode [ 483.289058][ T1143] bridge_slave_1: left promiscuous mode [ 483.308416][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.386609][ T1143] bridge_slave_0: left allmulticast mode [ 483.399622][ T1143] bridge_slave_0: left promiscuous mode [ 483.412528][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.888491][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.900170][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.914025][ T1143] bond0 (unregistering): Released all slaves [ 483.951005][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 484.462228][T15672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2749'. [ 484.477313][T15426] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 484.604908][T15426] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 484.630025][T15426] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 484.682005][ T5143] Bluetooth: hci0: command tx timeout [ 484.841180][ T5143] Bluetooth: hci2: command tx timeout [ 484.848796][T15426] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 484.895913][ T1143] hsr_slave_0: left promiscuous mode [ 484.905803][ T1143] hsr_slave_1: left promiscuous mode [ 484.913477][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.923114][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.932799][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.940924][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.983293][ T1143] veth1_macvtap: left promiscuous mode [ 484.988936][ T1143] veth0_macvtap: left promiscuous mode [ 484.994614][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 485.005637][ T1143] veth1_vlan: left promiscuous mode [ 485.012191][ T1143] veth0_vlan: left promiscuous mode [ 485.539897][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 485.588760][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 486.030978][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 486.388211][T15626] chnl_net:caif_netlink_parms(): no params data found [ 486.619787][T15709] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 486.831179][T15626] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.838392][T15626] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.860894][T15626] bridge_slave_0: entered allmulticast mode [ 486.868846][T15626] bridge_slave_0: entered promiscuous mode [ 486.904410][T15626] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.913365][ T5143] Bluetooth: hci2: command tx timeout [ 486.919567][T15626] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.927821][T15626] bridge_slave_1: entered allmulticast mode [ 486.937676][T15626] bridge_slave_1: entered promiscuous mode [ 487.016445][T15626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.029207][T15626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.071354][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 487.080011][T15726] netlink: 'syz.4.2764': attribute type 11 has an invalid length. [ 487.088565][T15726] netlink: 'syz.4.2764': attribute type 11 has an invalid length. [ 487.097949][T15726] __nla_validate_parse: 1 callbacks suppressed [ 487.097968][T15726] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2764'. [ 487.130799][T15426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.132680][T15726] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2764'. [ 487.171503][T15728] netlink: 'syz.4.2764': attribute type 9 has an invalid length. [ 487.193322][T15626] team0: Port device team_slave_0 added [ 487.244343][T15626] team0: Port device team_slave_1 added [ 487.330646][T15626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.348357][T15626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.391380][T15626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.412336][T15426] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.421864][T15626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.431280][T15626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.458384][T15626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.528142][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.535417][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.609242][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.616583][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.638405][T15743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2769'. [ 487.668085][T15626] hsr_slave_0: entered promiscuous mode [ 487.675727][T15626] hsr_slave_1: entered promiscuous mode [ 487.683025][T15626] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 487.690728][T15626] Cannot create hsr debugfs directory [ 487.748248][T15745] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2770'. [ 487.824370][T15745] 8021q: adding VLAN 0 to HW filter on device bond4 [ 488.121450][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 488.413380][T15774] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2777'. [ 488.435652][T15774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2777'. [ 488.455586][T15774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2777'. [ 488.486922][T15776] netlink: 'syz.4.2778': attribute type 11 has an invalid length. [ 488.538629][T15426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.688162][T15783] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2781'. [ 488.746029][T15626] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 488.801500][T15626] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 488.859620][T15626] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 488.886983][T15426] veth0_vlan: entered promiscuous mode [ 488.898791][T15626] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 488.938529][T15426] veth1_vlan: entered promiscuous mode [ 489.002145][ T5143] Bluetooth: hci2: command tx timeout [ 489.160967][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 489.186454][T15426] veth0_macvtap: entered promiscuous mode [ 489.239000][T15426] veth1_macvtap: entered promiscuous mode [ 489.358160][T15426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.455167][T15426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.513151][T15626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.542174][T15426] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.571639][T15426] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.591172][T15426] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.619604][T15426] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.686514][T15626] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.803593][ T2934] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.810803][ T2934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.930656][T15832] netlink: 'syz.1.2793': attribute type 3 has an invalid length. [ 489.943238][T15830] syzkaller1: entered promiscuous mode [ 489.948775][T15830] syzkaller1: entered allmulticast mode [ 489.966952][ T2997] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.975084][ T2997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.074378][T15839] openvswitch: netlink: IPv6 tunnel dst address is zero [ 490.097864][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.120640][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.200987][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 490.250460][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.268354][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.605128][T15858] netlink: 'syz.2.2797': attribute type 10 has an invalid length. [ 490.822262][T15626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.972835][T15873] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2798'. [ 491.022009][ T2997] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.071578][ T5143] Bluetooth: hci2: command tx timeout [ 491.240985][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 491.242483][ T2997] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.330257][ T2997] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.355464][T15626] veth0_vlan: entered promiscuous mode [ 491.386979][ T2997] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.416233][T15626] veth1_vlan: entered promiscuous mode [ 491.461841][T15626] veth0_macvtap: entered promiscuous mode [ 491.472493][T15626] veth1_macvtap: entered promiscuous mode [ 491.493093][T15626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.505392][T15626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.516981][T15626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.538929][T15626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.549674][T15626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.562516][T15626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.595326][T15626] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.606307][T15626] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.616820][T15626] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.626591][T15626] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.672786][ T2997] bridge_slave_1: left allmulticast mode [ 491.678486][ T2997] bridge_slave_1: left promiscuous mode [ 491.685583][ T2997] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.695773][ T2997] bridge_slave_0: left allmulticast mode [ 491.702421][ T2997] bridge_slave_0: left promiscuous mode [ 491.708142][ T2997] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.064683][ T2997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.076705][ T2997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.087747][ T2997] bond0 (unregistering): Released all slaves [ 492.235865][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.246692][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.284945][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 492.289603][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.300558][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.707189][T15883] bond_slave_1: entered promiscuous mode [ 492.714919][T15883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2803'. [ 492.731982][T15884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2803'. [ 492.820200][T15884] bond0: (slave bond_slave_1): Releasing backup interface [ 492.862644][T15884] bond_slave_1 (unregistering): left promiscuous mode [ 493.101185][ T2997] hsr_slave_0: left promiscuous mode [ 493.121302][ T2997] hsr_slave_1: left promiscuous mode [ 493.128390][ T2997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 493.145260][ T2997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.170570][ T2997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.192547][ T2997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.262258][ T2997] veth1_macvtap: left promiscuous mode [ 493.267884][ T2997] veth0_macvtap: left promiscuous mode [ 493.301054][ T2997] veth1_vlan: left promiscuous mode [ 493.306473][ T2997] veth0_vlan: left promiscuous mode [ 493.312004][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 493.549550][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 493.563317][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 493.572999][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 493.582347][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 493.591360][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 493.817438][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 493.829705][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 493.837896][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 493.857468][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 493.865584][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 494.324679][ T2997] team0 (unregistering): Port device team_slave_1 removed [ 494.362144][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 494.382012][ T2997] team0 (unregistering): Port device team_slave_0 removed [ 494.866782][T15907] tipc: Enabled bearer , priority 0 [ 494.920196][T15923] openvswitch: netlink: Message has 20 unknown bytes. [ 494.952494][T15919] syzkaller0: entered promiscuous mode [ 494.958014][T15919] syzkaller0: entered allmulticast mode [ 495.102105][T15919] tipc: Resetting bearer [ 495.514862][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 495.652080][ T5830] Bluetooth: hci0: command tx timeout [ 495.902340][ T5830] Bluetooth: hci2: command tx timeout [ 496.362051][T15941] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2813'. [ 496.601070][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 497.633838][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 497.665904][T15919] tipc: Disabling bearer [ 497.721576][ T5830] Bluetooth: hci0: command tx timeout [ 497.872157][T15946] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 497.911698][T15946] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 497.957308][ T5830] Bluetooth: hci2: command tx timeout [ 498.164549][T15961] ksmbd: Unknown IPC event: 3, ignore. [ 498.342876][ T2997] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.499324][ T2997] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.516431][T15970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2822'. [ 498.629440][ T2997] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.652069][T15974] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2823'. [ 498.680995][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 498.821521][ T2997] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.287974][ T2997] bridge_slave_1: left allmulticast mode [ 499.307407][ T2997] bridge_slave_1: left promiscuous mode [ 499.313472][ T2997] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.335324][ T2997] bridge_slave_0: left allmulticast mode [ 499.352465][ T2997] bridge_slave_0: left promiscuous mode [ 499.358372][ T2997] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.711012][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 499.795558][ T5830] Bluetooth: hci0: command tx timeout [ 500.036337][ T5830] Bluetooth: hci2: command tx timeout [ 500.106252][ T2997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.119040][ T2997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 500.130763][ T2997] bond0 (unregistering): Released all slaves [ 500.460300][T15916] chnl_net:caif_netlink_parms(): no params data found [ 500.638939][T15911] chnl_net:caif_netlink_parms(): no params data found [ 500.753509][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 500.970518][T16081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2845'. [ 501.069201][T15916] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.092223][T15916] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.104087][T15916] bridge_slave_0: entered allmulticast mode [ 501.139051][T15916] bridge_slave_0: entered promiscuous mode [ 501.197844][T15916] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.219738][T15916] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.237124][T15916] bridge_slave_1: entered allmulticast mode [ 501.253098][T15916] bridge_slave_1: entered promiscuous mode [ 501.426750][T15911] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.443649][T15911] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.451389][T15911] bridge_slave_0: entered allmulticast mode [ 501.460568][T15911] bridge_slave_0: entered promiscuous mode [ 501.560148][T15911] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.570181][T15911] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.578070][T15911] bridge_slave_1: entered allmulticast mode [ 501.586699][T15911] bridge_slave_1: entered promiscuous mode [ 501.615054][ T2997] hsr_slave_0: left promiscuous mode [ 501.615254][T16105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2851'. [ 501.630220][ T2997] hsr_slave_1: left promiscuous mode [ 501.643300][ T2997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.663785][ T2997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.678102][ T2997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.686825][ T2997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.716516][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.724601][T16108] netlink: 'syz.2.2852': attribute type 2 has an invalid length. [ 501.739214][ T2997] veth1_macvtap: left promiscuous mode [ 501.745089][ T2997] veth0_macvtap: left promiscuous mode [ 501.750789][ T2997] veth1_vlan: left promiscuous mode [ 501.757198][ T2997] veth0_vlan: left promiscuous mode [ 501.800990][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 501.882060][ T5830] Bluetooth: hci0: command tx timeout [ 501.919317][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802d650800: rx timeout, send abort [ 502.029015][T16120] netlink: 'syz.1.2855': attribute type 1 has an invalid length. [ 502.038686][T16120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2855'. [ 502.049005][T16120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2855'. [ 502.126696][ T5830] Bluetooth: hci2: command tx timeout [ 502.359282][ T2997] team0 (unregistering): Port device team_slave_1 removed [ 502.406922][ T2997] team0 (unregistering): Port device team_slave_0 removed [ 502.429009][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802d650800: abort rx timeout. Force session deactivation [ 502.840996][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 502.858353][T15916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.918416][T15911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.929342][T16120] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 502.980404][T15916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.074237][T15911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.164184][T15916] team0: Port device team_slave_0 added [ 503.220718][T15911] team0: Port device team_slave_0 added [ 503.244663][T15916] team0: Port device team_slave_1 added [ 503.255216][T15911] team0: Port device team_slave_1 added [ 503.377255][T15911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.384567][T15911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.416847][T15911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.460515][T15916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.467807][T15916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.506354][T15916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.519381][T15911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.528702][T15911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.592565][T15911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.673262][T15916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.691658][T15916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.720719][T15916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.793213][T16161] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 503.871449][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 504.076055][T15916] hsr_slave_0: entered promiscuous mode [ 504.094692][T15916] hsr_slave_1: entered promiscuous mode [ 504.101726][T15916] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 504.127262][T15916] Cannot create hsr debugfs directory [ 504.158479][T15911] hsr_slave_0: entered promiscuous mode [ 504.166369][T15911] hsr_slave_1: entered promiscuous mode [ 504.179530][T15911] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 504.206677][T15911] Cannot create hsr debugfs directory [ 504.692431][T16201] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2877'. [ 504.911193][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 505.199224][T16221] netlink: 'syz.4.2883': attribute type 1 has an invalid length. [ 505.208945][T16221] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 505.216241][T16221] IPv6: NLM_F_CREATE should be set when creating new route [ 505.387911][T16229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 505.748885][T15911] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 505.781972][T15911] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 505.850752][T15911] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 505.872271][T15911] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 505.951169][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 506.269001][T15911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.424109][T15911] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.545337][T10815] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.552591][T10815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.596023][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.603254][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.611871][T16269] FAULT_INJECTION: forcing a failure. [ 506.611871][T16269] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 506.688780][T16269] CPU: 1 UID: 0 PID: 16269 Comm: syz.1.2897 Not tainted 6.15.0-rc3-syzkaller-00109-gf73f05c6f711 #0 PREEMPT(full) [ 506.688811][T16269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 506.688832][T16269] Call Trace: [ 506.688844][T16269] [ 506.688853][T16269] dump_stack_lvl+0x189/0x250 [ 506.688886][T16269] ? __lock_acquire+0xaac/0xd20 [ 506.688916][T16269] ? __pfx_dump_stack_lvl+0x10/0x10 [ 506.688945][T16269] ? __pfx__printk+0x10/0x10 [ 506.688965][T16269] ? __might_fault+0xb0/0x130 [ 506.689003][T16269] should_fail_ex+0x414/0x560 [ 506.689038][T16269] _copy_from_user+0x2d/0xb0 [ 506.689066][T16269] ___sys_sendmsg+0x158/0x2a0 [ 506.689091][T16269] ? __pfx____sys_sendmsg+0x10/0x10 [ 506.689152][T16269] ? __fget_files+0x2a/0x420 [ 506.689176][T16269] ? __fget_files+0x3a0/0x420 [ 506.689213][T16269] __x64_sys_sendmsg+0x19b/0x260 [ 506.689239][T16269] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 506.689279][T16269] ? do_syscall_64+0xba/0x210 [ 506.689304][T16269] do_syscall_64+0xf6/0x210 [ 506.689325][T16269] ? clear_bhb_loop+0x45/0xa0 [ 506.689350][T16269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.689369][T16269] RIP: 0033:0x7fd906f8e969 [ 506.689387][T16269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.689405][T16269] RSP: 002b:00007fd907d84038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 506.689425][T16269] RAX: ffffffffffffffda RBX: 00007fd9071b5fa0 RCX: 00007fd906f8e969 [ 506.689440][T16269] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 506.689452][T16269] RBP: 00007fd907d84090 R08: 0000000000000000 R09: 0000000000000000 [ 506.689464][T16269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.689476][T16269] R13: 0000000000000000 R14: 00007fd9071b5fa0 R15: 00007ffe15f27d38 [ 506.689515][T16269] [ 506.690591][T15916] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 506.897280][T15916] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 506.927183][T15916] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 506.947414][T16273] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2899'. [ 506.957530][T16273] netlink: 'syz.1.2899': attribute type 7 has an invalid length. [ 506.965359][T16273] netlink: 'syz.1.2899': attribute type 8 has an invalid length. [ 506.973767][T16273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2899'. [ 506.984082][T15916] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 506.991023][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 507.004245][T16276] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2899'. [ 507.290338][T16281] netlink: 'syz.1.2902': attribute type 1 has an invalid length. [ 507.359926][T16281] ip6erspan0: entered promiscuous mode [ 507.502763][T16289] netlink: 'syz.4.2904': attribute type 1 has an invalid length. [ 507.545532][T15916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 507.568289][T16289] virt_wifi0 speed is unknown, defaulting to 1000 [ 507.573726][T16294] netlink: 580 bytes leftover after parsing attributes in process `syz.2.2905'. [ 507.618060][T15916] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.652178][T16289] virt_wifi0 speed is unknown, defaulting to 1000 [ 507.658878][T16297] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2904'. [ 507.683822][ T2934] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.691038][ T2934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.703844][ T2934] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.711065][ T2934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.740602][T16299] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2906'. [ 507.764697][T16299] 0{X: entered promiscuous mode [ 507.770115][T16289] virt_wifi0 speed is unknown, defaulting to 1000 [ 507.770750][T16299] 0{X: left allmulticast mode [ 507.787808][T16289] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 507.823597][T15911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.827631][T16289] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 507.894701][T16289] virt_wifi0 speed is unknown, defaulting to 1000 [ 507.945162][T16289] virt_wifi0 speed is unknown, defaulting to 1000 [ 507.978280][T16307] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2907'. [ 507.978378][T16289] virt_wifi0 speed is unknown, defaulting to 1000 [ 508.008488][T15911] veth0_vlan: entered promiscuous mode [ 508.017515][T16310] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2907'. [ 508.032449][T16289] virt_wifi0 speed is unknown, defaulting to 1000 [ 508.040952][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 508.067511][T15911] veth1_vlan: entered promiscuous mode [ 508.076404][T16289] virt_wifi0 speed is unknown, defaulting to 1000 [ 508.097370][T16289] virt_wifi0 speed is unknown, defaulting to 1000 [ 508.175281][T15911] veth0_macvtap: entered promiscuous mode [ 508.208649][T15911] veth1_macvtap: entered promiscuous mode [ 508.268010][T15911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.307225][T15911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 508.369535][T16320] FAULT_INJECTION: forcing a failure. [ 508.369535][T16320] name failslab, interval 1, probability 0, space 0, times 0 [ 508.375798][T15916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.422117][T15911] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.443273][T16320] CPU: 0 UID: 0 PID: 16320 Comm: syz.4.2909 Not tainted 6.15.0-rc3-syzkaller-00109-gf73f05c6f711 #0 PREEMPT(full) [ 508.443303][T16320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 508.443315][T16320] Call Trace: [ 508.443322][T16320] [ 508.443330][T16320] dump_stack_lvl+0x189/0x250 [ 508.443369][T16320] ? __pfx_dump_stack_lvl+0x10/0x10 [ 508.443399][T16320] ? __pfx__printk+0x10/0x10 [ 508.443434][T16320] ? __pfx___might_resched+0x10/0x10 [ 508.443472][T16320] should_fail_ex+0x414/0x560 [ 508.443508][T16320] should_failslab+0xa8/0x100 [ 508.443536][T16320] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 508.443563][T16320] ? __alloc_skb+0x112/0x2d0 [ 508.443586][T16320] __alloc_skb+0x112/0x2d0 [ 508.443607][T16320] netlink_sendmsg+0x5c6/0xb30 [ 508.443645][T16320] ? __pfx_netlink_sendmsg+0x10/0x10 [ 508.443677][T16320] ? aa_sock_msg_perm+0x94/0x160 [ 508.443699][T16320] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 508.443721][T16320] ? __pfx_netlink_sendmsg+0x10/0x10 [ 508.443752][T16320] __sock_sendmsg+0x219/0x270 [ 508.443782][T16320] ____sys_sendmsg+0x505/0x830 [ 508.443811][T16320] ? __pfx_____sys_sendmsg+0x10/0x10 [ 508.443843][T16320] ? import_iovec+0x74/0xa0 [ 508.443873][T16320] ___sys_sendmsg+0x21f/0x2a0 [ 508.443897][T16320] ? __pfx____sys_sendmsg+0x10/0x10 [ 508.443957][T16320] ? __fget_files+0x2a/0x420 [ 508.443983][T16320] ? __fget_files+0x3a0/0x420 [ 508.444020][T16320] __x64_sys_sendmsg+0x19b/0x260 [ 508.444045][T16320] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 508.444086][T16320] ? do_syscall_64+0xba/0x210 [ 508.444112][T16320] do_syscall_64+0xf6/0x210 [ 508.444134][T16320] ? clear_bhb_loop+0x45/0xa0 [ 508.444158][T16320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.444178][T16320] RIP: 0033:0x7f6481d8e969 [ 508.444196][T16320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.444214][T16320] RSP: 002b:00007f6482baa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 508.444236][T16320] RAX: ffffffffffffffda RBX: 00007f6481fb6080 RCX: 00007f6481d8e969 [ 508.444251][T16320] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 508.444263][T16320] RBP: 00007f6482baa090 R08: 0000000000000000 R09: 0000000000000000 [ 508.444275][T16320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.444287][T16320] R13: 0000000000000001 R14: 00007f6481fb6080 R15: 00007ffc204f1178 [ 508.444317][T16320] [ 508.449295][T15911] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.558229][T16327] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 508.668938][T15911] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.695514][T16326] netlink: 'syz.2.2912': attribute type 58 has an invalid length. [ 508.740289][T16326] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2912'. [ 508.751112][T15911] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.071268][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 509.099015][T15916] veth0_vlan: entered promiscuous mode [ 509.126831][ T2934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.142832][ T2934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.205780][T15916] veth1_vlan: entered promiscuous mode [ 509.249961][ T2934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.269398][ T2934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.412851][T15916] veth0_macvtap: entered promiscuous mode [ 509.422400][T16349] netlink: 'syz.4.2920': attribute type 10 has an invalid length. [ 509.469595][T16349] team0: Port device geneve0 added [ 509.495693][T15916] veth1_macvtap: entered promiscuous mode [ 509.644051][T15916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.675338][T15916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.703552][T15916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.743549][T15916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.756484][T15916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.778053][T15916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.805576][T15916] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.817559][T15916] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.834461][T15916] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.866665][T15916] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.897842][T16370] __nla_validate_parse: 9 callbacks suppressed [ 509.897863][T16370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2925'. [ 510.087396][ T2934] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.121110][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 510.189558][ T2934] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.300662][T10815] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.335286][T10815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.379833][T10815] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.400570][T10815] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.413917][ T2934] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.583902][ T2934] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.715693][ T2934] bridge_slave_1: left allmulticast mode [ 510.722450][ T2934] bridge_slave_1: left promiscuous mode [ 510.728185][ T2934] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.738678][ T2934] bridge_slave_0: left allmulticast mode [ 510.745146][ T2934] bridge_slave_0: left promiscuous mode [ 510.752315][ T2934] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.151006][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 511.243691][T16383] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2928'. [ 511.258734][T16383] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 511.283089][T16383] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2928'. [ 511.302300][T16383] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 511.382440][ T2934] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 511.396804][ T2934] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 511.410354][ T2934] bond0 (unregistering): Released all slaves [ 511.484787][ T5143] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 511.495577][ T5143] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 511.504861][ T5143] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 511.515719][ T5143] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 511.524519][ T5143] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 512.201090][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 512.401127][T16410] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2935'. [ 512.441604][T16413] netlink: 'syz.1.2937': attribute type 1 has an invalid length. [ 512.453672][T16415] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 512.471553][T16413] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2937'. [ 512.562804][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 512.574315][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 512.588336][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 512.602925][T16385] virt_wifi0 speed is unknown, defaulting to 1000 [ 512.624031][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 512.643948][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 512.718595][T16425] netlink: 'syz.1.2937': attribute type 21 has an invalid length. [ 513.016400][T16431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2941'. [ 513.241177][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 513.258340][ T2934] hsr_slave_0: left promiscuous mode [ 513.267457][ T2934] hsr_slave_1: left promiscuous mode [ 513.282219][ T2934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 513.289803][ T2934] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.316618][ T2934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.342359][ T2934] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.405983][ T2934] veth1_macvtap: left promiscuous mode [ 513.416842][ T2934] veth0_macvtap: left promiscuous mode [ 513.423100][ T2934] veth1_vlan: left promiscuous mode [ 513.429791][ T2934] veth0_vlan: left promiscuous mode [ 513.552401][ T5830] Bluetooth: hci0: command tx timeout [ 513.986603][ T2934] team0 (unregistering): Port device team_slave_1 removed [ 514.036480][ T2934] team0 (unregistering): Port device team_slave_0 removed [ 514.280975][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 514.738680][T16385] chnl_net:caif_netlink_parms(): no params data found [ 514.758469][ T5830] Bluetooth: hci2: command tx timeout [ 515.027763][T16461] netlink: 'syz.2.2950': attribute type 9 has an invalid length. [ 515.120063][T16466] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2951'. [ 515.265061][T16385] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.283540][T16385] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.301580][T16385] bridge_slave_0: entered allmulticast mode [ 515.311406][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 515.321699][T16385] bridge_slave_0: entered promiscuous mode [ 515.329503][T16418] virt_wifi0 speed is unknown, defaulting to 1000 [ 515.338031][T16473] netlink: 288 bytes leftover after parsing attributes in process `syz.2.2953'. [ 515.368757][T16385] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.382364][T16476] netlink: 288 bytes leftover after parsing attributes in process `syz.2.2953'. [ 515.397331][T16385] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.406058][T16385] bridge_slave_1: entered allmulticast mode [ 515.416143][T16385] bridge_slave_1: entered promiscuous mode [ 515.601472][ T2934] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.628636][T16385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.643754][T16385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.856300][ T2934] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.890567][T16385] team0: Port device team_slave_0 added [ 515.914749][T16385] team0: Port device team_slave_1 added [ 516.037836][ T2934] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.057552][T16385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.066358][T16385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.086155][T16509] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2962'. [ 516.103897][T16385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.140727][T16385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.152829][T16385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.199146][T16385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.257544][ T2934] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.361134][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 516.499965][T16385] hsr_slave_0: entered promiscuous mode [ 516.518086][T16385] hsr_slave_1: entered promiscuous mode [ 516.526174][T16385] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 516.535235][T16385] Cannot create hsr debugfs directory [ 516.685154][T16418] chnl_net:caif_netlink_parms(): no params data found [ 516.718601][T16530] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2967'. [ 516.743983][T16530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2967'. [ 516.813264][T16530] veth5: entered allmulticast mode [ 516.831805][ T5830] Bluetooth: hci2: command tx timeout [ 517.062558][T16549] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 517.108416][ T2934] bridge_slave_1: left allmulticast mode [ 517.125469][ T2934] bridge_slave_1: left promiscuous mode [ 517.147921][ T2934] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.206573][T16551] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.2974'. [ 517.232980][ T2934] bridge_slave_0: left allmulticast mode [ 517.238718][ T2934] bridge_slave_0: left promiscuous mode [ 517.246196][T16551] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.2974'. [ 517.252389][ T2934] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.283069][T16551] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.2974'. [ 517.295174][T16551] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.2974'. [ 517.391050][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 517.980380][ T2934] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 517.994868][ T2934] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.006570][ T2934] bond0 (unregistering): Released all slaves [ 518.309528][T16418] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.324179][T16418] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.347015][T16418] bridge_slave_0: entered allmulticast mode [ 518.381246][T16418] bridge_slave_0: entered promiscuous mode [ 518.431513][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 518.597772][T16418] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.608030][T16418] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.618607][T16418] bridge_slave_1: entered allmulticast mode [ 518.637713][T16418] bridge_slave_1: entered promiscuous mode [ 518.755886][ T30] audit: type=1107 audit(1745858869.860:6): pid=16607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='n7H0aɁnf|h`!}le'UiKwHEXxcxDY%%ndhGs [ 518.755886][ T30] bySu ' [ 518.912420][ T5830] Bluetooth: hci2: command tx timeout [ 519.048517][T16418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.090987][T16418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.291733][ T2934] hsr_slave_0: left promiscuous mode [ 519.302518][ T2934] hsr_slave_1: left promiscuous mode [ 519.319159][ T2934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.341553][ T2934] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.354112][ T2934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 519.369926][ T2934] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.400750][ T2934] veth1_macvtap: left promiscuous mode [ 519.407175][ T2934] veth0_macvtap: left promiscuous mode [ 519.413857][ T2934] veth1_vlan: left promiscuous mode [ 519.419621][ T2934] veth0_vlan: left promiscuous mode [ 519.470957][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 519.955695][ T2934] team0 (unregistering): Port device team_slave_1 removed [ 520.015974][ T2934] team0 (unregistering): Port device team_slave_0 removed [ 520.465458][T16418] team0: Port device team_slave_0 added [ 520.475114][T16617] __nla_validate_parse: 31 callbacks suppressed [ 520.475135][T16617] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2991'. [ 520.493552][T16617] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2991'. [ 520.508526][T16418] team0: Port device team_slave_1 added [ 520.520963][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 520.671709][T16418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.678714][T16418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.717484][T16418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.755733][T16418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.763443][T16418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.809933][T16418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.991935][ T5830] Bluetooth: hci2: command tx timeout [ 521.035840][T16418] hsr_slave_0: entered promiscuous mode [ 521.043495][T16418] hsr_slave_1: entered promiscuous mode [ 521.049722][T16418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 521.057990][T16418] Cannot create hsr debugfs directory [ 521.125566][T16385] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 521.178289][T16385] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 521.225336][T16642] netlink: 'syz.1.3000': attribute type 10 has an invalid length. [ 521.236235][T16385] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 521.251340][T16642] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3000'. [ 521.281444][T16642] dummy0: entered promiscuous mode [ 521.287704][T16642] bridge0: port 1(dummy0) entered blocking state [ 521.295501][T16642] bridge0: port 1(dummy0) entered disabled state [ 521.302322][T16642] dummy0: entered allmulticast mode [ 521.310394][T16642] dummy0: left allmulticast mode [ 521.316460][T16642] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 521.337466][T16385] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 521.561063][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 521.580314][T16653] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3004'. [ 521.753482][T16385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.789011][T16661] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3007'. [ 521.837755][T16385] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.860692][T10815] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.867925][T10815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.897787][T16663] : entered promiscuous mode [ 521.922578][T10816] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.929807][T10816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.946962][T16666] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3009'. [ 522.186102][T16418] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 522.230106][T16418] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 522.256708][T16418] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 522.293411][T16418] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 522.358568][T16385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.546789][T16385] veth0_vlan: entered promiscuous mode [ 522.569386][T16688] xt_limit: Overflow, try lower: 0/0 [ 522.579198][T16385] veth1_vlan: entered promiscuous mode [ 522.591535][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 522.693206][T16418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.762751][T16385] veth0_macvtap: entered promiscuous mode [ 522.763044][T16703] ieee802154 phy1 wpan1: encryption failed: -22 [ 522.806016][T16418] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.866701][T16385] veth1_macvtap: entered promiscuous mode [ 522.934208][T10815] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.941462][T10815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.000214][T10815] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.007465][T10815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.096810][T16385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 523.170319][T16385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 523.236538][T16385] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.257191][T16385] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.268056][T16385] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.283344][T16385] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.387278][T16728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3021'. [ 523.422294][T16728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3021'. [ 523.532152][T10816] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.542652][T10816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.641027][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 523.678491][ T2934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.696578][T16744] netlink: 'syz.4.3024': attribute type 12 has an invalid length. [ 523.704869][ T2934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.918509][T16753] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3027'. [ 523.958777][T16418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 523.967987][T16753] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3027'. [ 524.203862][T16418] veth0_vlan: entered promiscuous mode [ 524.229773][T16418] veth1_vlan: entered promiscuous mode [ 524.287880][T16766] netlink: 'syz.2.3030': attribute type 1 has an invalid length. [ 524.338284][T16418] veth0_macvtap: entered promiscuous mode [ 524.358835][T16418] veth1_macvtap: entered promiscuous mode [ 524.415001][T16418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.448070][T16418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.485400][T16418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 524.530105][T16418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.551829][T16418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.564272][T16418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 524.573015][T16776] bridge_slave_0: default FDB implementation only supports local addresses [ 524.644391][T16418] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.664002][T16418] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.672909][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 524.689329][T16418] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.716699][T16418] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.842134][T16794] netlink: 'syz.1.3035': attribute type 1 has an invalid length. [ 525.033492][ T1134] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.168769][ T2934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.189942][ T2934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.224291][ T2934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.241998][ T2934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.540427][ T1134] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.721060][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 525.745314][ T1134] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.865833][ T1134] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.999239][ T1134] bridge_slave_1: left allmulticast mode [ 526.006027][ T1134] bridge_slave_1: left promiscuous mode [ 526.012578][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.027998][ T1134] bridge_slave_0: left allmulticast mode [ 526.035356][ T1134] bridge_slave_0: left promiscuous mode [ 526.048154][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.425807][ T5143] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 526.443843][ T5143] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 526.456316][ T5143] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 526.470148][ T5143] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 526.479445][ T5143] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 526.639775][ T1134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 526.654859][ T1134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 526.672762][ T1134] bond0 (unregistering): Released all slaves [ 526.690533][T16807] netlink: 'syz.1.3040': attribute type 12 has an invalid length. [ 526.750950][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 527.101636][T16827] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 527.399432][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 527.414794][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 527.423760][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 527.454287][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 527.468333][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 527.607084][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.651235][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.682239][ T53] ------------[ cut here ]------------ [ 527.688402][ T53] WARNING: CPU: 0 PID: 53 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3ca/0x440 [ 527.699153][ T53] Modules linked in: [ 527.704171][ T53] CPU: 0 UID: 0 PID: 53 Comm: kworker/u8:3 Not tainted 6.15.0-rc3-syzkaller-00109-gf73f05c6f711 #0 PREEMPT(full) [ 527.718205][ T53] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 527.729362][ T53] Workqueue: cfg80211 cfg80211_event_work [ 527.735840][ T53] RIP: 0010:__cfg80211_ibss_joined+0x3ca/0x440 [ 527.743150][ T53] Code: 00 00 00 75 69 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 52 1c 0a f7 90 0f 0b 90 eb bd e8 47 1c 0a f7 90 <0f> 0b 90 4c 8b 6c 24 18 eb ad e8 37 1c 0a f7 90 0f 0b 90 e9 de fd [ 527.764077][ T53] RSP: 0018:ffffc90000be7980 EFLAGS: 00010293 [ 527.770669][ T53] RAX: ffffffff8ab5a139 RBX: dffffc0000000000 RCX: ffff888022690000 [ 527.779582][ T53] RDX: 0000000000000000 RSI: ffffffff8d747e11 RDI: ffffffff8bc1c820 [ 527.788304][ T53] RBP: ffffc90000be7a58 R08: ffffffff8f7ebe77 R09: 1ffffffff1efd7ce SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 527.797778][ T53] R10: dffffc0000000000 R11: fffffbfff1efd7cf R12: ffff888033f80d90 [ 527.801106][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 527.807004][ T53] R13: 1ffff9200017cf38 R14: ffff888078cc3338 R15: 0000000000000006 [ 527.822054][ T53] FS: 0000000000000000(0000) GS:ffff8881260cf000(0000) knlGS:0000000000000000 [ 527.832082][ T53] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 527.838705][ T53] CR2: 00007fb6112e56c0 CR3: 00000000610e8000 CR4: 00000000003526f0 [ 527.847367][ T53] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 527.855757][ T53] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 527.864850][ T53] Call Trace: [ 527.868667][ T53] [ 527.873414][ T53] ? lockdep_hardirqs_on+0x9c/0x150 [ 527.878668][ T53] ? __pfx___cfg80211_ibss_joined+0x10/0x10 [ 527.885264][ T53] ? cfg80211_event_work+0x24/0x60 [ 527.890437][ T53] ? __pfx___mutex_lock+0x10/0x10 [ 527.896525][ T53] cfg80211_process_wdev_events+0x38a/0x4f0 [ 527.903182][ T53] cfg80211_process_rdev_events+0xa1/0x110 [ 527.909048][ T53] cfg80211_event_work+0x2c/0x60 [ 527.914274][ T53] ? process_scheduled_works+0x9ec/0x17a0 [ 527.920038][ T53] process_scheduled_works+0xadb/0x17a0 [ 527.926059][ T53] ? __pfx_process_scheduled_works+0x10/0x10 [ 527.932172][ T53] worker_thread+0x8a0/0xda0 [ 527.936812][ T53] ? __kthread_parkme+0x7b/0x200 [ 527.942485][ T53] kthread+0x70e/0x8a0 [ 527.946600][ T53] ? __pfx_worker_thread+0x10/0x10 [ 527.954340][ T53] ? __pfx_kthread+0x10/0x10 [ 527.958995][ T53] ? __pfx_kthread+0x10/0x10 [ 527.966074][ T53] ? _raw_spin_unlock_irq+0x23/0x50 [ 527.972959][ T53] ? lockdep_hardirqs_on+0x9c/0x150 [ 527.978218][ T53] ? __pfx_kthread+0x10/0x10 [ 527.985535][ T53] ret_from_fork+0x4b/0x80 [ 527.990436][ T53] ? __pfx_kthread+0x10/0x10 [ 527.996089][ T53] ret_from_fork_asm+0x1a/0x30 [ 528.001949][ T53] [ 528.005016][ T53] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 528.012319][ T53] CPU: 0 UID: 0 PID: 53 Comm: kworker/u8:3 Not tainted 6.15.0-rc3-syzkaller-00109-gf73f05c6f711 #0 PREEMPT(full) [ 528.024325][ T53] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 528.034413][ T53] Workqueue: cfg80211 cfg80211_event_work [ 528.040182][ T53] Call Trace: [ 528.043493][ T53] [ 528.046441][ T53] dump_stack_lvl+0x99/0x250 [ 528.051158][ T53] ? __asan_memcpy+0x40/0x70 [ 528.055769][ T53] ? __pfx_dump_stack_lvl+0x10/0x10 [ 528.060991][ T53] ? __pfx__printk+0x10/0x10 [ 528.065633][ T53] panic+0x2db/0x790 [ 528.069574][ T53] ? __pfx_panic+0x10/0x10 [ 528.074040][ T53] ? show_trace_log_lvl+0x4fb/0x550 [ 528.079292][ T53] ? ret_from_fork_asm+0x1a/0x30 [ 528.084275][ T53] __warn+0x31b/0x4b0 [ 528.088310][ T53] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 528.093896][ T53] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 528.099484][ T53] report_bug+0x2be/0x4f0 [ 528.103856][ T53] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 528.109439][ T53] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 528.115019][ T53] ? __cfg80211_ibss_joined+0x3cc/0x440 [ 528.120865][ T53] handle_bug+0x84/0x160 [ 528.125148][ T53] exc_invalid_op+0x1a/0x50 [ 528.129676][ T53] asm_exc_invalid_op+0x1a/0x20 [ 528.134537][ T53] RIP: 0010:__cfg80211_ibss_joined+0x3ca/0x440 [ 528.140702][ T53] Code: 00 00 00 75 69 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 52 1c 0a f7 90 0f 0b 90 eb bd e8 47 1c 0a f7 90 <0f> 0b 90 4c 8b 6c 24 18 eb ad e8 37 1c 0a f7 90 0f 0b 90 e9 de fd [ 528.160332][ T53] RSP: 0018:ffffc90000be7980 EFLAGS: 00010293 [ 528.166600][ T53] RAX: ffffffff8ab5a139 RBX: dffffc0000000000 RCX: ffff888022690000 [ 528.174599][ T53] RDX: 0000000000000000 RSI: ffffffff8d747e11 RDI: ffffffff8bc1c820 [ 528.182604][ T53] RBP: ffffc90000be7a58 R08: ffffffff8f7ebe77 R09: 1ffffffff1efd7ce [ 528.190637][ T53] R10: dffffc0000000000 R11: fffffbfff1efd7cf R12: ffff888033f80d90 [ 528.198627][ T53] R13: 1ffff9200017cf38 R14: ffff888078cc3338 R15: 0000000000000006 [ 528.206624][ T53] ? __cfg80211_ibss_joined+0x3c9/0x440 [ 528.212196][ T53] ? lockdep_hardirqs_on+0x9c/0x150 [ 528.217415][ T53] ? __pfx___cfg80211_ibss_joined+0x10/0x10 [ 528.223314][ T53] ? cfg80211_event_work+0x24/0x60 [ 528.228437][ T53] ? __pfx___mutex_lock+0x10/0x10 [ 528.233472][ T53] cfg80211_process_wdev_events+0x38a/0x4f0 [ 528.239416][ T53] cfg80211_process_rdev_events+0xa1/0x110 [ 528.245282][ T53] cfg80211_event_work+0x2c/0x60 [ 528.250245][ T53] ? process_scheduled_works+0x9ec/0x17a0 [ 528.255998][ T53] process_scheduled_works+0xadb/0x17a0 [ 528.261600][ T53] ? __pfx_process_scheduled_works+0x10/0x10 [ 528.267622][ T53] worker_thread+0x8a0/0xda0 [ 528.272246][ T53] ? __kthread_parkme+0x7b/0x200 [ 528.277205][ T53] kthread+0x70e/0x8a0 [ 528.281308][ T53] ? __pfx_worker_thread+0x10/0x10 [ 528.286431][ T53] ? __pfx_kthread+0x10/0x10 [ 528.291131][ T53] ? __pfx_kthread+0x10/0x10 [ 528.295730][ T53] ? _raw_spin_unlock_irq+0x23/0x50 [ 528.300944][ T53] ? lockdep_hardirqs_on+0x9c/0x150 [ 528.306159][ T53] ? __pfx_kthread+0x10/0x10 [ 528.310852][ T53] ret_from_fork+0x4b/0x80 [ 528.315286][ T53] ? __pfx_kthread+0x10/0x10 [ 528.319886][ T53] ret_from_fork_asm+0x1a/0x30 [ 528.324677][ T53] [ 528.327959][ T53] Kernel Offset: disabled [ 528.332307][ T53] Rebooting in 86400 seconds..