last executing test programs: 1m37.586378646s ago: executing program 3 (id=198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[], 0xc8}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@RTM_DELMDB={0x38, 0x55, 0x32f, 0x0, 0x0, {0x7, r8}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@in6_addr=@empty}}}]}, 0x38}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a1a00010500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x400000000, 0x0, 0xfffffffffffffffe}) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000100)={'team0\x00', 0x8}) 1m36.544508106s ago: executing program 2 (id=275): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="290a00000000ebdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="240003"], 0x40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d784308000100", @ANYRES32=r3], 0x40}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}, 0x5, 0xfff, 0x7, 0x5, 0x0, 0xfffffffb, 0x8}, &(0x7f0000000000)=0x9c) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x55) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r8, 0x84, 0x79, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r7, 0x0, 0x0}, 0x10) (async) pipe(&(0x7f00000001c0)) (async) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) (async) setsockopt$inet_sctp_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) (async) recvfrom$rxrpc(r9, 0x0, 0x0, 0x40, &(0x7f0000000340)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x24) (async, rerun: 32) syz_emit_ethernet(0x5a, &(0x7f0000000580)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x20, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0xb, 0xf989, "2e00fcd7711aba"}]}}}}}}}}, 0x0) (rerun: 32) splice(r0, &(0x7f0000000040)=0x108, r0, 0x0, 0x80000000103, 0x0) 1m18.110479217s ago: executing program 3 (id=198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[], 0xc8}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@RTM_DELMDB={0x38, 0x55, 0x32f, 0x0, 0x0, {0x7, r8}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@in6_addr=@empty}}}]}, 0x38}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a1a00010500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x400000000, 0x0, 0xfffffffffffffffe}) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000100)={'team0\x00', 0x8}) 1m16.249581332s ago: executing program 2 (id=275): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="290a00000000ebdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="240003"], 0x40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d784308000100", @ANYRES32=r3], 0x40}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}, 0x5, 0xfff, 0x7, 0x5, 0x0, 0xfffffffb, 0x8}, &(0x7f0000000000)=0x9c) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x55) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r8, 0x84, 0x79, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r7, 0x0, 0x0}, 0x10) (async) pipe(&(0x7f00000001c0)) (async) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) (async) setsockopt$inet_sctp_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) (async) recvfrom$rxrpc(r9, 0x0, 0x0, 0x40, &(0x7f0000000340)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x24) (async, rerun: 32) syz_emit_ethernet(0x5a, &(0x7f0000000580)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x20, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0xb, 0xf989, "2e00fcd7711aba"}]}}}}}}}}, 0x0) (rerun: 32) splice(r0, &(0x7f0000000040)=0x108, r0, 0x0, 0x80000000103, 0x0) 58.872964549s ago: executing program 3 (id=198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[], 0xc8}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@RTM_DELMDB={0x38, 0x55, 0x32f, 0x0, 0x0, {0x7, r8}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@in6_addr=@empty}}}]}, 0x38}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a1a00010500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x400000000, 0x0, 0xfffffffffffffffe}) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000100)={'team0\x00', 0x8}) 56.462318427s ago: executing program 2 (id=275): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="290a00000000ebdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="240003"], 0x40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d784308000100", @ANYRES32=r3], 0x40}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}, 0x5, 0xfff, 0x7, 0x5, 0x0, 0xfffffffb, 0x8}, &(0x7f0000000000)=0x9c) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x55) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r8, 0x84, 0x79, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r7, 0x0, 0x0}, 0x10) (async) pipe(&(0x7f00000001c0)) (async) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) (async) setsockopt$inet_sctp_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) (async) recvfrom$rxrpc(r9, 0x0, 0x0, 0x40, &(0x7f0000000340)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x24) (async, rerun: 32) syz_emit_ethernet(0x5a, &(0x7f0000000580)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x20, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0xb, 0xf989, "2e00fcd7711aba"}]}}}}}}}}, 0x0) (rerun: 32) splice(r0, &(0x7f0000000040)=0x108, r0, 0x0, 0x80000000103, 0x0) 39.698937503s ago: executing program 3 (id=198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[], 0xc8}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@RTM_DELMDB={0x38, 0x55, 0x32f, 0x0, 0x0, {0x7, r8}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@in6_addr=@empty}}}]}, 0x38}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a1a00010500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x400000000, 0x0, 0xfffffffffffffffe}) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000100)={'team0\x00', 0x8}) 38.726546093s ago: executing program 2 (id=275): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="290a00000000ebdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="240003"], 0x40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d784308000100", @ANYRES32=r3], 0x40}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}, 0x5, 0xfff, 0x7, 0x5, 0x0, 0xfffffffb, 0x8}, &(0x7f0000000000)=0x9c) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x55) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r8, 0x84, 0x79, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r7, 0x0, 0x0}, 0x10) (async) pipe(&(0x7f00000001c0)) (async) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) (async) setsockopt$inet_sctp_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) (async) recvfrom$rxrpc(r9, 0x0, 0x0, 0x40, &(0x7f0000000340)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x24) (async, rerun: 32) syz_emit_ethernet(0x5a, &(0x7f0000000580)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x20, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0xb, 0xf989, "2e00fcd7711aba"}]}}}}}}}}, 0x0) (rerun: 32) splice(r0, &(0x7f0000000040)=0x108, r0, 0x0, 0x80000000103, 0x0) 22.535153436s ago: executing program 3 (id=198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[], 0xc8}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@RTM_DELMDB={0x38, 0x55, 0x32f, 0x0, 0x0, {0x7, r8}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@in6_addr=@empty}}}]}, 0x38}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a1a00010500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x400000000, 0x0, 0xfffffffffffffffe}) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000100)={'team0\x00', 0x8}) 20.288767808s ago: executing program 2 (id=275): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="290a00000000ebdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="240003"], 0x40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d784308000100", @ANYRES32=r3], 0x40}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}, 0x5, 0xfff, 0x7, 0x5, 0x0, 0xfffffffb, 0x8}, &(0x7f0000000000)=0x9c) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x55) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r8, 0x84, 0x79, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r7, 0x0, 0x0}, 0x10) (async) pipe(&(0x7f00000001c0)) (async) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) (async) setsockopt$inet_sctp_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) (async) recvfrom$rxrpc(r9, 0x0, 0x0, 0x40, &(0x7f0000000340)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x24) (async, rerun: 32) syz_emit_ethernet(0x5a, &(0x7f0000000580)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x20, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0xb, 0xf989, "2e00fcd7711aba"}]}}}}}}}}, 0x0) (rerun: 32) splice(r0, &(0x7f0000000040)=0x108, r0, 0x0, 0x80000000103, 0x0) 5.735086705s ago: executing program 0 (id=2032): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_ringparam={0x11, 0x4, 0x7, 0xe48, 0x0, 0x1000, 0x10000, 0x9, 0x9}}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmmsg(r2, &(0x7f0000001a40)=[{{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f0000000240)=""/181, 0xb5}], 0x1, &(0x7f00000005c0)=""/4096, 0x1000}, 0xe}, {{&(0x7f00000003c0)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000000440)=""/212, 0xd4}, {&(0x7f00000015c0)=""/88, 0x58}, {0x0}, {&(0x7f0000001700)=""/253, 0xfd}, {&(0x7f0000001800)=""/115, 0x73}, {&(0x7f0000001880)=""/35, 0x23}, {&(0x7f00000018c0)=""/199, 0xc7}], 0x7}, 0x5}], 0x2, 0x40012001, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x9, 0x2, 0x3, 0x8, 0x4}, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028005000300000000000800014000000001080002400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000340), &(0x7f0000000380)=0xc) 5.624628024s ago: executing program 0 (id=2034): r0 = epoll_create1(0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) epoll_pwait(r0, &(0x7f0000000300)=[{}], 0x1, 0x1ff, 0x0, 0x0) epoll_pwait(r0, &(0x7f0000000480)=[{}], 0x1, 0xffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000011c0)={0x9}) r2 = socket$xdp(0x2c, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)={0x10000002}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000b44000/0x3000)=nil, 0x3000, 0x1000005, 0x8012, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'lo\x00'}) mmap(&(0x7f0000858000/0x2000)=nil, 0x2000, 0x2000004, 0x12, r5, 0xc08ba000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000006, 0x12, r5, 0xe93f6000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000001, 0x2010, 0xffffffffffffffff, 0x80000000) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0xfffffffe) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r6) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002bbd70000800000002000000080001000000003c"], 0x1c}}, 0x20000004) socket$vsock_stream(0x28, 0x1, 0x0) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000540)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) connect$vsock_stream(r8, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @local}, 0x10) r9 = socket(0x2b, 0x80801, 0x1) ioctl$sock_inet6_tcp_SIOCATMARK(r9, 0x5411, &(0x7f0000000040)) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) close(r3) 5.343545556s ago: executing program 0 (id=2037): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32], 0x54}}, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x2, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0xe]}}]}}]}, 0x94}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) 5.041407374s ago: executing program 0 (id=2040): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22, &(0x7f0000000380)=@ringbuf={{}, {}, {}, [@kfunc, @generic, @map_idx, @ringbuf_query, @printk={@s}, @jmp, @map_fd]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x92, &(0x7f0000000240)=""/146, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f00000005c0)=""/240, 0xf0}], 0x1, 0x200, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r4) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b4020000", @ANYRES16=r6, @ANYBLOB="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"], 0x2b4}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="02"], 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r7, @ANYRES32=r10, @ANYBLOB="0200000002"], 0x10) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r11, &(0x7f0000000480)={0x24, @short={0x2, 0x2, 0xaaa3}}, 0x14) setsockopt$SO_TIMESTAMP(r11, 0x1, 0x1e, &(0x7f0000000c00)=0x80000001, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x4e}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 4.609851959s ago: executing program 0 (id=2044): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="8500000055000000040000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x7000000}]}}]}, 0x48}}, 0x0) r4 = accept4$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f00000000c0)={0x8, 0x75, 0x3, 0x9, 0x4, 0x6, 0x5}, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="8500000055000000040000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x7000000}]}}]}, 0x48}}, 0x0) (async) accept4$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x800) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f00000000c0)={0x8, 0x75, 0x3, 0x9, 0x4, 0x6, 0x5}, 0xc) (async) 4.270142324s ago: executing program 0 (id=2047): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x17, 0x56, 0xd23}, 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x40, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x5}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x6}, @TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x7c872ace}, @TCA_CAKE_NAT={0x8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x7}]}}]}, 0x70}}, 0x0) 4.242975038s ago: executing program 4 (id=2048): r0 = socket(0x2, 0x3, 0xff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000007c0)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x130, 0x130, 0x130, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) r2 = socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) (async) write$cgroup_type(r3, &(0x7f00000000c0), 0x9) (async) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x1f}, 0xc724}, 0x1c) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r4, 0x1, 0x10, 0x0, &(0x7f0000000240)) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r2, 0x0, 0x0, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x58, r7, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'sit0\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x58}}, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000380)={0x1d, r9, 0x0, {0x2, 0xf0, 0x1}, 0xfe}, 0x18) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000280)={'gre0\x00', 0x0, 0x20, 0x80, 0x5000000, 0xb, {{0x19, 0x4, 0x3, 0x24, 0x64, 0x68, 0x0, 0x9, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x1b, 0x2d, [@multicast1, @dev={0xac, 0x14, 0x14, 0x1a}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast1]}, @timestamp_prespec={0x44, 0x34, 0x40, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0xf}, 0x7}, {@local, 0x7}, {@private=0xa010100, 0xca04}, {@private=0xa010101, 0x7}, {@loopback, 0x8}, {@private=0xa010100}]}, @end]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x50, r7, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x4}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20008040) (async) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r5) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="afe60000", @ANYRES16=r11, @ANYBLOB="20002dbd7000ffdbdf250700000008002c000100000008002b000080000008000600", @ANYRES32=0x0, @ANYBLOB="08002c0008000000050033000200000005002d000100000008000600", @ANYRES32=0x0, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x20040005}, 0x895) 3.696094263s ago: executing program 4 (id=2050): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bb00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x9, @mcast1, 0x6}}, {{0xa, 0x4, 0x0, @loopback, 0x8b2}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000540)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @loopback}}]}, 0x190) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x49144}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x3}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 3.381014208s ago: executing program 1 (id=2052): close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000400)={'wlan1\x00'}) syz_emit_ethernet(0x15, &(0x7f0000000540)={@random="fb57e76be621", @multicast, @val={@void, {0x8100, 0x1, 0x1, 0x3}}, {@x25={0x805, {0x3, 0x2, 0xf}}}}, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f00000008c0)={0x0, 0x9, 0x7ff}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000cc0)={r1, "ac16e22232ae3152152dd4ed5b64cf06"}) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x48, r4, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {0x10}, @broadcast, @device_b, @initial, {0x0, 0x400}}, @ext_ch_sw={0x4, 0x4, {{0x1, 0x2, 0x64, 0x9}, @val={0x76, 0x6, {0x3, 0x7, 0x2b, 0x1}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$netlink(r2, &(0x7f00000004c0)={0x0, 0x3e, &(0x7f00000002c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="34000000120001000000000000000000100000000c000000000000000000000014003700fe800000000000000000000000000014d7a77d4da1af1db400228d83e899f154537e7ef001dff851414131287c12dd541395afdce7ae2074be861b21caa43637887bcaac3fcc3d2c5aec54a56dbf0761c56b025ab9508d17e0fc3cdf1dc6a45595c88d75a4430d1cdd84855d94f820179171893f8cf0dd7fc889dd98019b7c6918b4860cc02b1db4be2fd33f5897ab6b7df9c5ad5ea58e5264ede1cd61c99a0c"], 0x34}], 0x1}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000b02000/0x3000)=nil, 0x3000, 0x1000002, 0x28011, r6, 0x3000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20004844}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.275072402s ago: executing program 4 (id=2053): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x28, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x22, 0x0, 0x0, @u64}, @typed={0xffffffb1, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x30, r2, 0x1, 0x70bd29, 0x4, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xca}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4804}, 0x80) r4 = socket(0x26, 0x6, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010300000000030000f11c000000180001801400020076657468305f766c616e"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'gre0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x8, 0xf800, 0xfffffff8, 0x7fff, {{0x23, 0x4, 0x0, 0x1, 0x8c, 0x68, 0x0, 0x4, 0x2f, 0x0, @multicast1, @multicast1, {[@lsrr={0x83, 0x1b, 0x29, [@private=0xa010100, @remote, @local, @local, @multicast1, @remote]}, @cipso={0x86, 0x47, 0x3, [{0x5, 0xe, "577de2da3b7ecfbd21a9e595"}, {0x2, 0x2}, {0x6, 0xe, "c4cf73390563fbc834b9c37b"}, {0x1, 0xb, "a57e664c008853fb6d"}, {0x1, 0xc, "ddb9055aac10750237b6"}, {0x0, 0xc, "983e1b7ee7998c628da0"}]}, @cipso={0x86, 0x15, 0x3, [{0x6, 0x9, "c69498fba87c50"}, {0x6, 0x6, "e35128ba"}]}]}}}}}) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macvtap0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001800)={0x12b8, r6, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xd0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xc7, 0x5, "3b856160f486740386462e7bb72b9ae9fddf4502a78e807680dea06b5801294ef0d48798b12f0968461a02cbb039cd3a37f6542d8cb10eaf8e843bce5a45e156c1a908a0975173829908d90e4bfd957977b5a93bd99c44cc8236b523a076822b7e3fa4fc21ee2da7266f0e5fa62a26591adc942ac42c43402fba7b121ed5d094349030720e7e330d940b0c78fb8fb71fad78bf7860a03ead189ba4d860a37eccaca762435ab1967328b1cdb2ce9ab4ae1e86ea89a702fcd225144cb60df04fac93c86c"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x10c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xe0, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x11d}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '*\xba\xc9\xc5\x98\x01\x8c0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x3, [@union={0x9, 0x5, 0x0, 0x5, 0x1, 0x7fffffff, [{0x5, 0x1, 0x4}, {0xe, 0x3, 0x4}, {0xd, 0x3, 0xc59}, {0xb, 0xffffffff, 0x9}, {0xb, 0x3, 0x9}]}]}, {0x0, [0x30]}}, &(0x7f0000000680)=""/113, 0x63, 0x71, 0x0, 0x9, 0x0, @void, @value}, 0x28) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000840)={0x0, 0x0}, 0x8) (async) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ec0)={0x6, 0x16, &(0x7f0000000880)=@raw=[@exit, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @alu={0x4, 0x1, 0xb, 0x8, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc}, @ldst={0x0, 0x1, 0x2, 0x6, 0x9, 0xfffffffffffffffc, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_fd={0x18, 0x9}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000}}], &(0x7f0000000940)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x40, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000009c0)={0x4, 0x4, 0xff, 0x4}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000a00)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0x1, 0x1], &(0x7f0000000a40)=[{0x1, 0x1, 0xf, 0x1}, {0x4, 0x1, 0xe, 0x9}], 0x10, 0x5, @void, @value}, 0x94) (async, rerun: 64) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=@base={0x15, 0x1, 0x317d, 0x0, 0x20000, 0xffffffffffffffff, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x5, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, [@map_idx_val={0x18, 0xf, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f00000005c0)='GPL\x00', 0x6, 0x1000, &(0x7f00000022c0)=""/4096, 0xc3100, 0x0, '\x00', 0x0, @fallback=0x31, r5, 0x8, &(0x7f0000000740)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0x10, 0x8, 0xfff}, 0x10, r6, r7, 0x3, &(0x7f0000000a80)=[r8, 0xffffffffffffffff], &(0x7f0000001000)=[{0x0, 0x3, 0x5, 0x3}, {0x2, 0x2, 0x1}, {0x4, 0x1, 0x9, 0x8}], 0x10, 0x6, @void, @value}, 0x94) (async) bind$alg(r4, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async) r9 = accept$alg(r4, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000005500)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="77167ead34cd1eaf2108c04de96e99fa4435f9041368e8dfec6af2ae8080b56c53c12b8431d17955ae1ec78709eee9acf825fdb672651f7eafb44b576930aff4b6a86ced3e4392cfe57a2c11b97e93f38debd6dc69f3a50d5742daa7081df08bd8118dcd6d9d18830c7d79d8", 0x6c}, {&(0x7f00000000c0)="23ade41881a1e7ca07379924e2cb53138ec1e2ac415947eb6c7f56119ff98596d7469564e6d7c49134d1d57bf4cf20e6ba85156f3c5aa55a181146316537eceea0fff85f05333feea12645495ffa", 0x4e}, {&(0x7f0000000140)="66348451d22f5e2e4385e0bf75c5c3d30327039c072cd147f3b25df80100010000000004706aa85896228ef23136cbc160147a23", 0x34}, {&(0x7f0000000180)="fe6abb1be48e556b473cabd427d746ca7d9bbf4f24ec7659b1c254940281f0a248dfc8c103fad1369a53e3402210b77170735064ceae5fcf381d21cc8960440e0a459705262c4c53065f369fe8e63bc7650112b91fdccaceff93fd8cdab5a479b9614318eebc5a609b633b114fe330c840cc077cd6a6f6ca2bca0cc48c06177e0bc3b7fe6320e9f2e5a824d74aa3cccac383bacd0a126a58fa999675ad5c41c171807570ac0501332c2794950f4633a074325e58cd43d58340513dbc10eaaf4ff3c4b8d98621267d8b1abdbf01d7de9a86c2d4373dd907da5a", 0xd9}, {&(0x7f0000000280)="1b1eb47967b88f89e960c59413baaf1384ad9c758abf845c5714a919ca02735c5514fa78f9f084d72227c1d3f6607ce5a2183a169535d0b2bb594ecb92b8df361bca805ac5595a389d39a58a35c0ff662c2c83431c0c2e2ece5ca6a104d1d45c1c15ca4d75cab6b1bb923cac1c51270bf577cf4c79ba54a6c45a345cc13208fa430c1e54548e5a9c5cf4", 0x8a}], 0x5}], 0x1, 0x4814) (async) recvmmsg(r9, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1}, 0xffffff0b}], 0x2, 0x2001, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) r13 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r13, &(0x7f0000007940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003001100000000000000000000001c00000000000000000f00fdffff0700", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f020c030000", @ANYRES32=0x0, @ANYBLOB="a0050000000000000000000012000000000000008400000006"], 0x98}, 0x0) (async, rerun: 64) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_TOS={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) (async, rerun: 64) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r2) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000b40)={0x368, r14, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf8a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x90, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x56f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x38f}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_NODE={0x1c4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xe4, 0x3, "ed444252be951d68a1bed6791c29cf2e66ca43621575c273dca1edd34e4fa542ecd69d2a1c98d6b0701dcebc566541aff810ff56fbb59417f91cb631833d49918c2fdcb46421ea163ffc618df59704ce1207769f2157db501fec4527f37eedc18fa16e2b99e41eaa99b110b65f57975b0e92251ddbbca18006f9865ad269ec08027f8f67263aa12f3dc03ebe2584ee9cdec420cfd87822c6c858b710131bca9c28fe9de6eadda028e861e0f3b71f3df83f46a2fb60d0eec169c2ee21a0c28978ea38eeca34fd5f36f966ab7df87cac04d09f7ff916bad9e53431c3539d1ff0cb"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x7c, 0x3, "dc1049d8717dad74f3ef954b7b5634bbe57bdd57394ad699e75aa9f383f81b6c90f7206f1761eee813ffa9064b06696d9878c25110f210a80f66e505975bd0c7ca551ebf43f53f7e8f0b857e22278c55b5157df157a6881026db30caf047981894de69274c68d36c9b69d9910c0c5e2476f10941f18b9f3b"}, @TIPC_NLA_NODE_ID={0x4f, 0x3, "4bdd28a3f9ea1d28f36a017baa42b47f046405f34830cf316c1f5061feb4be16f9e063d1cbec755a819aa389bcaebd6a5c4a4ee9957b6923548d0213b35f6ca542c7d363b3637afeb6a75a"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa18}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}]}]}, 0x368}, 0x1, 0x0, 0x0, 0x40}, 0x10) r15 = socket(0x1, 0x803, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 1.402817269s ago: executing program 4 (id=2060): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) recvfrom$rxrpc(r6, 0x0, 0x0, 0x40, &(0x7f0000000340)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x24) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_TABLE={0x8}]}, 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="50000000100001042dbd7000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="0000000000000000300012800800010073697400240002800600100002000000", @ANYBLOB="08000100f9ae8aa7b2d5"], 0x50}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x401, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x8, 0x17, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b6090100000018010000646c6c250000000000202020639af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000003f93000000000000b5030000000000008500000076000000b700000000000000950000000000000000000000000000000000e46ba56e6754d68b34b6a77efd3b8706da32a468cd269496df9702d6e3b12cd2f5e1cc8f4c9f46cee40f64ba2859fe0aaa2dd4492857a032c634d9b73d0f9d158af88c04eb"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x1) ioctl$TUNSETQUEUE(r8, 0x800454d2, &(0x7f0000000340)={'veth1\x00'}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 962.496263ms ago: executing program 3 (id=198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[], 0xc8}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@RTM_DELMDB={0x38, 0x55, 0x32f, 0x0, 0x0, {0x7, r8}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@in6_addr=@empty}}}]}, 0x38}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a1a00010500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x400000000, 0x0, 0xfffffffffffffffe}) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000100)={'team0\x00', 0x8}) 3.189346ms ago: executing program 1 (id=2061): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$l2tp6(r0, &(0x7f0000000200)={0xa, 0x0, 0x8, @local, 0x200000, 0x2}, 0x20) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0xfffffffc}, 0x1c) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x0, 0x8, [0x7, 0x7, 0x2, 0xfc00, 0x6, 0x5, 0x6, 0x9]}, &(0x7f0000000080)=0x18) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r1, 0x40}, 0x8) 0s ago: executing program 2 (id=275): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="290a00000000ebdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="240003"], 0x40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d784308000100", @ANYRES32=r3], 0x40}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}, 0x5, 0xfff, 0x7, 0x5, 0x0, 0xfffffffb, 0x8}, &(0x7f0000000000)=0x9c) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x55) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r8, 0x84, 0x79, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r7, 0x0, 0x0}, 0x10) (async) pipe(&(0x7f00000001c0)) (async) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) (async) setsockopt$inet_sctp_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) (async) recvfrom$rxrpc(r9, 0x0, 0x0, 0x40, &(0x7f0000000340)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x24) (async, rerun: 32) syz_emit_ethernet(0x5a, &(0x7f0000000580)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x20, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0xb, 0xf989, "2e00fcd7711aba"}]}}}}}}}}, 0x0) (rerun: 32) splice(r0, &(0x7f0000000040)=0x108, r0, 0x0, 0x80000000103, 0x0) kernel console output (not intermixed with test programs): Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 297.405489][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 297.794267][ T5156] Bluetooth: hci3: command tx timeout [ 297.897983][ T12] hsr_slave_0: left promiscuous mode [ 297.916379][ T12] hsr_slave_1: left promiscuous mode [ 297.928810][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.941416][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.951585][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.960459][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.025666][ T12] veth1_macvtap: left promiscuous mode [ 298.032185][ T12] veth0_macvtap: left promiscuous mode [ 298.039622][ T12] veth1_vlan: left promiscuous mode [ 298.045850][ T12] veth0_vlan: left promiscuous mode [ 298.072204][T12075] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 298.549007][ T12] team0 (unregistering): Port device team_slave_1 removed [ 298.588352][ T12] team0 (unregistering): Port device team_slave_0 removed [ 299.196798][T12085] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1299'. [ 299.399442][T11998] chnl_net:caif_netlink_parms(): no params data found [ 299.482385][ T5156] Bluetooth: hci4: command tx timeout [ 299.770485][T12055] lo speed is unknown, defaulting to 1000 [ 299.877651][T11998] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.885331][ T5156] Bluetooth: hci3: command tx timeout [ 299.918194][T11998] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.939781][T11998] bridge_slave_0: entered allmulticast mode [ 299.982242][T11998] bridge_slave_0: entered promiscuous mode [ 300.022163][T11998] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.059347][T11998] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.090135][T11998] bridge_slave_1: entered allmulticast mode [ 300.134986][T11998] bridge_slave_1: entered promiscuous mode [ 300.342736][T12124] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1303'. [ 300.381779][T12129] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 300.407762][T12130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1305'. [ 300.471451][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.537289][T11998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.571320][T11998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.721102][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.901528][T12152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1309'. [ 300.978309][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.032653][T11998] team0: Port device team_slave_0 added [ 301.143445][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.163559][T11998] team0: Port device team_slave_1 added [ 301.220359][T12162] 8021q: VLANs not supported on ip6_vti0 [ 301.375553][T11998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.401604][T11998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.510613][T11998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.544959][T11998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.554722][ T5156] Bluetooth: hci4: command tx timeout [ 301.568562][T11998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.595167][T11998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.869286][T11998] hsr_slave_0: entered promiscuous mode [ 301.940406][T11998] hsr_slave_1: entered promiscuous mode [ 301.963110][ T5156] Bluetooth: hci3: command tx timeout [ 301.972254][T11998] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 302.000415][T11998] Cannot create hsr debugfs directory [ 302.171297][T12212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1324'. [ 302.388297][T12212] gtp0: entered promiscuous mode [ 302.393409][T12212] gtp0: entered allmulticast mode [ 302.461951][ T12] bridge_slave_1: left allmulticast mode [ 302.474534][ T12] bridge_slave_1: left promiscuous mode [ 302.489316][T12228] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 302.490600][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.532512][ T12] bridge_slave_0: left allmulticast mode [ 302.549803][ T12] bridge_slave_0: left promiscuous mode [ 302.570885][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.726533][T12239] xt_cluster: node mask cannot exceed total number of nodes [ 303.040438][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.052567][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.063171][ T12] bond0 (unregistering): Released all slaves [ 303.086974][T12222] netem: change failed [ 303.238576][T12242] bridge2: entered promiscuous mode [ 303.244853][T12242] bridge2: entered allmulticast mode [ 303.282963][T12055] chnl_net:caif_netlink_parms(): no params data found [ 303.372389][T12250] netlink: 'syz.0.1330': attribute type 7 has an invalid length. [ 303.381977][T12247] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1329'. [ 303.385412][T12250] netlink: 'syz.0.1330': attribute type 8 has an invalid length. [ 303.644328][ T5156] Bluetooth: hci4: command tx timeout [ 303.791396][T12270] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1337'. [ 304.037460][ T5156] Bluetooth: hci3: command tx timeout [ 304.087717][T12284] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1342'. [ 304.139036][T12055] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.155866][T12055] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.163162][T12055] bridge_slave_0: entered allmulticast mode [ 304.206071][T12055] bridge_slave_0: entered promiscuous mode [ 304.226311][T12055] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.233585][T12055] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.261849][T12055] bridge_slave_1: entered allmulticast mode [ 304.281906][T12055] bridge_slave_1: entered promiscuous mode [ 304.439898][T12291] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1345'. [ 304.573450][T12292] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1344'. [ 304.603182][T12055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.636990][T12055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.655439][ T12] hsr_slave_0: left promiscuous mode [ 304.666325][ T12] hsr_slave_1: left promiscuous mode [ 304.674609][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.682195][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.693940][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.708059][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.750038][ T12] veth1_macvtap: left promiscuous mode [ 304.757317][ T12] veth0_macvtap: left promiscuous mode [ 304.763437][ T12] veth1_vlan: left promiscuous mode [ 304.778709][ T12] veth0_vlan: left promiscuous mode [ 304.978656][T12313] netlink: 'syz.1.1347': attribute type 2 has an invalid length. [ 304.990066][T12313] netlink: 119 bytes leftover after parsing attributes in process `syz.1.1347'. [ 305.548688][ T12] team0 (unregistering): Port device team_slave_1 removed [ 305.589244][ T12] team0 (unregistering): Port device team_slave_0 removed [ 305.716683][ T5156] Bluetooth: hci4: command tx timeout [ 305.976814][T12299] lo: entered allmulticast mode [ 306.232313][T12055] team0: Port device team_slave_0 added [ 306.321267][T12055] team0: Port device team_slave_1 added [ 306.443697][T12055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.451153][T12055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.477745][T12055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.529578][T12055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.576032][T12055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.632250][T12344] netlink: 'syz.4.1354': attribute type 1 has an invalid length. [ 306.649174][T12055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.687887][T12344] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1354'. [ 306.861534][T12350] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1356'. [ 306.921588][T12055] hsr_slave_0: entered promiscuous mode [ 306.946077][T12055] hsr_slave_1: entered promiscuous mode [ 306.952501][T12055] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.985289][T12055] Cannot create hsr debugfs directory [ 307.231506][T11998] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 307.258428][T11998] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 307.341010][T11998] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 307.380966][T11998] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 307.489278][T12329] lo speed is unknown, defaulting to 1000 [ 308.041510][T11998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.137603][T12389] C: renamed from team_slave_0 (while UP) [ 308.146745][T12389] netlink: 'syz.4.1364': attribute type 1 has an invalid length. [ 308.155795][T12389] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 308.196523][T12055] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 308.213324][T12055] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 308.302902][T12055] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 308.314941][T12395] netlink: 'syz.0.1367': attribute type 1 has an invalid length. [ 308.322837][T12395] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1367'. [ 308.340202][T11998] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.375631][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.382841][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.427924][T12055] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 308.451046][T12395] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1367'. [ 308.474288][T12395] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1367'. [ 308.510943][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.518160][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.782111][T12416] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 308.979776][T12055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.059032][T12055] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.136440][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.143660][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.183843][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.191037][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.462652][T12434] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1374'. [ 309.507344][T12434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1374'. [ 309.516555][T12434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1374'. [ 309.546599][T12434] netlink: 'syz.0.1374': attribute type 1 has an invalid length. [ 309.587874][T12439] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1374'. [ 309.602603][T12434] nbd: error processing sock list [ 309.628816][T11998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.856736][T11998] veth0_vlan: entered promiscuous mode [ 309.910559][T11998] veth1_vlan: entered promiscuous mode [ 309.963667][T12447] netlink: 'syz.0.1376': attribute type 11 has an invalid length. [ 310.005645][T12446] tipc: Started in network mode [ 310.011630][T12449] netlink: 'syz.0.1376': attribute type 11 has an invalid length. [ 310.014651][T12446] tipc: Node identity -, cluster identity 4711 [ 310.058728][T12446] tipc: Enabling of bearer rejected, failed to enable media [ 310.200289][T11998] veth0_macvtap: entered promiscuous mode [ 310.260276][T11998] veth1_macvtap: entered promiscuous mode [ 310.329075][T12055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.367874][T11998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.398665][T11998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.437252][T11998] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.456458][T11998] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.473337][T11998] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.490510][T11998] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.518313][T12467] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1379'. [ 310.642999][T12055] veth0_vlan: entered promiscuous mode [ 310.739908][T12055] veth1_vlan: entered promiscuous mode [ 310.792634][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.808129][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.835702][ T5156] Bluetooth: hci0: command tx timeout [ 310.918077][T11633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.952275][T11633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.957673][T12055] veth0_macvtap: entered promiscuous mode [ 311.017706][T12055] veth1_macvtap: entered promiscuous mode [ 311.105870][T12055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.138993][T12483] netlink: 'syz.4.1383': attribute type 10 has an invalid length. [ 311.169732][T12485] dummy0: left allmulticast mode [ 311.178129][T12485] bridge0: port 3(dummy0) entered disabled state [ 311.200117][T12485] batman_adv: batadv0: Adding interface: dummy0 [ 311.228708][T12485] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem. [ 311.259760][T12485] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 311.276603][T12055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.416760][T12055] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.437137][T12055] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.460855][T12055] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.469809][T12055] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.706754][T11633] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.835640][T12508] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1389'. [ 311.889034][T11633] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.117010][T11633] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.211499][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.238814][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.277841][T11633] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.372430][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.383981][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.661518][T11633] bridge_slave_1: left allmulticast mode [ 312.672145][T11633] bridge_slave_1: left promiscuous mode [ 312.679573][T11633] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.707798][T11633] bridge_slave_0: left allmulticast mode [ 312.713507][T11633] bridge_slave_0: left promiscuous mode [ 312.719766][T11633] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.019719][T11633] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.032041][T11633] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.042282][T11633] bond0 (unregistering): Released all slaves [ 314.231232][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 314.240582][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 314.249805][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 314.260278][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 314.269322][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 314.302161][T11633] hsr_slave_0: left promiscuous mode [ 314.309122][T11633] hsr_slave_1: left promiscuous mode [ 314.315974][T11633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.323438][T11633] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.333281][T11633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.341595][T11633] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.372354][T11633] veth1_macvtap: left promiscuous mode [ 314.381092][T11633] veth0_macvtap: left promiscuous mode [ 314.390513][T11633] veth1_vlan: left promiscuous mode [ 314.399451][T11633] veth0_vlan: left promiscuous mode [ 315.297119][T11633] team0 (unregistering): Port device team_slave_1 removed [ 315.358053][T11633] team0 (unregistering): Port device team_slave_0 removed [ 315.422611][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 315.438348][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 315.458054][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 315.473656][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 315.484031][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 315.920530][T12587] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 315.953011][T12587] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 315.996760][T12587] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 316.282632][T12601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1397'. [ 316.327046][T12601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1397'. [ 316.354471][ T5156] Bluetooth: hci3: command tx timeout [ 316.408790][T12601] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1397'. [ 316.675080][T12616] openvswitch: netlink: Multiple metadata blocks provided [ 316.782472][T11633] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.838152][T12552] lo speed is unknown, defaulting to 1000 [ 317.038974][T11633] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.250771][T11633] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.523393][T11633] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.548927][T12646] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 317.557645][ T5156] Bluetooth: hci4: command tx timeout [ 317.741262][T12588] lo speed is unknown, defaulting to 1000 [ 318.159192][T11633] bridge_slave_1: left allmulticast mode [ 318.196214][T11633] bridge_slave_1: left promiscuous mode [ 318.203001][T11633] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.238623][T11633] bridge_slave_0: left allmulticast mode [ 318.244514][T11633] bridge_slave_0: left promiscuous mode [ 318.254221][T11633] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.435478][ T5156] Bluetooth: hci3: command tx timeout [ 318.888593][T11633] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.907710][T11633] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.923284][T11633] bond0 (unregistering): Released all slaves [ 319.145991][T12696] netlink: 'syz.0.1416': attribute type 32 has an invalid length. [ 319.158601][T12696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1416'. [ 319.176732][T12698] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1417'. [ 319.200682][T12702] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 319.269802][T12696] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 319.504484][T12552] chnl_net:caif_netlink_parms(): no params data found [ 319.591946][T12719] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1422'. [ 319.644244][ T5156] Bluetooth: hci4: command tx timeout [ 319.759358][T12719] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1422'. [ 319.774906][T12721] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1423'. [ 320.210430][T11633] hsr_slave_0: left promiscuous mode [ 320.239706][T11633] hsr_slave_1: left promiscuous mode [ 320.262978][T11633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.281846][T11633] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.305383][T11633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.312996][T11633] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.346204][T12750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1430'. [ 320.357089][T11633] veth1_macvtap: left promiscuous mode [ 320.362643][T11633] veth0_macvtap: left promiscuous mode [ 320.369111][T11633] veth1_vlan: left promiscuous mode [ 320.375239][T11633] veth0_vlan: left promiscuous mode [ 320.524056][ T5156] Bluetooth: hci3: command tx timeout [ 320.810234][T11633] team0 (unregistering): Port device team_slave_1 removed [ 320.852350][T11633] team0 (unregistering): Port device team_slave_0 removed [ 321.278474][T12746] netlink: 'syz.0.1428': attribute type 25 has an invalid length. [ 321.356041][T12753] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1431'. [ 321.429686][T12750] chnl_net:caif_netlink_parms(): no params data found [ 321.453024][T12588] chnl_net:caif_netlink_parms(): no params data found [ 321.470509][T12552] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.477924][T12552] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.504329][T12552] bridge_slave_0: entered allmulticast mode [ 321.512246][T12552] bridge_slave_0: entered promiscuous mode [ 321.629478][T12552] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.664346][T12552] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.671671][T12552] bridge_slave_1: entered allmulticast mode [ 321.709100][T12766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1433'. [ 321.714772][T12552] bridge_slave_1: entered promiscuous mode [ 321.718632][ T5156] Bluetooth: hci4: command tx timeout [ 321.728546][T12767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1434'. [ 321.832184][T12771] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 322.068864][T12552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.123740][T12552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.436154][T12588] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.443418][T12588] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.451464][T12588] bridge_slave_0: entered allmulticast mode [ 322.464908][T12588] bridge_slave_0: entered promiscuous mode [ 322.594044][ T5156] Bluetooth: hci3: command tx timeout [ 322.623421][T12552] team0: Port device team_slave_0 added [ 322.677499][T12552] team0: Port device team_slave_1 added [ 322.684275][T12588] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.691487][T12588] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.728464][T12588] bridge_slave_1: entered allmulticast mode [ 322.750959][T12588] bridge_slave_1: entered promiscuous mode [ 322.789180][T12809] xt_l2tp: invalid flags combination: c [ 322.932010][T12552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.942290][T12552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.005417][T12817] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1439'. [ 323.013752][T12552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.077073][T12588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.095343][T12588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.125496][T12552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.132583][T12552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.133360][T12824] netlink: 'syz.4.1444': attribute type 10 has an invalid length. [ 323.182911][T12552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.292428][T12588] team0: Port device team_slave_0 added [ 323.304788][T12588] team0: Port device team_slave_1 added [ 323.373476][T12831] xt_CT: No such helper "pptp" [ 323.379336][T12833] netlink: 'syz.1.1445': attribute type 39 has an invalid length. [ 323.472494][T12588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.486838][T12588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.518204][T12588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.567592][T12552] hsr_slave_0: entered promiscuous mode [ 323.574985][T12552] hsr_slave_1: entered promiscuous mode [ 323.581427][T12552] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 323.623190][T12552] Cannot create hsr debugfs directory [ 323.642805][T12588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.664150][T12588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.712760][T12588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.731374][T12841] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1448'. [ 323.794964][ T5156] Bluetooth: hci4: command tx timeout [ 323.821837][T12845] xt_bpf: check failed: parse error [ 323.970423][T12588] hsr_slave_0: entered promiscuous mode [ 323.980539][T12588] hsr_slave_1: entered promiscuous mode [ 323.987473][T12588] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 323.995387][T12588] Cannot create hsr debugfs directory [ 324.020201][T12849] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 324.615636][T12877] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1459'. [ 324.646259][T12876] gtp1: entered promiscuous mode [ 324.651289][T12876] gtp1: entered allmulticast mode [ 324.741872][T12887] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 324.976944][T12895] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1464'. [ 325.300465][T12911] openvswitch: netlink: Flow key attribute not present in set flow. [ 325.379224][T12916] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1467'. [ 325.554268][T12914] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1467'. [ 325.563713][T12916] 8021q: VLANs not supported on gre0 [ 326.413400][T12552] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 326.438906][T12552] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 326.458821][T12552] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 326.511101][T12552] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 326.673055][T12930] openvswitch: netlink: Message has 199 unknown bytes. [ 326.694798][T12588] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 326.703117][T12930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.718562][T12588] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 326.752431][T12588] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 326.797129][T12588] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 326.968204][T12552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.052394][T12552] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.121715][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.128922][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.180756][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.188001][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.222921][T12971] netlink: 'syz.4.1480': attribute type 4 has an invalid length. [ 327.286366][T12588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.392082][T12588] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.473413][T11633] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.480645][T11633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.541023][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.548296][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.557779][T12983] netlink: 'syz.0.1482': attribute type 1 has an invalid length. [ 327.585220][T12983] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.726987][T12588] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 327.755013][T12987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1484'. [ 328.010608][T12995] netlink: 'syz.0.1486': attribute type 10 has an invalid length. [ 328.158146][T12552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.306013][T12552] veth0_vlan: entered promiscuous mode [ 328.330087][T12552] veth1_vlan: entered promiscuous mode [ 328.430876][T12588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.457150][T12552] veth0_macvtap: entered promiscuous mode [ 328.469806][T12552] veth1_macvtap: entered promiscuous mode [ 328.532684][T12552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.560539][T12552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.609875][T13014] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1489'. [ 328.637271][T12552] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.669043][T12552] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.690955][T12552] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.721854][T12552] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.900382][T12588] veth0_vlan: entered promiscuous mode [ 328.932554][T12588] veth1_vlan: entered promiscuous mode [ 329.155399][T12588] veth0_macvtap: entered promiscuous mode [ 329.207064][T11633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.240189][T11633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.249505][T12588] veth1_macvtap: entered promiscuous mode [ 329.401724][T11633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.412691][T12588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.449926][T12588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.454582][T11633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.503292][T12588] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.561653][T12588] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.576214][T12588] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.585958][T12588] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.030146][T11633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.061718][T11633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.220661][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.234747][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.392975][ T3523] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.642544][ T3523] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.792264][ T3523] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.087189][ T3523] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.297984][T11633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.345092][T11633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.459398][ T3523] bridge_slave_1: left allmulticast mode [ 331.466704][ T3523] bridge_slave_1: left promiscuous mode [ 331.478741][ T3523] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.511805][ T3523] bridge_slave_0: left allmulticast mode [ 331.533875][ T3523] bridge_slave_0: left promiscuous mode [ 331.540928][ T3523] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.796380][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 331.810206][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 331.821908][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 331.831324][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 331.846081][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 332.191757][ T3523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.208547][ T3523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.221166][ T3523] bond0 (unregistering): Released all slaves [ 332.489676][T13125] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1506'. [ 332.557923][T13130] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1506'. [ 332.814712][T13136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1510'. [ 333.070108][T13109] lo speed is unknown, defaulting to 1000 [ 333.727197][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 333.737054][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 333.741472][T13170] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1515'. [ 333.789262][T13170] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1515'. [ 333.789300][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 333.830440][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 333.856194][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 333.860684][T13170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1515'. [ 333.954239][ T5156] Bluetooth: hci3: command tx timeout [ 335.148642][T13218] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1527'. [ 335.193098][T13218] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1527'. [ 335.213761][ T3523] hsr_slave_0: left promiscuous mode [ 335.243319][T13218] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1527'. [ 335.292185][ T3523] hsr_slave_1: left promiscuous mode [ 335.305144][ T3523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.324607][T13218] netlink: 'syz.4.1527': attribute type 2 has an invalid length. [ 335.332716][T13218] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1527'. [ 335.358817][ T3523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.399396][ T3523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.445382][ T3523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.551851][ T3523] veth1_macvtap: left promiscuous mode [ 335.571273][ T3523] veth0_macvtap: left promiscuous mode [ 335.588877][ T3523] veth1_vlan: left promiscuous mode [ 335.628965][ T3523] veth0_vlan: left promiscuous mode [ 335.954941][ T5156] Bluetooth: hci4: command tx timeout [ 336.044892][ T5156] Bluetooth: hci3: command tx timeout [ 336.764369][T13259] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 336.917984][T13266] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1534'. [ 337.018278][ T3523] team0 (unregistering): Port device team_slave_1 removed [ 337.083103][ T3523] team0 (unregistering): Port device team_slave_0 removed [ 337.739536][T13230] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 337.758689][T13169] lo speed is unknown, defaulting to 1000 [ 337.783712][T13109] chnl_net:caif_netlink_parms(): no params data found [ 338.034784][ T5156] Bluetooth: hci4: command tx timeout [ 338.114917][ T5156] Bluetooth: hci3: command tx timeout [ 338.224194][T13298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1538'. [ 338.386294][T13109] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.419175][T13109] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.434839][T13109] bridge_slave_0: entered allmulticast mode [ 338.453235][T13109] bridge_slave_0: entered promiscuous mode [ 338.479196][T13302] netem: change failed [ 338.490805][T13109] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.523636][T13109] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.531648][T13109] bridge_slave_1: entered allmulticast mode [ 338.541710][T13109] bridge_slave_1: entered promiscuous mode [ 338.782476][T13109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.871180][T13109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.011140][T13109] team0: Port device team_slave_0 added [ 339.057176][T13109] team0: Port device team_slave_1 added [ 339.216778][T13338] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 339.278912][T13109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.287093][T13109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.314327][T13109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.329678][T13341] xt_l2tp: unknown flags: 18 [ 339.336772][T13109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.343900][T13109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.370458][T13109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.486171][ T3523] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.552274][T13109] hsr_slave_0: entered promiscuous mode [ 339.565417][T13109] hsr_slave_1: entered promiscuous mode [ 339.571940][T13109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 339.581882][T13109] Cannot create hsr debugfs directory [ 339.605300][T13347] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.614127][T13347] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.622855][T13347] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.631771][T13347] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.672814][ T3523] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.767122][T13354] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1549'. [ 339.863665][T13357] netlink: 'syz.0.1550': attribute type 83 has an invalid length. [ 339.921403][ T3523] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.018921][T13169] chnl_net:caif_netlink_parms(): no params data found [ 340.103269][ T3523] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.116975][ T5156] Bluetooth: hci4: command tx timeout [ 340.137200][T13368] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 340.145020][T13368] netlink: 'syz.0.1551': attribute type 11 has an invalid length. [ 340.160380][T13368] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1551'. [ 340.194476][ T5156] Bluetooth: hci3: command tx timeout [ 340.480533][T13169] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.499225][T13169] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.512554][T13169] bridge_slave_0: entered allmulticast mode [ 340.531996][T13169] bridge_slave_0: entered promiscuous mode [ 340.558704][T13169] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.575170][T13169] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.583201][T13169] bridge_slave_1: entered allmulticast mode [ 340.591323][T13169] bridge_slave_1: entered promiscuous mode [ 340.761368][T13169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.878025][T13169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.050746][T13398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1556'. [ 341.059309][T13169] team0: Port device team_slave_0 added [ 341.071742][T13398] netlink: 'syz.1.1556': attribute type 3 has an invalid length. [ 341.078104][ T3523] bridge_slave_1: left allmulticast mode [ 341.086463][ T3523] bridge_slave_1: left promiscuous mode [ 341.092320][ T3523] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.113616][ T3523] bridge_slave_0: left allmulticast mode [ 341.121985][ T3523] bridge_slave_0: left promiscuous mode [ 341.128232][ T3523] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.436942][T13408] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1557'. [ 341.451675][T13408] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1557'. [ 341.529934][T13412] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1558'. [ 341.641318][ T3523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.654823][ T3523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.665880][ T3523] bond0 (unregistering): Released all slaves [ 341.752457][T13169] team0: Port device team_slave_1 added [ 341.995000][T13169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.022819][T13169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.081791][T13427] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 342.083874][T13169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.182509][T13426] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1561'. [ 342.200872][ T5156] Bluetooth: hci4: command tx timeout [ 342.291971][T13169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.308027][T13169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.335295][T13169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.615071][T13109] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 342.697024][T13443] xt_CT: No such helper "syz1" [ 342.800868][T13109] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 342.845373][T13451] veth1_macvtap: left promiscuous mode [ 342.863760][T13109] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 342.910426][T13169] hsr_slave_0: entered promiscuous mode [ 342.945016][T13169] hsr_slave_1: entered promiscuous mode [ 342.972843][T13169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.992120][T13169] Cannot create hsr debugfs directory [ 343.008378][T13109] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 343.499571][T13471] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1567'. [ 343.624262][T13477] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1570'. [ 343.659687][T13478] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 343.668308][T13478] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 343.973525][ T3523] hsr_slave_0: left promiscuous mode [ 343.986449][ T3523] hsr_slave_1: left promiscuous mode [ 343.992584][ T3523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.033417][ T3523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.050195][ T3523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.060285][ T3523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.137680][ T3523] veth1_macvtap: left promiscuous mode [ 344.143309][ T3523] veth0_macvtap: left promiscuous mode [ 344.174742][ T3523] veth1_vlan: left promiscuous mode [ 344.180138][ T3523] veth0_vlan: left promiscuous mode [ 344.243429][T13502] netlink: 'syz.1.1576': attribute type 1 has an invalid length. [ 344.620647][T13519] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 345.028531][ T3523] team0 (unregistering): Port device team_slave_1 removed [ 345.074270][ T3523] team0 (unregistering): Port device team_slave_0 removed [ 345.511876][T13502] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 345.813004][T13109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.831557][T13530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1580'. [ 345.970489][T13109] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.298551][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.305794][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.351903][T13544] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1584'. [ 346.397467][ T2963] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.404757][ T2963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.483062][T13558] sch_fq: defrate 0 ignored. [ 346.631204][T13563] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1588'. [ 346.807265][T13169] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 346.873541][T13169] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 346.925870][T13169] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 346.968412][T13169] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 347.147848][T13591] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1591'. [ 347.415941][T13169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.463480][T13109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.521948][T13169] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.575816][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.583067][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.641020][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.648228][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.802502][T13169] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 347.843812][T13169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 348.086709][T13109] veth0_vlan: entered promiscuous mode [ 348.102149][T13625] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 348.148750][T13109] veth1_vlan: entered promiscuous mode [ 348.271070][T13109] veth0_macvtap: entered promiscuous mode [ 348.305545][T13109] veth1_macvtap: entered promiscuous mode [ 348.368803][T13109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.408503][T13109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.468476][T13109] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.489354][T13109] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.508865][T13109] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.523312][T13109] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.549131][T13639] netlink: 'syz.0.1600': attribute type 1 has an invalid length. [ 348.566818][T13639] netlink: 'syz.0.1600': attribute type 1 has an invalid length. [ 348.684199][T13169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.710601][T13644] team_slave_0: mtu greater than device maximum [ 348.843263][T13648] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1603'. [ 348.911686][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.954171][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.138253][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.150734][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.190036][T13169] veth0_vlan: entered promiscuous mode [ 349.256053][T13169] veth1_vlan: entered promiscuous mode [ 349.376848][T13169] veth0_macvtap: entered promiscuous mode [ 349.411218][T13169] veth1_macvtap: entered promiscuous mode [ 349.471376][T13672] xt_policy: too many policy elements [ 349.490115][T13675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1608'. [ 350.031097][ T145] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.156587][T13169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.251620][ T145] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.337429][T13169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.375360][ T145] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.408204][T13169] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.419597][T13169] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.429304][T13169] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.438792][T13169] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.476187][ T145] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.594864][ T2963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.610261][ T2963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.656708][ T2963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.665906][ T2963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.941933][ T145] bridge_slave_1: left allmulticast mode [ 350.951952][ T145] bridge_slave_1: left promiscuous mode [ 350.962623][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.982912][ T145] bridge_slave_0: left allmulticast mode [ 350.989375][ T145] bridge_slave_0: left promiscuous mode [ 351.002381][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.692571][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.707047][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.723422][ T145] bond0 (unregistering): Released all slaves [ 351.969909][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 351.981429][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 351.992831][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 352.006683][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 352.016212][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 352.471214][T13722] lo speed is unknown, defaulting to 1000 [ 353.745277][ T5156] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 353.755238][ T5156] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 353.763343][ T5156] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 353.781488][ T5156] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 353.792524][ T5156] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 353.961811][ T145] hsr_slave_0: left promiscuous mode [ 353.985168][ T145] hsr_slave_1: left promiscuous mode [ 353.991554][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.012020][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.041653][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.060108][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.107323][ T145] veth1_macvtap: left promiscuous mode [ 354.113075][ T145] veth0_macvtap: left promiscuous mode [ 354.125117][ T5156] Bluetooth: hci3: command tx timeout [ 354.133449][ T145] veth1_vlan: left promiscuous mode [ 354.143502][ T145] veth0_vlan: left promiscuous mode [ 354.759732][T13801] ip6t_srh: unknown srh match flags 536B [ 354.962104][ T145] team0 (unregistering): Port device team_slave_1 removed [ 355.005784][T13807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1630'. [ 355.016892][ T145] team0 (unregistering): Port device team_slave_0 removed [ 355.681839][T13722] chnl_net:caif_netlink_parms(): no params data found [ 355.823091][T13822] tipc: Trying to set illegal importance in message [ 355.886542][ T5156] Bluetooth: hci4: command tx timeout [ 356.185109][T13722] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.207464][ T5156] Bluetooth: hci3: command tx timeout [ 356.222163][T13722] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.238273][T13722] bridge_slave_0: entered allmulticast mode [ 356.263725][T13722] bridge_slave_0: entered promiscuous mode [ 356.280628][T13837] ÿ: renamed from bridge_slave_1 [ 356.323972][T13722] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.331191][T13722] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.365038][T13722] bridge_slave_1: entered allmulticast mode [ 356.373465][T13722] bridge_slave_1: entered promiscuous mode [ 356.389162][T13772] lo speed is unknown, defaulting to 1000 [ 356.626942][T13848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1639'. [ 356.682352][T13848] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1639'. [ 356.742593][T13848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1639'. [ 356.799107][ T145] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.823152][T13848] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1639'. [ 356.872708][T13722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.889263][T13848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1639'. [ 356.925698][T13722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.945629][T13848] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1639'. [ 356.976406][T13848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1639'. [ 356.978450][T13860] netlink: 'syz.1.1642': attribute type 10 has an invalid length. [ 357.013112][T13848] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1639'. [ 357.036261][ T145] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.051147][T13848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1639'. [ 357.276781][ T145] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.325658][T13872] netlink: 'syz.1.1645': attribute type 2 has an invalid length. [ 357.360435][T13722] team0: Port device team_slave_0 added [ 357.389817][T13875] netlink: 'syz.1.1645': attribute type 2 has an invalid length. [ 357.436230][T13722] team0: Port device team_slave_1 added [ 357.535571][ T145] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.646497][T13722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.663933][T13722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.720370][T13722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.814632][T13722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.830989][T13722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.869497][T13722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.955055][ T5156] Bluetooth: hci4: command tx timeout [ 357.993693][T13895] bond0: (slave bond_slave_0): Releasing backup interface [ 358.030323][T13895] bond_slave_0: left promiscuous mode [ 358.067631][T13895] bond0: (slave bond_slave_1): Releasing backup interface [ 358.085105][T13895] bond_slave_1: left promiscuous mode [ 358.132691][T13895] team0: Port device team_slave_0 removed [ 358.165203][T13895] team0: Port device team_slave_1 removed [ 358.241078][T13895] team0: Port device geneve0 removed [ 358.269217][T13895] bond0: left promiscuous mode [ 358.274532][ T5834] Bluetooth: hci3: command tx timeout [ 358.300666][T13895] team0: Port device macvlan2 removed [ 358.321104][T13895] bond2: (slave bond3): Releasing backup interface [ 358.329258][T13895] bond3: left promiscuous mode [ 358.633710][T13722] hsr_slave_0: entered promiscuous mode [ 358.643180][T13722] hsr_slave_1: entered promiscuous mode [ 358.665428][T13722] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 358.716454][T13722] Cannot create hsr debugfs directory [ 359.179584][T13943] gretap2: entered promiscuous mode [ 359.185770][T13943] gretap2: entered allmulticast mode [ 359.193267][ T145] bridge_slave_1: left allmulticast mode [ 359.199633][ T145] bridge_slave_1: left promiscuous mode [ 359.207028][T13941] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 359.217681][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.228786][ T145] bridge_slave_0: left allmulticast mode [ 359.241774][ T145] bridge_slave_0: left promiscuous mode [ 359.248890][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.650261][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.662012][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.672607][ T145] bond0 (unregistering): Released all slaves [ 359.995522][T13772] chnl_net:caif_netlink_parms(): no params data found [ 360.033933][ T5834] Bluetooth: hci4: command tx timeout [ 360.253267][T13971] __nla_validate_parse: 63 callbacks suppressed [ 360.253289][T13971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1669'. [ 360.271565][T13971] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1669'. [ 360.354947][ T5834] Bluetooth: hci3: command tx timeout [ 360.431846][T13980] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1674'. [ 360.809414][ T30] audit: type=1800 audit(1750180427.358:2): pid=13994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1675" name="bpf-map" dev="anon_inodefs" ino=1070 res=0 errno=0 [ 360.872820][ T30] audit: type=1800 audit(1750180427.398:3): pid=13994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1675" name="bpf-map" dev="anon_inodefs" ino=1070 res=0 errno=0 [ 361.067133][T13772] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.099127][T13772] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.117220][T13772] bridge_slave_0: entered allmulticast mode [ 361.158319][T13772] bridge_slave_0: entered promiscuous mode [ 361.199380][T13772] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.214724][T13772] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.236217][T13772] bridge_slave_1: entered allmulticast mode [ 361.269509][T13772] bridge_slave_1: entered promiscuous mode [ 361.324907][T14005] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 361.532213][ T145] hsr_slave_0: left promiscuous mode [ 361.551738][ T145] hsr_slave_1: left promiscuous mode [ 361.561980][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.586483][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.595923][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.603454][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.655872][ T145] veth1_macvtap: left promiscuous mode [ 361.661590][ T145] veth0_macvtap: left promiscuous mode [ 361.668570][ T145] veth1_vlan: left promiscuous mode [ 361.675016][ T145] veth0_vlan: left promiscuous mode [ 362.118896][ T5834] Bluetooth: hci4: command tx timeout [ 362.180612][ T145] team0 (unregistering): Port device team_slave_1 removed [ 362.222933][ T145] team0 (unregistering): Port device team_slave_0 removed [ 362.647749][T14005] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 362.832324][T14026] wg1: entered promiscuous mode [ 362.870377][T13772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.916788][T13772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.106737][T13772] team0: Port device team_slave_0 added [ 363.132999][T13772] team0: Port device team_slave_1 added [ 363.341290][T14051] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1688'. [ 363.422181][T13772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.438622][T13772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.465425][T13772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.477885][T14055] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1689'. [ 363.480060][T13772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.495992][T13772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.564822][T13772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.680999][T14064] netlink: 'syz.4.1692': attribute type 1 has an invalid length. [ 363.690235][T14064] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1692'. [ 363.820716][T13722] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 363.885865][T13722] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 363.965096][T13722] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 364.020885][T13772] hsr_slave_0: entered promiscuous mode [ 364.055640][T13772] hsr_slave_1: entered promiscuous mode [ 364.062726][T13772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.071187][T13772] Cannot create hsr debugfs directory [ 364.091801][T13722] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 364.246823][T14092] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 364.261099][T14093] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 364.649766][T14113] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1702'. [ 364.908627][T13722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.096007][T13722] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.165985][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.173216][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.201729][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.208964][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.468816][T14149] bond0: entered promiscuous mode [ 365.490389][T14149] batadv0: entered promiscuous mode [ 365.518832][T14149] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 365.541501][T14149] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 365.558205][T14149] bond0: left promiscuous mode [ 365.575862][T14149] batadv0: left promiscuous mode [ 365.849909][T13772] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 366.102252][T13772] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 366.157529][T13772] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 366.191963][T13772] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 366.410650][T13722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.563273][T13722] veth0_vlan: entered promiscuous mode [ 366.575800][T14193] netlink: 'syz.4.1718': attribute type 1 has an invalid length. [ 366.585274][T14193] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1718'. [ 366.600047][T14193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1718'. [ 366.625881][T13722] veth1_vlan: entered promiscuous mode [ 366.720423][T13772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.776332][T13722] veth0_macvtap: entered promiscuous mode [ 366.853575][T13772] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.884787][T13722] veth1_macvtap: entered promiscuous mode [ 366.929600][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.936817][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.974970][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.982199][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.210960][T13722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.308053][T13722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.397948][T13722] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.434546][T13722] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.464786][T13722] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.473560][T13722] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.493466][T14222] nftables ruleset with unbound set [ 368.037298][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.085654][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.222995][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.259306][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.409029][T13772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.823255][T13772] veth0_vlan: entered promiscuous mode [ 368.927512][T14280] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1736'. [ 368.987718][ T2963] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.076636][T14278] tipc: Enabled bearer , priority 9 [ 369.132329][T13772] veth1_vlan: entered promiscuous mode [ 369.236847][ T2963] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.361144][ T2963] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.439667][ T2963] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.481041][T13772] veth0_macvtap: entered promiscuous mode [ 369.512972][T13772] veth1_macvtap: entered promiscuous mode [ 369.562200][T13772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.588572][T13772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.611109][T13772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.628971][T13772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.651588][T13772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.660490][T13772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.848471][ T2963] bridge_slave_1: left allmulticast mode [ 369.872580][ T2963] bridge_slave_1: left promiscuous mode [ 369.884814][ T2963] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.897940][ T2963] bridge_slave_0: left allmulticast mode [ 369.903640][ T2963] bridge_slave_0: left promiscuous mode [ 369.910365][ T2963] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.389631][ T2963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.403534][ T2963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.419654][ T2963] bond0 (unregistering): Released all slaves [ 370.526880][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.547168][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.627539][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.637666][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.059291][T14324] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1739'. [ 371.101509][T14324] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1739'. [ 371.145619][T14324] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1739'. [ 371.203677][T14324] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1739'. [ 371.231264][T14328] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1742'. [ 371.365979][T14335] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20002 [ 371.886929][ T2963] hsr_slave_0: left promiscuous mode [ 371.898132][ T5156] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 371.912668][ T5156] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 371.921504][ T5156] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 371.924894][ T2963] hsr_slave_1: left promiscuous mode [ 371.934993][ T5156] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 371.942717][ T5156] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 371.978259][ T2963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.013841][ T2963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.022097][ T2963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.049100][ T2963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.101476][ T2963] veth1_macvtap: left promiscuous mode [ 372.119308][ T2963] veth0_macvtap: left promiscuous mode [ 372.126799][ T2963] veth1_vlan: left promiscuous mode [ 372.132182][ T2963] veth0_vlan: left promiscuous mode [ 372.876048][ T2963] team0 (unregistering): Port device team_slave_1 removed [ 372.951072][ T2963] team0 (unregistering): Port device team_slave_0 removed [ 373.616202][T14369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1745'. [ 373.647908][T14370] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1746'. [ 373.653273][T14374] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 373.675440][T14369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1745'. [ 373.703732][T14370] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 373.704935][T14374] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 373.822888][T14374] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1744'. [ 373.985358][T14380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1748'. [ 374.016728][T14381] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1747'. [ 374.035267][ T5156] Bluetooth: hci3: command tx timeout [ 374.076520][T14380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1748'. [ 374.123959][T14380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1748'. [ 374.190585][T14341] lo speed is unknown, defaulting to 1000 [ 374.643156][ T2963] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.693409][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 374.705577][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 374.714649][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 374.725860][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 374.742155][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 374.983569][ T2963] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.272002][ T2963] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.475034][ T2963] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.582796][T14448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1764'. [ 375.727690][T14451] netlink: 82 bytes leftover after parsing attributes in process `syz.1.1765'. [ 376.031906][T14341] chnl_net:caif_netlink_parms(): no params data found [ 376.119682][ T5156] Bluetooth: hci3: command tx timeout [ 376.212804][T14403] lo speed is unknown, defaulting to 1000 [ 376.389600][ T2963] bridge_slave_1: left allmulticast mode [ 376.409494][ T2963] bridge_slave_1: left promiscuous mode [ 376.415482][ T2963] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.482813][ T2963] bridge_slave_0: left allmulticast mode [ 376.493687][ T2963] bridge_slave_0: left promiscuous mode [ 376.503198][ T2963] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.840574][ T5156] Bluetooth: hci4: command tx timeout [ 377.100073][ T2963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.112662][ T2963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.125426][ T2963] bond0 (unregistering): Released all slaves [ 377.197343][T14488] tipc: Enabled bearer , priority 10 [ 377.460117][T14341] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.489905][T14341] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.505739][T14341] bridge_slave_0: entered allmulticast mode [ 377.514794][T14341] bridge_slave_0: entered promiscuous mode [ 377.523622][T14341] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.532262][T14341] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.543008][T14341] bridge_slave_1: entered allmulticast mode [ 377.551788][T14341] bridge_slave_1: entered promiscuous mode [ 377.878713][T14341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.951974][T14341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.194277][ T5156] Bluetooth: hci3: command tx timeout [ 378.242972][T14341] team0: Port device team_slave_0 added [ 378.314854][ T5906] tipc: Node number set to 1828731437 [ 378.351990][T14535] xt_hashlimit: size too large, truncated to 1048576 [ 378.422179][T14341] team0: Port device team_slave_1 added [ 378.645994][T14544] netlink: 'syz.4.1785': attribute type 39 has an invalid length. [ 378.702358][T14546] __nla_validate_parse: 3 callbacks suppressed [ 378.702378][T14546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1785'. [ 378.923910][ T5156] Bluetooth: hci4: command tx timeout [ 379.086140][T14553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1786'. [ 379.202687][T14557] netlink: 'syz.0.1786': attribute type 23 has an invalid length. [ 379.211832][ T2963] hsr_slave_0: left promiscuous mode [ 379.242195][ T2963] hsr_slave_1: left promiscuous mode [ 379.251206][ T2963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.266752][ T2963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.281856][ T2963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.294824][ T2963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.329877][ T2963] veth1_macvtap: left promiscuous mode [ 379.344653][ T2963] veth0_macvtap: left promiscuous mode [ 379.350305][ T2963] veth1_vlan: left promiscuous mode [ 379.374607][ T2963] veth0_vlan: left promiscuous mode [ 379.899024][ T2963] team0 (unregistering): Port device team_slave_1 removed [ 379.942913][ T2963] team0 (unregistering): Port device team_slave_0 removed [ 380.284966][ T5156] Bluetooth: hci3: command tx timeout [ 380.367508][T14341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.377286][T14341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.427943][T14341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.481051][T14541] geneve2: entered promiscuous mode [ 380.490076][T14541] geneve2: entered allmulticast mode [ 380.517366][T14341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.540713][T14341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.593711][T14341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.625562][T14403] chnl_net:caif_netlink_parms(): no params data found [ 380.643244][T14569] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1788'. [ 380.944132][T14580] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1790'. [ 380.994934][ T5156] Bluetooth: hci4: command tx timeout [ 381.232066][T14341] hsr_slave_0: entered promiscuous mode [ 381.263827][T14594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1793'. [ 381.289788][T14341] hsr_slave_1: entered promiscuous mode [ 381.296453][T14341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 381.316075][T14595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1793'. [ 381.319756][T14341] Cannot create hsr debugfs directory [ 381.426457][T14403] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.433708][T14403] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.441705][T14403] bridge_slave_0: entered allmulticast mode [ 381.449858][T14403] bridge_slave_0: entered promiscuous mode [ 381.491643][T14403] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.499300][T14403] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.507740][T14403] bridge_slave_1: entered allmulticast mode [ 381.517112][T14403] bridge_slave_1: entered promiscuous mode [ 381.588608][T14403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.631217][T14403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.797196][T14403] team0: Port device team_slave_0 added [ 381.822346][T14403] team0: Port device team_slave_1 added [ 381.963507][T14403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.971692][T14403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.999515][T14403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.020753][T14403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.029262][T14403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.057054][T14403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.269218][T14403] hsr_slave_0: entered promiscuous mode [ 382.281794][T14403] hsr_slave_1: entered promiscuous mode [ 382.299076][T14403] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.317970][T14403] Cannot create hsr debugfs directory [ 382.333191][T14624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1798'. [ 383.007948][T14341] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 383.050016][T14341] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 383.084488][ T5156] Bluetooth: hci4: command tx timeout [ 383.174475][T14341] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 383.237950][T14667] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 383.292682][T14341] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 383.579950][T14688] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1813'. [ 383.912611][T14705] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1817'. [ 383.971127][T14710] netlink: 'syz.1.1819': attribute type 11 has an invalid length. [ 384.057969][T14341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.159600][T14403] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 384.185960][T14403] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 384.201830][T14341] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.230633][T14403] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 384.291570][T14403] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 384.417508][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.424751][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.509417][T14727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1821'. [ 384.588058][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.595303][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.900459][T14757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1826'. [ 384.998747][T14403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.087987][T14403] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.116368][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.123683][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.188254][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.195515][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.239691][T14767] netlink: 'syz.1.1828': attribute type 3 has an invalid length. [ 385.710569][T14341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.780475][T14789] netlink: 'syz.1.1832': attribute type 83 has an invalid length. [ 385.937437][T14341] veth0_vlan: entered promiscuous mode [ 386.000798][T14341] veth1_vlan: entered promiscuous mode [ 386.277195][T14341] veth0_macvtap: entered promiscuous mode [ 386.300923][T14341] veth1_macvtap: entered promiscuous mode [ 386.378060][T14403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.477658][T14341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.529566][T14341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.557745][T14403] veth0_vlan: entered promiscuous mode [ 386.570090][T14815] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20004 [ 386.579335][T14341] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.604627][T14341] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.624506][T14341] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.633262][T14341] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.703330][T14403] veth1_vlan: entered promiscuous mode [ 386.736640][T14818] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1842'. [ 386.747983][T14826] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 386.937502][T14403] veth0_macvtap: entered promiscuous mode [ 386.977517][T11633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.999784][T14403] veth1_macvtap: entered promiscuous mode [ 387.002984][T11633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.113213][T14403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.143894][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.171432][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.195501][T14838] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1848'. [ 387.385057][T14403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.467105][T14403] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.484928][T14403] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.524005][T14403] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.532958][T14403] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.886336][T11633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.910536][T11633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.970227][T14860] netlink: 'syz.4.1852': attribute type 19 has an invalid length. [ 387.987031][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.002745][T14863] xt_CT: No such helper "pptp" [ 388.020619][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.130981][T11633] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.307136][T11633] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.495803][T11633] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.682191][T11633] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.924466][T11633] bridge_slave_1: left allmulticast mode [ 388.930187][T11633] bridge_slave_1: left promiscuous mode [ 388.936996][T11633] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.950028][T11633] bridge_slave_0: left allmulticast mode [ 388.956614][T11633] bridge_slave_0: left promiscuous mode [ 388.963497][T11633] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.371537][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 389.380883][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 389.411421][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 389.437050][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 389.454811][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 389.491389][T11633] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.507667][T11633] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.519185][T11633] bond0 (unregistering): Released all slaves [ 390.052030][T14884] lo speed is unknown, defaulting to 1000 [ 390.644048][T14912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1857'. [ 390.872935][T14912] ip6gre2: entered allmulticast mode [ 390.939035][T14921] x_tables: duplicate underflow at hook 1 [ 391.162117][T11633] hsr_slave_0: left promiscuous mode [ 391.185452][T11633] hsr_slave_1: left promiscuous mode [ 391.200524][T11633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.224445][T11633] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.251753][T11633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.274407][T11633] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.337940][T11633] veth1_macvtap: left promiscuous mode [ 391.355284][T11633] veth0_macvtap: left promiscuous mode [ 391.361046][T11633] veth1_vlan: left promiscuous mode [ 391.372696][T11633] veth0_vlan: left promiscuous mode [ 391.379750][ T5156] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 391.389552][ T5156] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 391.403514][ T5156] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 391.414362][ T5156] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 391.423611][ T5156] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 391.554972][ T5834] Bluetooth: hci3: command tx timeout [ 392.072320][T11633] team0 (unregistering): Port device team_slave_1 removed [ 392.113502][T11633] team0 (unregistering): Port device team_slave_0 removed [ 392.497908][T14884] chnl_net:caif_netlink_parms(): no params data found [ 392.919671][T14884] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.964013][T14884] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.971361][T14884] bridge_slave_0: entered allmulticast mode [ 393.005791][T14884] bridge_slave_0: entered promiscuous mode [ 393.035285][T14884] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.042484][T14884] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.081442][T14884] bridge_slave_1: entered allmulticast mode [ 393.113948][T14884] bridge_slave_1: entered promiscuous mode [ 393.132997][T14966] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1867'. [ 393.399505][T14884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.439147][T14934] lo speed is unknown, defaulting to 1000 [ 393.474306][ T5834] Bluetooth: hci4: command tx timeout [ 393.475142][T14884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.634506][ T5834] Bluetooth: hci3: command tx timeout [ 393.676284][T14990] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1875'. [ 393.710967][T14992] netlink: 'syz.1.1874': attribute type 11 has an invalid length. [ 393.761838][T14884] team0: Port device team_slave_0 added [ 393.826772][T14884] team0: Port device team_slave_1 added [ 394.051061][T15002] sctp: [Deprecated]: syz.1.1877 (pid 15002) Use of int in maxseg socket option. [ 394.051061][T15002] Use struct sctp_assoc_value instead [ 394.347637][T11633] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.404892][T14884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.444157][T14884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.524247][T14884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.569531][T14884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.597006][T14884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.643646][T14884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.810312][T11633] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.009905][T14884] hsr_slave_0: entered promiscuous mode [ 395.019114][T14884] hsr_slave_1: entered promiscuous mode [ 395.029424][T14884] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 395.042576][T14884] Cannot create hsr debugfs directory [ 395.077079][T11633] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.109980][T15033] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1885'. [ 395.183198][T11633] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.554309][ T5834] Bluetooth: hci4: command tx timeout [ 395.714830][ T5834] Bluetooth: hci3: command tx timeout [ 395.914884][T15062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1892'. [ 396.088341][T11633] bridge_slave_1: left allmulticast mode [ 396.112260][T11633] bridge_slave_1: left promiscuous mode [ 396.146834][T11633] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.172529][T11633] bridge_slave_0: left allmulticast mode [ 396.187337][T11633] bridge_slave_0: left promiscuous mode [ 396.200362][T11633] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.655900][T11633] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.667723][T11633] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.692664][T11633] bond0 (unregistering): Released all slaves [ 396.848932][T14934] chnl_net:caif_netlink_parms(): no params data found [ 396.986969][T15088] netlink: 'syz.1.1899': attribute type 1 has an invalid length. [ 397.080886][T15096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1902'. [ 397.096607][T15097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1902'. [ 397.107105][T15096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1902'. [ 397.633874][ T5834] Bluetooth: hci4: command tx timeout [ 397.794998][ T5834] Bluetooth: hci3: command tx timeout [ 398.107385][T14934] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.117110][T14934] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.125572][T14934] bridge_slave_0: entered allmulticast mode [ 398.196255][T14934] bridge_slave_0: entered promiscuous mode [ 398.214984][T14934] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.222185][T14934] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.246647][T14934] bridge_slave_1: entered allmulticast mode [ 398.298902][T14934] bridge_slave_1: entered promiscuous mode [ 398.376593][T15140] ip6tnl2: entered promiscuous mode [ 398.382038][T15140] ip6tnl2: entered allmulticast mode [ 398.524443][T14934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.532865][T15150] x_tables: duplicate underflow at hook 1 [ 398.570327][T11633] hsr_slave_0: left promiscuous mode [ 398.605279][T11633] hsr_slave_1: left promiscuous mode [ 398.619528][T11633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.634036][T11633] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.645644][T11633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.664637][T11633] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.720587][T11633] veth1_macvtap: left promiscuous mode [ 398.734791][T11633] veth0_macvtap: left promiscuous mode [ 398.740437][T11633] veth1_vlan: left promiscuous mode [ 398.764742][T11633] veth0_vlan: left promiscuous mode [ 398.895141][T15159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1912'. [ 399.375907][T11633] team0 (unregistering): Port device team_slave_1 removed [ 399.417913][T11633] team0 (unregistering): Port device team_slave_0 removed [ 399.713881][ T5834] Bluetooth: hci4: command tx timeout [ 399.891396][T14934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.900949][T15159] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 399.918481][T15159] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 400.207683][T14934] team0: Port device team_slave_0 added [ 400.230571][T14934] team0: Port device team_slave_1 added [ 400.400954][T14934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.414360][T14934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.450735][T14934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.492395][T14934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.512595][T14934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.576854][T14934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.619842][T14884] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 400.644413][T14884] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 400.709935][T14884] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 400.719309][T15185] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1919'. [ 400.750644][T14884] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 400.946348][T14934] hsr_slave_0: entered promiscuous mode [ 400.965061][T14934] hsr_slave_1: entered promiscuous mode [ 400.971452][T14934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 401.004194][T14934] Cannot create hsr debugfs directory [ 401.772187][T14884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.891709][T14884] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.008104][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.015432][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.071607][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.078885][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.209843][T15221] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1925'. [ 402.277587][T15221] netlink: 'syz.4.1925': attribute type 7 has an invalid length. [ 402.761786][T14934] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 402.815152][T14934] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 402.879993][T14934] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 402.907607][T15272] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 402.937883][T14934] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 403.248046][T14884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.324724][ T30] audit: type=1800 audit(1750180469.878:4): pid=15259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1932" name="cgroup.controllers" dev="tmpfs" ino=3375 res=0 errno=0 [ 403.453433][T14884] veth0_vlan: entered promiscuous mode [ 403.510078][T14934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.537769][T14884] veth1_vlan: entered promiscuous mode [ 403.678224][T14884] veth0_macvtap: entered promiscuous mode [ 403.710310][T14934] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.745027][T15303] netlink: 'syz.4.1941': attribute type 10 has an invalid length. [ 403.756377][T14884] veth1_macvtap: entered promiscuous mode [ 403.777293][T15303] batman_adv: batadv0: Removing interface: team0 [ 403.797452][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.804709][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.884763][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.891978][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.972098][T15312] sch_fq: defrate 0 ignored. [ 404.031840][T14884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.160796][T14884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.191714][T14884] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.213631][T14884] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.230979][T14884] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.243979][T14884] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.270476][T15329] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 404.348281][T15331] IPVS: length: 137 != 8 [ 404.551529][T15339] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 404.602554][T11633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.634714][T11633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.735378][ T2963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.744691][T15349] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1951'. [ 404.754763][ T2963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.932252][T15354] sock: sock_timestamping_bind_phc: sock not bind to device [ 405.122800][T14934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.358772][ T145] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.562853][ T145] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.769374][ T145] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.876752][ T145] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.907127][T14934] veth0_vlan: entered promiscuous mode [ 405.953726][T14934] veth1_vlan: entered promiscuous mode [ 406.016557][T14934] veth0_macvtap: entered promiscuous mode [ 406.031859][T14934] veth1_macvtap: entered promiscuous mode [ 406.080261][T14934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.100523][T14934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.131915][T14934] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.142738][T14934] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.159273][T14934] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.172178][T14934] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.292026][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.313831][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.373924][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.381807][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.647231][ T145] bridge_slave_1: left allmulticast mode [ 406.652945][ T145] bridge_slave_1: left promiscuous mode [ 406.659316][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.679399][ T145] bridge_slave_0: left allmulticast mode [ 406.697384][ T145] bridge_slave_0: left promiscuous mode [ 406.703274][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.405737][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.464708][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.477630][ T145] bond0 (unregistering): Released all slaves [ 407.561713][T15416] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1955'. [ 407.968680][ T5156] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 407.983358][ T5156] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 407.992118][ T5156] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 408.001040][ T5156] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 408.012323][ T5156] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 408.589413][ T145] hsr_slave_0: left promiscuous mode [ 408.612148][ T145] hsr_slave_1: left promiscuous mode [ 408.622094][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.634236][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.647950][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.664392][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.716001][ T145] veth1_macvtap: left promiscuous mode [ 408.721628][ T145] veth0_macvtap: left promiscuous mode [ 408.730738][ T145] veth1_vlan: left promiscuous mode [ 408.741455][ T145] veth0_vlan: left promiscuous mode [ 409.472599][T15456] netlink: 'syz.0.1958': attribute type 1 has an invalid length. [ 409.505291][T15456] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1958'. [ 409.534363][T15456] netlink: 'syz.0.1958': attribute type 1 has an invalid length. [ 409.643386][ T145] team0 (unregistering): Port device team_slave_1 removed [ 410.037854][ T145] team0 (unregistering): Port device team_slave_0 removed [ 410.089528][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 410.099011][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 410.106962][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 410.115403][ T5839] Bluetooth: hci3: command tx timeout [ 410.122979][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 410.131174][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 410.692865][T15462] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1960'. [ 410.719028][T15420] lo speed is unknown, defaulting to 1000 [ 410.727484][T15462] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1960'. [ 410.814771][T11633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.822656][T11633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.362766][T15510] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1968'. [ 411.448683][T15516] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 411.778251][ T145] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.873368][T15472] lo speed is unknown, defaulting to 1000 [ 412.018717][ T145] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.196523][ T5156] Bluetooth: hci3: command tx timeout [ 412.196531][ T5834] Bluetooth: hci4: command tx timeout [ 412.237006][T15546] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1976'. [ 412.289411][ T145] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.335605][T15553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1977'. [ 412.428940][ T145] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.242390][T15590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1983'. [ 413.262467][T15595] xt_socket: unknown flags 0x3c [ 413.291260][T15588] tipc: Resetting bearer [ 413.327477][T15597] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1986'. [ 413.336603][ T145] bridge_slave_1: left allmulticast mode [ 413.336631][ T145] bridge_slave_1: left promiscuous mode [ 413.336852][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.381018][ T145] bridge_slave_0: left allmulticast mode [ 413.390447][ T145] bridge_slave_0: left promiscuous mode [ 413.420841][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.527506][T15606] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1987'. [ 413.897396][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.914235][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.932214][ T145] bond0 (unregistering): Released all slaves [ 413.961215][T15420] chnl_net:caif_netlink_parms(): no params data found [ 414.272937][T15620] vlan1: entered promiscuous mode [ 414.278683][ T5834] Bluetooth: hci4: command tx timeout [ 414.284274][ T5156] Bluetooth: hci3: command tx timeout [ 414.296138][T15620] bridge0: entered promiscuous mode [ 414.387897][T15630] netlink: 'syz.0.1989': attribute type 1 has an invalid length. [ 414.416035][T15630] netlink: 'syz.0.1989': attribute type 2 has an invalid length. [ 414.498235][T15472] chnl_net:caif_netlink_parms(): no params data found [ 414.506707][T15637] nbd: must specify a device to reconfigure [ 414.538251][T15639] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 414.566092][T15639] netlink: 892 bytes leftover after parsing attributes in process `syz.1.1991'. [ 414.722645][T15420] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.732832][T15420] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.747772][T15420] bridge_slave_0: entered allmulticast mode [ 414.761037][T15420] bridge_slave_0: entered promiscuous mode [ 414.782869][T15420] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.793487][T15420] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.808014][T15420] bridge_slave_1: entered allmulticast mode [ 414.820041][T15420] bridge_slave_1: entered promiscuous mode [ 414.966851][T15420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.057284][T15420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.255159][T15649] 8021q: adding VLAN 0 to HW filter on device bond6 [ 415.750110][T15420] team0: Port device team_slave_0 added [ 415.820022][ T145] hsr_slave_0: left promiscuous mode [ 415.846904][ T145] hsr_slave_1: left promiscuous mode [ 415.867880][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.878217][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.901166][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.916666][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.999932][ T145] veth1_macvtap: left promiscuous mode [ 416.012809][ T145] veth0_macvtap: left promiscuous mode [ 416.021600][ T145] veth1_vlan: left promiscuous mode [ 416.030606][ T145] veth0_vlan: left promiscuous mode [ 416.353887][ T5834] Bluetooth: hci4: command tx timeout [ 416.366763][ T5834] Bluetooth: hci3: command tx timeout [ 416.369934][T15688] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 416.540140][T15692] netlink: 'syz.4.2003': attribute type 21 has an invalid length. [ 416.552138][T15692] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2003'. [ 416.767214][T15698] xt_CT: You must specify a L4 protocol and not use inversions on it [ 416.940892][ T145] team0 (unregistering): Port device team_slave_1 removed [ 416.981331][ T145] team0 (unregistering): Port device team_slave_0 removed [ 417.372488][T15472] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.380247][T15472] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.389349][T15472] bridge_slave_0: entered allmulticast mode [ 417.398528][T15472] bridge_slave_0: entered promiscuous mode [ 417.410358][T15420] team0: Port device team_slave_1 added [ 417.420749][T15662] lo speed is unknown, defaulting to 1000 [ 417.546434][T15472] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.553633][T15472] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.587591][T15472] bridge_slave_1: entered allmulticast mode [ 417.606214][T15472] bridge_slave_1: entered promiscuous mode [ 417.842322][T15420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.862984][T15420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.896551][T15420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.930234][T15472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.952201][T15472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.963359][T15420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.971530][T15420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.000194][T15420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.303901][T15663] lo speed is unknown, defaulting to 1000 [ 418.349857][T15420] hsr_slave_0: entered promiscuous mode [ 418.362015][T15420] hsr_slave_1: entered promiscuous mode [ 418.385039][T15420] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 418.392656][T15420] Cannot create hsr debugfs directory [ 418.436155][ T5834] Bluetooth: hci4: command tx timeout [ 418.496696][T15472] team0: Port device team_slave_0 added [ 418.527092][T15472] team0: Port device team_slave_1 added [ 418.618413][T15720] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 418.867509][T15472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.890672][T15472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.969548][T15472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.012723][T15472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.029988][T15472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.104215][T15472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.401798][T15751] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2016'. [ 419.502184][T15472] hsr_slave_0: entered promiscuous mode [ 419.512285][T15472] hsr_slave_1: entered promiscuous mode [ 419.519433][T15472] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 419.528023][T15472] Cannot create hsr debugfs directory [ 419.704604][T15764] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2020'. [ 419.716238][T15763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2019'. [ 419.799160][T15765] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2020'. [ 420.032303][T15767] bridge4: port 1(ip6gretap1) entered blocking state [ 420.043646][T15767] bridge4: port 1(ip6gretap1) entered disabled state [ 420.054081][T15767] ip6gretap1: entered allmulticast mode [ 420.080811][T15767] ip6gretap1: entered promiscuous mode [ 420.159095][T15768] veth13: entered promiscuous mode [ 420.171621][T15768] bridge4: port 2(veth13) entered blocking state [ 420.181503][T15768] bridge4: port 2(veth13) entered disabled state [ 420.191846][T15768] veth13: entered allmulticast mode [ 420.242425][T15773] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2021'. [ 420.468299][T15773] gretap0: entered promiscuous mode [ 421.305927][T15809] xt_CT: You must specify a L4 protocol and not use inversions on it [ 421.460000][T15812] netlink: 'syz.4.2028': attribute type 2 has an invalid length. [ 421.522352][T15420] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 421.539316][T15420] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 421.563222][T15420] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 421.580962][T15420] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 421.599257][T15812] xt_hashlimit: overflow, rate too high: 0 [ 422.028761][T15472] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 422.047401][T15472] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 422.072707][T15420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.074967][T15838] netlink: 'syz.4.2033': attribute type 11 has an invalid length. [ 422.088391][T15838] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2033'. [ 422.108968][T15472] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 422.138656][T15472] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 422.189550][T15420] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.219285][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.226513][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.275042][T15841] nbd: couldn't find device at index 1006632960 [ 422.275473][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.288612][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.417942][T15853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2036'. [ 422.587086][T15472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.714980][T15866] netlink: 'syz.4.2039': attribute type 10 has an invalid length. [ 422.722919][T15866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2039'. [ 422.751257][T15472] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.778139][T11633] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.785387][T11633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.821626][T11633] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.828792][T11633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.853720][T15870] tipc: Enabling of bearer rejected, failed to enable media [ 422.893965][T15871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2040'. [ 423.034288][T15420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.249926][T15420] veth0_vlan: entered promiscuous mode [ 423.404100][T15888] netlink: 'syz.4.2046': attribute type 4 has an invalid length. [ 423.422651][T15420] veth1_vlan: entered promiscuous mode [ 423.519558][ T13] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.538681][ T13] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 423.559042][T15891] ipt_REJECT: TCP_RESET invalid for non-tcp [ 423.579713][T15472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.619489][ T13] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.638669][ T13] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 423.719889][T15420] veth0_macvtap: entered promiscuous mode [ 423.732197][ T13] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.752916][ T13] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 423.787905][T15420] veth1_macvtap: entered promiscuous mode [ 423.820812][ T13] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.851393][ T13] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 423.923224][T15420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.979375][T15472] veth0_vlan: entered promiscuous mode [ 424.006800][T15420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.052935][T15420] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.072266][T15420] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.091408][T15420] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.111418][T15420] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.140030][T15472] veth1_vlan: entered promiscuous mode [ 424.171445][T15900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2050'. [ 424.181831][T15903] netlink: 'syz.1.2051': attribute type 24 has an invalid length. [ 424.190173][T15900] netlink: 'syz.4.2050': attribute type 15 has an invalid length. [ 424.413279][T15472] veth0_macvtap: entered promiscuous mode [ 424.466367][T15472] veth1_macvtap: entered promiscuous mode [ 424.520457][ T13] ÿ: left allmulticast mode [ 424.537009][ T13] ÿ: left promiscuous mode [ 424.558682][ T13] bridge0: port 2(ÿ) entered disabled state [ 424.587399][ T13] bridge_slave_0: left allmulticast mode [ 424.593124][ T13] bridge_slave_0: left promiscuous mode [ 424.619548][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.628087][ T5156] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 424.637494][ T5156] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 424.641328][T15911] __nla_validate_parse: 1 callbacks suppressed [ 424.641349][T15911] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2054'. [ 424.647330][ T5156] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 424.669756][ T5156] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 424.677913][ T5156] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 425.185102][ T13] dvmrp1 (unregistering): left allmulticast mode [ 425.208789][ T13] bond1 (unregistering): (slave geneve3): Releasing active interface [ 425.218858][ T13] geneve3 (unregistering): left promiscuous mode [ 425.254691][T15929] xt_cluster: node mask cannot exceed total number of nodes [ 425.570544][ T13] bond1 (unregistering): Released all slaves [ 425.586403][ T13] bond0 (unregistering): Released all slaves [ 425.602809][ T13] bond2 (unregistering): Released all slaves [ 425.627678][T15915] batman_adv: batadv0: Adding interface: dummy0 [ 425.635940][T15915] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.661565][T15915] batman_adv: batadv0: Interface activated: dummy0 [ 425.731252][T15907] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2053'. [ 425.752739][T11633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.772866][T15472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.782886][T11633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.866674][ T13] tipc: Disabling bearer [ 425.886964][ T13] tipc: Disabling bearer [ 425.895181][ T13] tipc: Left network mode [ 425.902920][T15931] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 425.965329][T15933] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 426.007950][T15472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.057267][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.067747][T15472] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.078990][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.123916][T15472] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.133105][T15472] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.155959][T15472] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.489983][T15909] lo speed is unknown, defaulting to 1000 [ 426.533445][T15948] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2060'. [ 426.645446][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.671201][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.754288][ T5834] Bluetooth: hci1: command tx timeout [ 426.764637][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.785716][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.563989][ T13] hsr_slave_0: left promiscuous mode [ 427.570968][ T13] hsr_slave_1: left promiscuous mode [ 427.590407][ T13] batman_adv: batadv0: Removing interface: dummy0 [ 427.615157][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.631460][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.666256][ T13] vlan0: left allmulticast mode [ 427.672053][ T13] veth0_vlan: left allmulticast mode [ 427.678198][ T13] vlan0: left promiscuous mode [ 427.683553][ T13] veth1_vlan: left promiscuous mode [ 427.689535][ T13] veth0_vlan: left promiscuous mode [ 428.142500][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 428.167517][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 428.181850][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 428.190270][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 428.205325][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 428.653269][ T13] team0 (unregistering): Port device team_slave_1 removed [ 428.694676][ T13] team0 (unregistering): Port device team_slave_0 removed [ 428.749341][ T13] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI [ 428.761378][ T13] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 428.770947][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-rc1-syzkaller-00104-g7b4ac12cc929 #0 PREEMPT(full) [ 428.782935][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 428.793035][ T13] Workqueue: netns cleanup_net [ 428.797847][ T13] RIP: 0010:ip6_mc_clear_src+0x119/0x4e0 [ 428.803490][ T13] Code: ff ff ff e8 69 e6 41 01 89 c5 31 ff 89 c6 e8 ae 1d 9c f7 85 ed 74 45 e8 65 19 9c f7 eb 05 e8 5e 19 9c f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 b8 90 ff f7 49 8b 2c 24 49 8d 7c [ 428.823122][ T13] RSP: 0018:ffffc900001272e0 EFLAGS: 00010206 [ 428.829200][ T13] RAX: 000000001fffe000 RBX: 1ffff11009f10802 RCX: ffff88801ce80000 [ 428.837185][ T13] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 428.845177][ T13] RBP: 0000000000000001 R08: ffffffff8fa104f7 R09: 1ffffffff1f4209e [ 428.853167][ T13] R10: dffffc0000000000 R11: fffffbfff1f4209f R12: 00000000ffff0000 [ 428.861150][ T13] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff88804f884010 [ 428.869138][ T13] FS: 0000000000000000(0000) GS:ffff888125d52000(0000) knlGS:0000000000000000 [ 428.878079][ T13] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 428.884674][ T13] CR2: 00007f9c2a6e5000 CR3: 000000000df38000 CR4: 00000000003526f0 [ 428.892663][ T13] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 428.900646][ T13] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 428.908634][ T13] Call Trace: [ 428.911924][ T13] [ 428.914871][ T13] mld_clear_delrec+0x105/0x5d0 [ 428.919746][ T13] ipv6_mc_destroy_dev+0x45/0x5a0 [ 428.924789][ T13] ? addrconf_ifdown+0x1396/0x1880 [ 428.929917][ T13] addrconf_ifdown+0x139e/0x1880 [ 428.934871][ T13] ? tls_dev_event+0x717/0xec0 [ 428.939644][ T13] ? __pfx_addrconf_ifdown+0x10/0x10 [ 428.944949][ T13] addrconf_notify+0x1bc/0x1010 [ 428.949825][ T13] notifier_call_chain+0x1b3/0x3e0 [ 428.954969][ T13] unregister_netdevice_many_notify+0x15d8/0x2320 [ 428.961417][ T13] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 428.968209][ T13] ? unregister_netdevice_queue+0x1b3/0x380 [ 428.974132][ T13] ? batadv_meshif_destroy_netlink+0x1dd/0x270 [ 428.980301][ T13] default_device_exit_batch+0x819/0x890 [ 428.985954][ T13] ? __pfx___might_resched+0x10/0x10 [ 428.991263][ T13] ? __pfx_default_device_exit_batch+0x10/0x10 [ 428.997432][ T13] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 429.002915][ T13] ? net_generic+0x1e/0x240 [ 429.007452][ T13] ? __pfx_default_device_exit_batch+0x10/0x10 [ 429.013630][ T13] ops_undo_list+0x522/0x990 [ 429.018240][ T13] ? __pfx_ops_undo_list+0x10/0x10 [ 429.023370][ T13] cleanup_net+0x4c5/0x800 [ 429.027801][ T13] ? __pfx_cleanup_net+0x10/0x10 [ 429.032765][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 429.037978][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 429.043748][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 429.049507][ T13] process_scheduled_works+0xae1/0x17b0 [ 429.055086][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 429.061097][ T13] worker_thread+0x8a0/0xda0 [ 429.065718][ T13] kthread+0x70e/0x8a0 [ 429.069803][ T13] ? __pfx_worker_thread+0x10/0x10 [ 429.075022][ T13] ? __pfx_kthread+0x10/0x10 [ 429.079629][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 429.084854][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 429.090073][ T13] ? __pfx_kthread+0x10/0x10 [ 429.094677][ T13] ret_from_fork+0x3fc/0x770 [ 429.099294][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 429.104429][ T13] ? __switch_to_asm+0x39/0x70 [ 429.109211][ T13] ? __switch_to_asm+0x33/0x70 [ 429.113986][ T13] ? __pfx_kthread+0x10/0x10 [ 429.118594][ T13] ret_from_fork_asm+0x1a/0x30 [ 429.123375][ T13] [ 429.126411][ T13] Modules linked in: [ 429.131613][ T13] ---[ end trace 0000000000000000 ]--- [ 429.138010][ T5834] Bluetooth: hci1: command 0x041b tx timeout [ 429.144561][ T13] RIP: 0010:ip6_mc_clear_src+0x119/0x4e0 [ 429.150301][ T13] Code: ff ff ff e8 69 e6 41 01 89 c5 31 ff 89 c6 e8 ae 1d 9c f7 85 ed 74 45 e8 65 19 9c f7 eb 05 e8 5e 19 9c f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 b8 90 ff f7 49 8b 2c 24 49 8d 7c [ 429.170645][ T13] RSP: 0018:ffffc900001272e0 EFLAGS: 00010206 [ 429.176808][ T13] RAX: 000000001fffe000 RBX: 1ffff11009f10802 RCX: ffff88801ce80000 [ 429.184975][ T13] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 429.192949][ T13] RBP: 0000000000000001 R08: ffffffff8fa104f7 R09: 1ffffffff1f4209e [ 429.201189][ T13] R10: dffffc0000000000 R11: fffffbfff1f4209f R12: 00000000ffff0000 [ 429.209531][ T13] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff88804f884010 [ 429.217601][ T13] FS: 0000000000000000(0000) GS:ffff888125c52000(0000) knlGS:0000000000000000 [ 429.226804][ T13] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 429.233406][ T13] CR2: 00007f9c27ff6d00 CR3: 000000000df38000 CR4: 00000000003526f0 [ 429.241800][ T13] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 429.249975][ T13] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 429.258446][ T13] Kernel panic - not syncing: Fatal exception [ 429.264671][ T13] Kernel Offset: disabled [ 429.269008][ T13] Rebooting in 86400 seconds..