last executing test programs: 1m33.606933368s ago: executing program 2 (id=2219): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="12000000400000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r1, &(0x7f0000000200), 0x0}, 0x20) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth1\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r6}, 0x18) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000740)={'dummy0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}}, 0x0) 1m33.541951566s ago: executing program 2 (id=2219): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="12000000400000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r1, &(0x7f0000000200), 0x0}, 0x20) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth1\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r6}, 0x18) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000740)={'dummy0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}}, 0x0) 1m15.318226935s ago: executing program 2 (id=2219): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="12000000400000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r1, &(0x7f0000000200), 0x0}, 0x20) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth1\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r6}, 0x18) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000740)={'dummy0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}}, 0x0) 1m8.817359681s ago: executing program 4 (id=3014): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000180)={0x0, 0xfffffffffffffffe, 0xda, &(0x7f0000000280)=""/218}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000200)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r2, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="02"], 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="02"], 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000200000008000300dedce9b2f33541d191e0775ad9ec230867a4f9bf79451856259a8f6a7a12192d5965ae02c6bfe72414671a265fd297b3a3feec9c02f5cb6e38f7126df59be5c9316e655ae771977b44242dfee3e1962dd98f476ba3d937af407a4f2d9f9e32bea61d99d32810293fda2af59606ee8c7771dd67914600000000", @ANYRES32=r6, @ANYBLOB="080026006c09000008009f00030000000800a1000b000000"], 0x34}}, 0x0) r7 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r8 = socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) recvfrom$inet6(r9, 0x0, 0x0, 0x40, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x8, 0x2, 0x5862, 0x2, 0xfff00000, 0xffffff80}, [@TCA_NETEM_ECN={0x8, 0x7, 0x4}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x6}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m8.179767123s ago: executing program 4 (id=3015): r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000400)={@local, @loopback}, &(0x7f0000000440)=0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000140)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r2, r2, 0xfff, 0x0, 0x0, 0xa, 0x91, 0x5c2, 0x5886, 0x801, 0x0, 0x8, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000200)={0x1, &(0x7f0000001300)=[{}]}) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xcdeb0f5bc34494ee}, 0x1010) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'dummy0\x00', 0x4000}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0xe, 0x2, {0x0, 0x0, 0x0, 0x7}}, @TCA_SAMPLE_RATE={0x8}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x4040000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x311}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) sendto$packet(r10, &(0x7f0000000180)="0b036812e0ff64000200475400f6a13bb1000006890086", 0x17, 0x0, &(0x7f0000000140)={0x11, 0x0, r11}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="b4cd61e2030800000000000000513ae0e1c022a403d2b42ff069733f3de8b660e8aba509c53e9c77500000000000000000254e3cc392739b8663dc21ea3159ab7d19b4ee2ac4", @ANYRES16=r8, @ANYBLOB="200029bd7000fcdbdf253700000008000300", @ANYRES32=r12, @ANYBLOB="0c0099000200000036000000080057000100000008002700000000000500190105000000050018010300000008009f00070000000800a000550000000800a000070000000800a0000500000008009f00010000000800a100090000000800220157010000080026006c0900000800270001000000080057000900000005001901400000000800a10000000000050019010500000008005700a5010000"], 0xb8}, 0x1, 0x0, 0x0, 0x4008080}, 0x8081) socket$inet6(0xa, 0x1, 0x0) 1m7.716215961s ago: executing program 4 (id=3018): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000b4321f00000000000a00631818000000", @ANYRES32, @ANYBLOB="0000000000000100b706000014020100b7030000000600188500000008000000bf090000000000005509010000000c007b00000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x1000, &(0x7f0000001e40)=""/4096, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 50.44238829s ago: executing program 2 (id=2219): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="12000000400000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r1, &(0x7f0000000200), 0x0}, 0x20) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth1\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r6}, 0x18) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000740)={'dummy0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}}, 0x0) 43.224658329s ago: executing program 4 (id=3018): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000b4321f00000000000a00631818000000", @ANYRES32, @ANYBLOB="0000000000000100b706000014020100b7030000000600188500000008000000bf090000000000005509010000000c007b00000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x1000, &(0x7f0000001e40)=""/4096, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 25.718798165s ago: executing program 2 (id=2219): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="12000000400000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r1, &(0x7f0000000200), 0x0}, 0x20) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth1\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r6}, 0x18) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000740)={'dummy0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}}, 0x0) 23.544901574s ago: executing program 4 (id=3018): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000b4321f00000000000a00631818000000", @ANYRES32, @ANYBLOB="0000000000000100b706000014020100b7030000000600188500000008000000bf090000000000005509010000000c007b00000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x1000, &(0x7f0000001e40)=""/4096, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 5.854984209s ago: executing program 1 (id=3342): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)={0x44, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x4, 0x3, @ipv6=@private1}]}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRESOCT=r2, @ANYRES16=r0], 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x20048804) 5.731958973s ago: executing program 1 (id=3344): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x12d8, 0xffffffff, 0x98, 0x11a8, 0x98, 0xffffffff, 0xffffffff, 0x1240, 0x1240, 0x1240, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private, @multicast2, 0x0, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0x10e8, 0x1110, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00'}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, @REJECT={0x28}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1338) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000019c0)={{0x32, @private=0xa010102, 0x4e24, 0x3, 'ovf\x00', 0x0, 0x7, 0x62}, {@broadcast, 0x4e20, 0x1, 0xa8fd, 0x8, 0x100}}, 0x44) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) unshare(0x8000400) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001940)={0x81}, 0x8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x8, 0x3, 0xa50, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x9d8, 0xffffffff, 0xffffffff, 0x9d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x73, 0x0, 0x0, 0x45}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, [], [0x0, 0xffffffff, 0xff000000], 'wg1\x00', 'gre0\x00'}, 0x0, 0x888, 0x8b0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x7fff, 0x1}, {0x8, 0x3}, {0xfffff7ec, 0x1}, {0xfff, 0xbd3626e1c8b1df09}, {0x5, 0x2}, {0xb34c, 0x3}, {0x2}, {0xe48b, 0x2}, {0x101, 0x2}, {0x5, 0x2}, {0x5}], [{0x400}, {0x6, 0x8001}, {0x401, 0x40}, {0x7fff}, {0xffffc1b1, 0x32de}, {0xfff, 0x8}, {0x2, 0x9}, {0x1, 0xbbca}, {0x83, 0x1}, {0x5, 0x7}, {0x3}], 0x1, 0x7}, {[{0x9, 0x3}, {0x6, 0x3}, {0x4, 0x3}, {0x1, 0x2}, {0x9, 0x1}, {0xfffffffa}, {0x0, 0x2}, {0x80000000, 0x3}, {0x80000001}, {0x8001, 0x2}, {0xff, 0x3}], [{0x7, 0x5}, {0x3, 0x6b6}, {0x4, 0x400}, {0x3}, {0x4, 0xfff}, {0x3ff, 0xe5d7}, {0x6, 0x3ff}, {0xa78, 0xffffffff}, {0xa9e1, 0x3}, {0x8, 0x1000}, {0xc7, 0xf385}], 0x6, 0x3}, {[{0x101, 0x2}, {0x9}, {0x3, 0x3}, {0x2, 0x3}, {0x48}, {0x9, 0x2}, {0x1, 0x2}, {0x7, 0x2}, {0x9}, {0x7, 0x1}, {0x0, 0x3}], [{0xfffffffb, 0x5}, {0x8, 0xa17}, {0x80, 0x4}, {0x8}, {0x3, 0x7}, {0x5e18, 0x7}, {0x4, 0x101}, {0x7, 0xfff}, {0xd, 0x7f}, {0x2, 0x2}, {0xfb3, 0xa94}], 0xb, 0x4}, {[{0x8, 0x1}, {0x4, 0x2}, {0x4e, 0xc781c4f1f9c1fa4f}, {0x8, 0x1}, {0x4e5, 0x2}, {0x3, 0x3}, {0x6, 0x1}, {0x7, 0x1}, {0x5, 0x2}, {0xfff}, {0x4}], [{0x9, 0x8001}, {0xffff, 0x4}, {0x7fff, 0xf}, {0x66d, 0x9}, {0x92, 0xb}, {0x3, 0x6}, {0x7, 0xfff}, {0x1, 0xff}, {0x1, 0x1}, {0x0, 0x8}, {0x1, 0xff}], 0xa}, {[{0x5, 0x2}, {0x7a3, 0x2}, {0x1, 0x3}, {0x100, 0x3}, {0x40}, {0x8d, 0x1}, {0x8, 0x3}, {0x9, 0x3}, {0x8, 0x2}, {0x1, 0x1}, {0x7}], [{0x854f, 0x6b}, {0x7, 0x7}, {0x6, 0x80}, {0x3, 0xffc00000}, {0x7}, {0x3, 0x6}, {0x2, 0xf17}, {0x25, 0x401}, {0x200, 0x84b}, {0x7fff, 0x80}, {0x3, 0x1}], 0x4, 0x8}, {[{0xc3d, 0x147d12363fe5c40a}, {0x64, 0x1}, {0xf, 0x3}, {0x5, 0x1}, {0x7fffffff, 0x2}, {0x5}, {0x2af0, 0x2}, {0x1bd6, 0x2}, {0x1, 0x2}, {0x7, 0x1}, {0x7, 0x2}], [{0x92b, 0x1ff}, {0x1, 0xf458}, {0x5, 0x3}, {0x84, 0x1}, {0xe923, 0x7fff}, {0x4, 0xe}, {0x3, 0x6}, {0xad3f, 0x59f}, {0x4, 0xfffffffc}, {0x6}, {0x5, 0x6f}], 0x9}, {[{0x8}, {0x2f, 0x1}, {0x7, 0x1}, {0x0, 0x2}, {0x3, 0x3}, {0x0, 0x1}, {0x1, 0x3}, {0x8, 0x3}, {0x7}, {0x2}, {0x2, 0x3}], [{0x101, 0x80000000}, {0x1, 0x9}, {0x40, 0xff}, {0x4, 0x2}, {0x5, 0x6}, {0x2, 0x5}, {0x0, 0x3}, {0xe, 0x5}, {0x6, 0x1ff}, {0xc, 0x7}, {0x1, 0x4}], 0xb, 0x7}, {[{0x8c, 0x1}, {0xd}, {0x10000, 0x2}, {0x8, 0x2}, {0x3, 0x3}, {0x0, 0x3}, {0x1ff, 0x1}, {}, {0xc, 0x1}, {0xf0f}, {0xf629}], [{0x4, 0x5}, {0x35f7, 0x1}, {0x401, 0xf6}, {0x94, 0xd16}, {0x8, 0x5}, {0x35, 0x4929}, {0x8001, 0x5}, {0x1000, 0x9}, {0x9f, 0x65}, {0x9, 0x4}, {0x9, 0xf0a9}], 0x1, 0x4}, {[{0x9, 0x1}, {0x9, 0x2}, {0x7, 0x1}, {0x4, 0x4adbb8db8b6f3087}, {0x3}, {0x3, 0x3}, {0x7ff}, {0x7, 0x1}, {0x10000, 0x3}, {0x0, 0x2}, {0x80000000, 0x1}], [{0xf767, 0x8}, {0xc, 0x5}, {0x9, 0x8}, {0x6, 0xb23}, {0x101, 0x4}, {0xfffffff7, 0xb98}, {0x10001, 0x8f}, {0x9, 0xa83}, {0xd, 0x1}, {0x4, 0xe00}, {0x7, 0x444}], 0x6, 0x4}, {[{0x2, 0x3}, {0x2}, {0x26914786, 0x3}, {0x3}, {0xd7f, 0x1}, {0x7fffffff}, {0xf}, {0x4, 0x2}, {0x8, 0x1}, {0x4, 0x3}, {0xe, 0x1}], [{0xb59, 0x6}, {0x4, 0x70c063f5}, {0x2, 0xfffffffe}, {0x5, 0x6}, {0x10000, 0x872}, {0x6, 0x8}, {0xffff, 0x7}, {0x7, 0x4}, {0x6, 0x10}, {0xfff, 0xa}, {0x81, 0x4}], 0xb, 0x4}, {[{0x200, 0x1}, {0x2, 0x3}, {0xa, 0x1}, {0x3ff, 0x1}, {0x7}, {0x1, 0x2}, {0x6, 0x3}, {0x7}, {0x92, 0x3}, {0x6, 0x1}, {0x7fffffff, 0x2}], [{0x3, 0xbbb9}, {0x4, 0x400}, {0xdec, 0x9}, {0x7, 0x1d}, {0x0, 0x9a}, {0x1, 0x7}, {0x1, 0xf580}, {0x4, 0x9f}, {0x2, 0x4}, {0x5, 0x7}, {0xfff, 0x1}], 0x5, 0x7}], 0x4, 0x1}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8, 0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xab0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000000000000941000000ed86fce614055b221006001800000732756470"], 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f00000000c0)={r2, r2, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x7, 0x0, 0x8, 'syz1\x00'}) shutdown(r2, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000000a0b040000000000000000020000002800048024000180090001006d6574610000000014000280080001400000000a08000240000000030900010073797a3000000000090002007379"], 0x7c}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000001980), r3) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001b40)=ANY=[@ANYBLOB="280000003b7d1bc3b37e6d0b144b9e9ea5270a39110500000053db51d5e0249c0000000000", @ANYRES64=r2, @ANYBLOB="0100ffffffff0000020001000000000000000b000000000c001473797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x20000001) 5.267095932s ago: executing program 4 (id=3018): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000b4321f00000000000a00631818000000", @ANYRES32, @ANYBLOB="0000000000000100b706000014020100b7030000000600188500000008000000bf090000000000005509010000000c007b00000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x1000, &(0x7f0000001e40)=""/4096, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 4.476248725s ago: executing program 1 (id=3349): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r1, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1a, &(0x7f00000009c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0x25, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x5c}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000100)="5fcb305cff88065c5f4e4b22e1a68306a0674b09cacee702ec82345505a284e95df9bb1029ec37f597a6d440f780f9efde916a4200b9026908bc8d0f2d84e0ea8e909a0e8bc7abc6499f4c34ac4e159226f46ddda77261ef20ccdaa4535b80deb3146ca6f41395f0a033ebda46bf739251e06f871073ac279d5096fe7cc110a8323ef3dc5a1f4cceb50cb897851bff6d271504c9819b822b4265f5627789e0168cece760dfebb1c048cceaa731f499352e225cdf563ae291583f99bb608e015df33adba4950ae289cd932442cc23dc044f73c707280036747470af0da36a", 0xde}, {&(0x7f0000000200)="f9e973dfcb9b157375765b6c2a2931837d763a2dd2dc8475f06faf80153ee9a5e30df65b1e8485e7a1b2a3268082e70e1bb2fd6d837b6f9ebbe05ebb172915f339fefa345bc3639ae26b9b735a73f6244e6a244f4cb05d3a77901eceb8e730099d5cd0459d25", 0x66}, {&(0x7f0000000400)="94b248b2a2619164bc4e49ee02ae7cf5c4c86b18c33be6c84a89e42a6eb97cb0e469b225ec82103edea991d18abbb5735add5bf898d7753c739b773a8f0e008e02bcc0157e8f29974e4c449bc7726471d34ff5a3cae07850467c31d5ab4f4402857c316383cb89a7418bd7f73b139e12ed1b9def0332f4cfdc3f99c3ba6d3d2dbdd0293a47250a880c4efa0abde745c27d9b6cc2eeb830686fd561b168eeca572e75fa38d91e444e14d627a99a28af1379203d80799fd72e6a072c6d6d3bb87571c253", 0xc3}, {&(0x7f0000000380)="c345c6fc56b76d05fda179b13eaf328e4989c1c2ac63e03f7eb2a9fe5e1a5d98a87d66cda4bd299a9a5224c4b77f", 0x2e}, {&(0x7f0000000500)="3919c62217d5baff4205d760501c81dbb853463480421470b809d0fc8e91022dc2c1bcd74f4b62fcc817a56eef1e64a332d11457cc2d5b3cb105ea0b370f4a7ccb4e0796c8c621628ab3515d54e87669e07e74547aa398ca8e9d3040a1000d1fc4a5d913f0611012b0a5809d0b35f0d5e52eedee92c5cc1c1fa7d8d7b24236dff54d369e6ce7dc468aec33db118155126457edb245ea57bdd32b399139e27a63fd64666d47d972f4fe5903b76b2f16ce3431f071e4ddab53c0baa5feda4f", 0xbe}, {&(0x7f00000005c0)="aff4c2d869e3f599baab14d6b6a8c1340ec1420efec67a5130d25054e986689ee95b0738403b9822e346d41a", 0x2c}, {&(0x7f0000000600)="11", 0x1}, {&(0x7f0000000640)="e2d754af2ebf4c69a5e1c49292f0469840d39c0f10ad90efe1b09aff35744699fe9b4aaa6ef185ed9f39c164e8afae65b8052ab6235c30507e769f1ddfbf2e3f52bfea1edd26d3bc9805129da12d056f1b2fc73ea74c79447f2d3398e6f09e5446260099f3a8820a4584f114c6b0c411798ccd5c5f41e5e2e2039271db12efc8169ede05d678119961461cb81f6f13185d4c427c00885afec4355374be9fde0729289d50a067472b74e8f79186ffcf274254ebe6c08fec4f10c80c12b14aa90234b9", 0xc2}, {&(0x7f0000000740)="4d4fa6814ca76714b162c61d3321add83dec0981a6d80d4cb886ebfdeb08f5e2b5589a1809ab779e73a784fc7b3bf337225a0d987af30e75ece465c42085fd16bd5008c3d3e4ea71e7f39b2bd0a2acdea3b98442c32513a66917ef336882b08830ea10698088c96a3da0b3073954bf1c3044107fcdfc072be40565d2bd03cb30d49ae0820dc029dfa16c911f913e9cc7db85ee1a30ad8f046fd2c399b5ca19626c03f95b01ec6db1ad12b5290125429eca09d226c660a9680de445548efc85662f3e7474e5305433", 0xc8}], 0x9, &(0x7f0000000c00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @local}}}, @ip_retopts={{0xb8, 0x0, 0x7, {[@ssrr={0x89, 0x13, 0x80, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @multicast2]}, @timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x6, [{@local, 0x1}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x4}, {@multicast2, 0x7}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x8001}]}, @timestamp={0x44, 0x18, 0x51, 0x0, 0x9, [0xa7, 0x743c, 0x4, 0x5, 0x6]}, @generic={0x83, 0x6, "165e1c6a"}, @ssrr={0x89, 0xf, 0xf5, [@empty, @loopback, @broadcast]}, @generic={0x7, 0x5, "359bf0"}, @timestamp_prespec={0x44, 0x3c, 0x53, 0x3, 0x5, [{@rand_addr=0x64010102, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x9530}, {@multicast2, 0x4}, {@empty, 0x80000001}, {@loopback, 0x1}, {@loopback, 0x40}]}]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_retopts={{0xac, 0x0, 0x7, {[@lsrr={0x83, 0x23, 0xf6, [@loopback, @dev={0xac, 0x14, 0x14, 0xd}, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0xf}, @remote, @local, @private=0xa010101]}, @ssrr={0x89, 0x1b, 0x4f, [@rand_addr=0x64010100, @empty, @private=0xa010100, @empty, @remote, @empty]}, @rr={0x7, 0x1f, 0xfc, [@loopback, @loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0x16}, @loopback, @empty, @broadcast]}, @end, @generic={0x82, 0x6, 'hB[:'}, @ssrr={0x89, 0x1f, 0x3e, [@multicast2, @local, @rand_addr=0x64010100, @private=0xa010102, @local, @broadcast, @local]}, @cipso={0x86, 0x15, 0x3, [{0x1, 0xf, "7289e02f7eb17b2beec1ecc84b"}]}, @noop, @noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x800}}], 0x1d8}, 0x10) 4.456906966s ago: executing program 2 (id=2219): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="12000000400000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r1, &(0x7f0000000200), 0x0}, 0x20) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth1\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r6}, 0x18) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000740)={'dummy0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}}, 0x0) 2.714101467s ago: executing program 1 (id=3352): socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) socket$kcm(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) socket(0x40000000015, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002211c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 2.201744767s ago: executing program 1 (id=3354): r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea616f", 0x3}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) (async) recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x3a8, 0xffffffff, 0x1c0, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [0x0, 0x0, 0x0, 0xff], [], 'macsec0\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x6, 0x0, 0x1, 0x48}, 0x2f2, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7, 0x50cc}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x42b5}}}}, {{@ipv6={@private2, @mcast1, [0x0, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0xffffffff, 0xffffff00], 'macvlan1\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x6c, 0x6, 0x6}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x80, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r5, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x14, 0x0, 0x341, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)={0x2c, 0x0, 0x301, 0x0, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x2c}}, 0x20000000) (async) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000240)="f25749347bc273dfaeab9685080671f106f613", 0x13, 0x20008814, &(0x7f0000000200)={0x11, 0x1, r9, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0xffffffff, 0xffffffffffffffff, 0x0, 0x2}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x64}}, 0x0) 2.044256965s ago: executing program 0 (id=3355): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r1, 0x0, 0x31, &(0x7f0000000000)=""/1, &(0x7f0000001840)=0x1) (async) getsockopt$bt_hci(r1, 0x0, 0x31, &(0x7f0000000000)=""/1, &(0x7f0000001840)=0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x30}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) (async) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x30}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1.936048301s ago: executing program 3 (id=3356): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1876a76c42473f7a47dc000000ff"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) unshare(0x22020400) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x810000}, 0xc) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x10, 0x0, &(0x7f00000000c0)) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r4, @ANYBLOB="08002600851600000a00180000000000000000001c005a80180001801400"], 0x4c}}, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="020900000200"], 0x10}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x1, 0x4, 0x7, 0xa3, 0x10}, 0x48) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5804b01e", @ANYRES16=r7, @ANYBLOB="01002abd5000fcdbdf250100000008000100", @ANYRES32=r8, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040004000000"], 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)}, 0x40010042) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x110) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x2}, 0x38) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r10}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x2000002, 0xe, 0xfffffffffffffda9, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.656715555s ago: executing program 0 (id=3357): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x48}}, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000440)={0x0, 0x8}, 0x8) getsockopt$sock_buf(r0, 0x1, 0x49, &(0x7f00000001c0)=""/132, &(0x7f00000002c0)=0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0xb, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0xd, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f2d28290a9423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="c4ec601a5f39d90830"}]}]}, 0xe0}], 0x1}, 0x40040) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000040)={0x14, 0x4, 0xa, 0x101, 0x70bd28, 0x25dfdbff, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x2004d805}, 0x8000) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r8) sendmmsg(r8, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000640)="677aecfe797f8d51d044ffe055cad917bec425f37e820d7bf3139d969938bb9555deb072de644dddf4e6f6a34f8321785db05d761836e6168b5fcf9f0d36b713fb378e75f0d11d21e17c24142f4c7a661f8c732a0c4b99aae62873e2918d478bcfcb4574028110654d62", 0x6a}, {&(0x7f00000006c0)="e5dd6029aac2c1b5b684e2b87bc032e8141a5bf3e031033308554253683aef4fa3f618e253b39f1af707db7b965696bed68b4eaf92e34e345a13836be1b5a4b66ccc6598d00f1693d04df75b1664bd0d07dcd1407453f9104763ff320a76c68296f5863312533f0d7779e6a38b54f524af78d579f335f0dda7c553e5548483e2820755e6f204aaba027af946629a580a5593fdcd41057420902e8026989eb8d754cfa94510a7f15e073128a2c9afd7e6c9ef8f010bd1457ce51fe36e145723df2644d0669b10a6248d7d89335db6725c038e988035ba608591c2ffc1d17b4d0b4184a4231910c4183712035e11b8a53a4bcc0a", 0xf3}, {&(0x7f0000001700)="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", 0xe83}], 0x3, &(0x7f00000027c0)=ANY=[@ANYBLOB="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"], 0x1118}}], 0x1, 0x400c894) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='mm_lru_insertion\x00', r9}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r10, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xb, 0x5, 0x8, 0x2203, r11, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x7}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xc, &(0x7f00000000c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 1.616710513s ago: executing program 3 (id=3358): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {0x10}, {0xffff, 0xffff}, {0x2, 0xfffa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xa, [0x0, 0x0, 0xfe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x8], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x5b5ace103c07041}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) 1.45220067s ago: executing program 3 (id=3359): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x600}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.405849918s ago: executing program 3 (id=3360): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x84}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x14, r4, 0x30d}, 0x14}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800b000100697036746e6c00003800028014000200fe8000000000000000000000000000aa08000100", @ANYBLOB="040013001400030017"], 0x68}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r6, &(0x7f0000000400)={&(0x7f0000000000)=@ieee802154, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)=""/30, 0x1e}, {&(0x7f0000000100)=""/202, 0xca}, {&(0x7f0000000340)=""/152, 0x98}, {&(0x7f0000000480)=""/205, 0xcd}], 0x4, &(0x7f00000005c0)=""/196, 0xc4}, 0x10003) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="13d1b89ce91ad1134934d8244939e1fe51b7a89d", @ANYRES16=r1, @ANYBLOB="010080000000fedbdf250f000000040003802400038008000100810000000800010004000000080003000000400108000300f70300002000078008000100460c00000c00030000000000000000000800020002000000"], 0x5c}, 0x1, 0x0, 0x0, 0x2805}, 0x0) 1.188936064s ago: executing program 3 (id=3361): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0xc, 0x40, 0x6}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000500), &(0x7f0000000580)=[{0x4, 0x4, 0xe, 0x8}, {0x0, 0x4, 0x0, 0x4}, {0x2, 0x1, 0xc, 0x4}, {0x1, 0x4, 0x7, 0x4}, {0x2, 0x4, 0xe, 0x7}, {0x5, 0x3, 0x1}], 0x10, 0xfffffffd}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000001fff0000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) 615.665928ms ago: executing program 0 (id=3362): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000030000000085000000b4000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000440)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 542.911664ms ago: executing program 0 (id=3363): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) recvfrom$unix(r0, &(0x7f0000000200)=""/244, 0xf4, 0x40002101, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) unshare(0x4000400) pwritev(r3, 0x0, 0x0, 0xfffffffd, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) connect$inet(r1, &(0x7f0000000040)={0x2, 0xfffe, @empty}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r5, 0x29, 0x21, 0x0, &(0x7f0000001840)) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r5], 0x528}}, 0xc000) 398.234597ms ago: executing program 0 (id=3364): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=@base={0xf, 0x4, 0x4, 0x12, 0x2004}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000001800dd8d0000000000000000020000000000000600000000060015000400000014001680100008800c"], 0x38}}, 0x0) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value, &(0x7f00000002c0)=0x8) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000e00), 0x4) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, 0x25, r5}, 0x94) socket$netlink(0x10, 0x3, 0x15) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@ipv4_delrule={0x1c, 0x21, 0x1}, 0x1c}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000100), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={0xffffffffffffffff, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000700)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0], 0x0, 0x75, &(0x7f0000000a40)=[{}, {}], 0x10, 0x10, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8, 0x60, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x1b, 0x22, &(0x7f00000005c0)=@raw=[@ldst={0x1, 0x1, 0x0, 0x7, 0xb, 0x8519626daca7e1b5}, @map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x69}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @generic={0x3, 0x4, 0x8, 0xa28, 0x1}, @call={0x85, 0x0, 0x0, 0xa4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x19, &(0x7f0000000480)=""/25, 0x41100, 0x8, '\x00', r4, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0xa, 0x1, 0x9}, 0x10, r8, r6, 0x3, 0x0, &(0x7f0000000d00)=[{0x5, 0x3, 0x5, 0x5}, {0x0, 0x2, 0x9, 0x8}, {0x3, 0x2, 0xf}], 0x10, 0xe2}, 0x94) r9 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r9, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) sendmmsg$inet(r9, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{r1}, &(0x7f0000000140), &(0x7f0000000c80)=r0}, 0x20) 254.815145ms ago: executing program 3 (id=3365): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(0x3) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x4090) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000ff0f0000070000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000045d6678bd855788f2b987c867bc1b23567bae50c35b5f3eff0a1766cb9ad0b697963782ef20268a9c04982daf11c6bc66d799c11e8dd5018625c1fcd47a5e23c43f8274128dacfac6e6602dda419c67c9144caf894fd186b54a06087cde1b02a6cacb291c8e1d28e8bee3dc02a0a1736aa35f2baf969cf4bb6b4bc7a90fe983b501c75f535ec55a4131ef0f1dea5443e015979cf23a18f4110fc872d5899"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073797a31000000000900010073797a3100000000280004800800014000000005080002401b2fd2e4060003006970"], 0xc4}, 0x1, 0x2000000, 0x0, 0x20004000}, 0x24000010) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x4) r5 = socket(0x5, 0x803, 0x400) syz_emit_ethernet(0x36, &(0x7f0000000480)={@local, @link_local, @void, {@ipv4={0x8902, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x3}}}}}}, 0x0) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100), 0x4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x14, 0x5a, 0xc6b747b6bf1c6b95}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x7, &(0x7f00000000c0)="feffffff", 0x4) getsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f00000000c0)={@remote}, &(0x7f0000000140)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r2}, 0x10) 253.843324ms ago: executing program 0 (id=3366): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r1, 0x0, 0x25, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x332, &(0x7f0000000040)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @gre_packet={0x4, 0x6, "1e9f7b", 0x2fc, 0x2f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@routing={0x87, 0x6, 0x2, 0x4, 0x0, [@mcast2, @remote, @remote]}, @srh={0x21, 0xa, 0x4, 0x5, 0x7, 0x10, 0xfffd, [@private1, @mcast2, @empty, @dev={0xfe, 0x80, '\x00', 0x3b}, @remote]}, @fragment={0xe, 0x0, 0x6, 0x0, 0x0, 0x4, 0xf}, @fragment={0x1d, 0x0, 0x3, 0x1, 0x0, 0x9, 0x66}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xd5, 0x1, [], "2d7f3ca90776ab2ecee2034670933c50a33c73b1fa6f831b1f9b94ff41f211688fa5b3a79097e293367ec60b3689a1c647f97a32546be07a5ed7966206ad64f3e1ea2a572a793a2046c022facf9c97ec995d79f7d1c26ef5c06053633bca5ad297986fecf4af754e653c18644d13419e45f7c69eab3a9dfc98fdf92cb2a1143928d2c74883aaefa9885ff05b81f366cf6390727e51cb4bda57f018ff772c522398409c004dfb1a4978f63d8c33fc1a1bd0c93c155f14b5352295fb20062a1cd13a89379a3dcecfdc45cd96a515557c0155ec0021a4"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "43f5a3d48972b29ec9620bfaddbc7bcbdac4ca7659c05b593a676ae87ea8881fb474eacd23118e998bbdedb823c4754983502b094e2ef52c9488a7632c1911f9fd079ceedf4f6847397b6f01cbd6b263cf4c2e51ea8da0c81f7cc1c6534584036d98e72e2ede883229527e7af4fa494dc5fe49d8e7365f238e6a024cd60612f5d0feeb49eef7cdef351c5a1ec12934ebe02d1ed957f768ad167285bbd2e9c9aedb70eca0e418"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x4], "af3d50d5af3a61540ad569084f2078c077bed677a05755505401216588e82fc7143949e3f4eae73ee331ccffdc692cf40cfa4aa9bafe176c613dca1a80ad2feeafc049f1647685"}, {0x8, 0x88be, 0x0, {{0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x0, 0xf}, 0x1, {0x7ff}}}, {0x8, 0x22eb, 0x2, {{0x5, 0x2, 0x3, 0x1, 0x0, 0x0, 0x3}, 0x2, {0x101, 0x7, 0x0, 0x16, 0x0, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x0, "1a0ae482f70fe14785eac474d1c583c2c054571d029f36b838ccb54d1b1d19bbeb4a777b7bdd7c7e758381ba9c4474385d0256338d8921e345443fdb3e8000bfca6f9ab4b745a0c4dae6b9e8ad6c6e4cc505936e"}}}}}}}, 0x0) 0s ago: executing program 1 (id=3367): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000008440012800b000100697036746e6c0000340002800500060000000000080007000380000004001300060010000200000014000300ff02000000000000000000000000000108000a00", @ANYRES16], 0x6c}}, 0x0) kernel console output (not intermixed with test programs): .0.2:0 - no destination available [ 383.588108][ T4533] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.795478][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 383.804690][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 383.812478][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 383.826535][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 383.834489][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 383.896009][ T4533] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.980245][T15134] lo speed is unknown, defaulting to 1000 [ 384.085978][ T4533] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.253770][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 384.326396][ T4533] bridge_slave_1: left allmulticast mode [ 384.332069][ T4533] bridge_slave_1: left promiscuous mode [ 384.341082][ T4533] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.352491][ T4533] bridge_slave_0: left allmulticast mode [ 384.375699][ T4533] bridge_slave_0: left promiscuous mode [ 384.381580][ T4533] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.836933][ T4533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.850169][ T4533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.863377][ T4533] bond0 (unregistering): Released all slaves [ 385.293757][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 385.322412][T15134] chnl_net:caif_netlink_parms(): no params data found [ 385.549285][ T4533] hsr_slave_0: left promiscuous mode [ 385.555561][ T4533] hsr_slave_1: left promiscuous mode [ 385.561658][ T4533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.578710][ T4533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.589125][ T4533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.597522][ T4533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.627958][ T4533] veth1_macvtap: left promiscuous mode [ 385.633533][ T4533] veth0_macvtap: left promiscuous mode [ 385.639465][ T4533] veth1_vlan: left promiscuous mode [ 385.645356][ T4533] veth0_vlan: left promiscuous mode [ 385.860183][ T5837] Bluetooth: hci4: command tx timeout [ 386.179027][ T4533] team0 (unregistering): Port device team_slave_1 removed [ 386.227053][ T4533] team0 (unregistering): Port device team_slave_0 removed [ 386.336853][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 386.795939][T15134] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.806169][T15134] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.813368][T15134] bridge_slave_0: entered allmulticast mode [ 386.823019][T15134] bridge_slave_0: entered promiscuous mode [ 386.831790][T15134] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.839431][T15134] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.849640][T15134] bridge_slave_1: entered allmulticast mode [ 386.857636][T15134] bridge_slave_1: entered promiscuous mode [ 386.917546][T15134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.940267][T15134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.036681][T15134] team0: Port device team_slave_0 added [ 387.045742][T15134] team0: Port device team_slave_1 added [ 387.088340][T15134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.097206][T15134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.126813][T15134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.139824][T15134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.150481][T15134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.180230][T15134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.250022][T15134] hsr_slave_0: entered promiscuous mode [ 387.259663][T15134] hsr_slave_1: entered promiscuous mode [ 387.267036][T15134] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 387.277977][T15134] Cannot create hsr debugfs directory [ 387.373751][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 387.727917][T15134] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 387.739642][T15134] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 387.751169][T15134] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 387.764310][T15134] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 387.886966][T15134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.916578][T15134] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.931293][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.938468][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.951708][ T5837] Bluetooth: hci4: command tx timeout [ 387.980851][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.988023][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.027280][T15134] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 388.251152][T15134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.307771][T15134] veth0_vlan: entered promiscuous mode [ 388.323424][T15134] veth1_vlan: entered promiscuous mode [ 388.366672][T15134] veth0_macvtap: entered promiscuous mode [ 388.378004][T15134] veth1_macvtap: entered promiscuous mode [ 388.401710][T15134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.413761][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 388.428190][T15134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.446616][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.455952][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.468154][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.479805][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.567962][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.584280][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.622693][ T3518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.632020][ T3518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.453874][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 390.411862][ T4533] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.493834][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 391.533757][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 391.813549][ T4533] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.928686][ T4533] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.036980][ T4533] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.081874][ T5150] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 392.091287][ T5150] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 392.101459][ T5150] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 392.124968][ T5150] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 392.133067][ T5150] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 392.213358][T15153] lo speed is unknown, defaulting to 1000 [ 392.267249][ T4533] bridge_slave_1: left allmulticast mode [ 392.272924][ T4533] bridge_slave_1: left promiscuous mode [ 392.307066][ T4533] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.329325][ T4533] bridge_slave_0: left allmulticast mode [ 392.348058][ T4533] bridge_slave_0: left promiscuous mode [ 392.366999][ T4533] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.576170][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 392.853157][ T4533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.868945][ T4533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.879793][ T4533] bond0 (unregistering): Released all slaves [ 393.244205][T15153] chnl_net:caif_netlink_parms(): no params data found [ 393.414143][ T4533] hsr_slave_0: left promiscuous mode [ 393.422163][ T4533] hsr_slave_1: left promiscuous mode [ 393.431516][ T4533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.440370][ T4533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.451600][ T4533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.461684][ T4533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.497014][ T4533] veth1_macvtap: left promiscuous mode [ 393.502586][ T4533] veth0_macvtap: left promiscuous mode [ 393.511876][ T4533] veth1_vlan: left promiscuous mode [ 393.518234][ T4533] veth0_vlan: left promiscuous mode [ 393.613931][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 394.140645][ T4533] team0 (unregistering): Port device team_slave_1 removed [ 394.174921][ T5150] Bluetooth: hci4: command tx timeout [ 394.200786][ T4533] team0 (unregistering): Port device team_slave_0 removed [ 394.653758][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 394.781724][T15153] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.793226][T15153] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.800903][T15153] bridge_slave_0: entered allmulticast mode [ 394.813355][T15153] bridge_slave_0: entered promiscuous mode [ 394.822428][T15153] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.834741][T15153] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.841975][T15153] bridge_slave_1: entered allmulticast mode [ 394.853473][T15153] bridge_slave_1: entered promiscuous mode [ 394.930796][T15153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.951308][T15153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.008156][T15153] team0: Port device team_slave_0 added [ 395.019179][T15153] team0: Port device team_slave_1 added [ 395.066148][T15153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.073117][T15153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.104280][T15153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.124813][T15153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.131765][T15153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.158950][T15153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.223302][T15153] hsr_slave_0: entered promiscuous mode [ 395.230498][T15153] hsr_slave_1: entered promiscuous mode [ 395.240794][T15153] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 395.248717][T15153] Cannot create hsr debugfs directory [ 395.693751][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 395.841675][T15153] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 395.855174][T15153] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 395.870215][T15153] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 395.881888][T15153] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 395.991346][T15153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.015628][T15153] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.029674][ T4533] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.036856][ T4533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.051531][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.058698][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.254301][ T5150] Bluetooth: hci4: command tx timeout [ 396.319447][T15153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.375973][T15153] veth0_vlan: entered promiscuous mode [ 396.395701][T15153] veth1_vlan: entered promiscuous mode [ 396.430975][T15153] veth0_macvtap: entered promiscuous mode [ 396.443604][T15153] veth1_macvtap: entered promiscuous mode [ 396.474352][T15153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.491977][T15153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.511582][ T44] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.526919][ T44] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.550567][ T44] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.571023][ T44] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.632328][ T4533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.657064][ T4533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.687763][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.697290][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.733832][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 397.773840][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 398.489420][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.813794][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 399.853756][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 400.189893][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.243212][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 400.258451][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 400.272503][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 400.284742][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 400.303355][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 400.308753][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.376503][T15173] lo speed is unknown, defaulting to 1000 [ 400.418061][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.614815][ T13] bridge_slave_1: left allmulticast mode [ 400.620501][ T13] bridge_slave_1: left promiscuous mode [ 400.643992][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.656467][ T13] bridge_slave_0: left allmulticast mode [ 400.662130][ T13] bridge_slave_0: left promiscuous mode [ 400.684053][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.897270][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 401.144672][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.162965][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.177019][ T13] bond0 (unregistering): Released all slaves [ 401.645988][T15173] chnl_net:caif_netlink_parms(): no params data found [ 401.811680][ T13] hsr_slave_0: left promiscuous mode [ 401.822573][ T13] hsr_slave_1: left promiscuous mode [ 401.833087][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.840695][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.852649][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.861116][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.895355][ T13] veth1_macvtap: left promiscuous mode [ 401.900931][ T13] veth0_macvtap: left promiscuous mode [ 401.907417][ T13] veth1_vlan: left promiscuous mode [ 401.912765][ T13] veth0_vlan: left promiscuous mode [ 401.933748][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 402.336979][ T5150] Bluetooth: hci4: command tx timeout [ 402.498256][ T13] team0 (unregistering): Port device team_slave_1 removed [ 402.556769][ T13] team0 (unregistering): Port device team_slave_0 removed [ 402.973759][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 403.181283][T15173] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.206055][T15173] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.213304][T15173] bridge_slave_0: entered allmulticast mode [ 403.222172][T15173] bridge_slave_0: entered promiscuous mode [ 403.232513][T15173] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.239836][T15173] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.247329][T15173] bridge_slave_1: entered allmulticast mode [ 403.255211][T15173] bridge_slave_1: entered promiscuous mode [ 403.322759][T15173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.359728][T15173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.441752][T15173] team0: Port device team_slave_0 added [ 403.453319][T15173] team0: Port device team_slave_1 added [ 403.518185][T15173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.533975][T15173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.566210][T15173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.579932][T15173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.589419][T15173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.625272][T15173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.693187][T15173] hsr_slave_0: entered promiscuous mode [ 403.701797][T15173] hsr_slave_1: entered promiscuous mode [ 403.710480][T15173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 403.720345][T15173] Cannot create hsr debugfs directory [ 404.013755][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 404.094922][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 404.255692][T15173] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 404.269821][T15173] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 404.281908][T15173] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 404.299399][T15173] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 404.414274][ T5150] Bluetooth: hci4: command tx timeout [ 404.422247][T15173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.451340][T15173] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.468124][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.475297][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.502950][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.510135][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.792617][T15173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.859312][T15173] veth0_vlan: entered promiscuous mode [ 404.873012][T15173] veth1_vlan: entered promiscuous mode [ 404.921568][T15173] veth0_macvtap: entered promiscuous mode [ 404.939956][T15173] veth1_macvtap: entered promiscuous mode [ 404.961513][T15173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.978434][T15173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.002378][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.021829][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.037769][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.053875][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 405.060170][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.122005][ T4533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.139202][ T4533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.169268][ T3518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.179415][ T3518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.093786][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 406.868339][ T3518] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.944304][T15204] lo speed is unknown, defaulting to 1000 [ 407.133766][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 408.173750][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 408.371174][ T3518] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.448177][ T3518] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.639252][ T3518] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.948231][T15232] __nla_validate_parse: 4 callbacks suppressed [ 408.948250][T15232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2873'. [ 409.020278][T15236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2875'. [ 409.072007][ T3518] bridge_slave_1: left allmulticast mode [ 409.078394][ T3518] bridge_slave_1: left promiscuous mode [ 409.091805][ T3518] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.155058][ T3518] bridge_slave_0: left allmulticast mode [ 409.160738][ T3518] bridge_slave_0: left promiscuous mode [ 409.192980][ T3518] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.214406][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 409.303163][T15247] netlink: 'syz.1.2877': attribute type 2 has an invalid length. [ 409.324033][T15247] netlink: 'syz.1.2877': attribute type 9 has an invalid length. [ 409.449854][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 409.465465][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 409.476667][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 409.490840][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 409.508339][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 410.165410][ T3518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.180616][ T3518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.191919][ T3518] bond0 (unregistering): Released all slaves [ 410.260540][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 410.406086][T15260] tipc: Enabling of bearer rejected, already enabled [ 410.459498][T15262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2882'. [ 410.489865][T15262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2882'. [ 410.691693][T15251] lo speed is unknown, defaulting to 1000 [ 410.910456][T15274] netlink: 'syz.1.2887': attribute type 12 has an invalid length. [ 410.918648][T15274] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.2887'. [ 411.293743][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 411.544873][ T5150] Bluetooth: hci4: command tx timeout [ 411.571472][T15290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2893'. [ 411.593964][T15290] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2893'. [ 411.596378][T15288] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input21 [ 411.903296][T15298] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2895'. [ 411.941038][ T3518] hsr_slave_0: left promiscuous mode [ 411.962154][T15300] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2896'. [ 412.004998][T15300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2896'. [ 412.005057][ T3518] hsr_slave_1: left promiscuous mode [ 412.049339][ T3518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.058735][ T3518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.081185][ T3518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.096313][ T3518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.169801][ T3518] veth1_macvtap: left promiscuous mode [ 412.176834][ T3518] veth0_macvtap: left promiscuous mode [ 412.183602][ T3518] veth1_vlan: left promiscuous mode [ 412.191832][ T3518] veth0_vlan: left promiscuous mode [ 412.333760][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 412.937701][ T3518] team0 (unregistering): Port device team_slave_1 removed [ 412.994872][ T3518] team0 (unregistering): Port device team_slave_0 removed [ 413.376698][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 413.492634][T15302] bond0: entered promiscuous mode [ 413.499505][T15302] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 413.512635][T15302] bond0: left promiscuous mode [ 413.623481][T15309] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 413.624014][ T5150] Bluetooth: hci4: command tx timeout [ 413.756670][T15251] chnl_net:caif_netlink_parms(): no params data found [ 414.135652][T15251] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.143062][T15251] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.163299][T15251] bridge_slave_0: entered allmulticast mode [ 414.181867][T15251] bridge_slave_0: entered promiscuous mode [ 414.235128][T15251] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.242283][T15251] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.288881][T15251] bridge_slave_1: entered allmulticast mode [ 414.305939][T15251] bridge_slave_1: entered promiscuous mode [ 414.413757][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 414.543284][T15251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.581555][T15251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.711890][T15251] team0: Port device team_slave_0 added [ 414.722641][T15361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2915'. [ 414.731970][T15361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2915'. [ 414.758071][T15251] team0: Port device team_slave_1 added [ 414.766852][T15361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2915'. [ 414.794060][T15365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2915'. [ 414.835563][T15365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2915'. [ 414.908479][T15251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.925174][T15251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.007474][T15251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.036443][T15251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.043445][T15251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.144036][T15251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.382897][T15372] bond0: entered promiscuous mode [ 415.406978][T15372] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 415.453751][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 415.514094][T15372] bond0: left promiscuous mode [ 415.570421][T15376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2918'. [ 415.684897][T15381] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2921'. [ 415.694187][ T5150] Bluetooth: hci4: command tx timeout [ 415.729030][T15251] hsr_slave_0: entered promiscuous mode [ 415.775566][T15251] hsr_slave_1: entered promiscuous mode [ 415.781973][T15251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 415.817022][T15251] Cannot create hsr debugfs directory [ 416.002514][T15395] FAULT_INJECTION: forcing a failure. [ 416.002514][T15395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.019535][T15395] CPU: 0 UID: 0 PID: 15395 Comm: syz.1.2922 Not tainted 6.16.0-rc3-syzkaller-00901-gf22e6fdf7b33 #0 PREEMPT(full) [ 416.019563][T15395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 416.019575][T15395] Call Trace: [ 416.019583][T15395] [ 416.019592][T15395] dump_stack_lvl+0x189/0x250 [ 416.019624][T15395] ? __pfx____ratelimit+0x10/0x10 [ 416.019647][T15395] ? __pfx_dump_stack_lvl+0x10/0x10 [ 416.019673][T15395] ? __pfx__printk+0x10/0x10 [ 416.019707][T15395] should_fail_ex+0x414/0x560 [ 416.019735][T15395] _copy_to_user+0x31/0xb0 [ 416.019756][T15395] simple_read_from_buffer+0xe1/0x170 [ 416.019782][T15395] proc_fail_nth_read+0x1df/0x250 [ 416.019807][T15395] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 416.019832][T15395] ? rw_verify_area+0x258/0x650 [ 416.019857][T15395] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 416.019880][T15395] vfs_read+0x1fd/0x980 [ 416.019910][T15395] ? __pfx___mutex_lock+0x10/0x10 [ 416.019932][T15395] ? __pfx_vfs_read+0x10/0x10 [ 416.019959][T15395] ? __fget_files+0x2a/0x420 [ 416.019983][T15395] ? __fget_files+0x3a0/0x420 [ 416.020001][T15395] ? __fget_files+0x2a/0x420 [ 416.020030][T15395] ksys_read+0x145/0x250 [ 416.020057][T15395] ? __pfx_ksys_read+0x10/0x10 [ 416.020079][T15395] ? fput+0xa0/0xd0 [ 416.020104][T15395] ? do_syscall_64+0xbe/0x3b0 [ 416.020130][T15395] do_syscall_64+0xfa/0x3b0 [ 416.020149][T15395] ? lockdep_hardirqs_on+0x9c/0x150 [ 416.020168][T15395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.020186][T15395] ? clear_bhb_loop+0x60/0xb0 [ 416.020209][T15395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.020227][T15395] RIP: 0033:0x7f8cdff8d33c [ 416.020244][T15395] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 416.020260][T15395] RSP: 002b:00007f8ce0d54030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 416.020286][T15395] RAX: ffffffffffffffda RBX: 00007f8ce01b5fa0 RCX: 00007f8cdff8d33c [ 416.020300][T15395] RDX: 000000000000000f RSI: 00007f8ce0d540a0 RDI: 0000000000000006 [ 416.020312][T15395] RBP: 00007f8ce0d54090 R08: 0000000000000000 R09: 0000000000000000 [ 416.020324][T15395] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001 [ 416.020336][T15395] R13: 0000000000000000 R14: 00007f8ce01b5fa0 R15: 00007ffd04296bb8 [ 416.020367][T15395] [ 416.493736][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 416.538912][T15404] netlink: 'syz.3.2929': attribute type 2 has an invalid length. [ 417.353091][T15433] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2938'. [ 417.362341][T15433] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2938'. [ 417.533787][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 417.774568][ T5150] Bluetooth: hci4: command tx timeout [ 417.808742][T15442] lo speed is unknown, defaulting to 1000 [ 418.119633][T15449] !: renamed from dummy0 [ 418.204253][T15251] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 418.238516][T15251] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 418.287265][T15251] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 418.370732][T15251] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 418.545448][T15441] lo speed is unknown, defaulting to 1000 [ 418.573768][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 418.591164][T15467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.627585][T15458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2945'. [ 419.042833][T15251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.172034][T15480] FAULT_INJECTION: forcing a failure. [ 419.172034][T15480] name failslab, interval 1, probability 0, space 0, times 0 [ 419.224340][T15480] CPU: 1 UID: 0 PID: 15480 Comm: syz.4.2948 Not tainted 6.16.0-rc3-syzkaller-00901-gf22e6fdf7b33 #0 PREEMPT(full) [ 419.224369][T15480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 419.224381][T15480] Call Trace: [ 419.224389][T15480] [ 419.224398][T15480] dump_stack_lvl+0x189/0x250 [ 419.224430][T15480] ? __pfx____ratelimit+0x10/0x10 [ 419.224451][T15480] ? __pfx_dump_stack_lvl+0x10/0x10 [ 419.224477][T15480] ? __pfx__printk+0x10/0x10 [ 419.224506][T15480] ? __pfx___might_resched+0x10/0x10 [ 419.224537][T15480] should_fail_ex+0x414/0x560 [ 419.224565][T15480] should_failslab+0xa8/0x100 [ 419.224587][T15480] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 419.224614][T15480] ? __alloc_skb+0x112/0x2d0 [ 419.224640][T15480] __alloc_skb+0x112/0x2d0 [ 419.224666][T15480] netlink_sendmsg+0x5c6/0xb30 [ 419.224699][T15480] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.224729][T15480] ? aa_sock_msg_perm+0x94/0x160 [ 419.224753][T15480] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 419.224774][T15480] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.224797][T15480] __sock_sendmsg+0x219/0x270 [ 419.224820][T15480] ____sys_sendmsg+0x505/0x830 [ 419.224850][T15480] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.224883][T15480] ? import_iovec+0x74/0xa0 [ 419.224905][T15480] ___sys_sendmsg+0x21f/0x2a0 [ 419.224932][T15480] ? __pfx____sys_sendmsg+0x10/0x10 [ 419.224993][T15480] ? __fget_files+0x2a/0x420 [ 419.225011][T15480] ? __fget_files+0x3a0/0x420 [ 419.225040][T15480] __x64_sys_sendmsg+0x19b/0x260 [ 419.225067][T15480] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 419.225102][T15480] ? __pfx_ksys_write+0x10/0x10 [ 419.225125][T15480] ? rcu_is_watching+0x15/0xb0 [ 419.225156][T15480] ? do_syscall_64+0xbe/0x3b0 [ 419.225180][T15480] do_syscall_64+0xfa/0x3b0 [ 419.225199][T15480] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.225219][T15480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.225237][T15480] ? clear_bhb_loop+0x60/0xb0 [ 419.225259][T15480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.225277][T15480] RIP: 0033:0x7fcea618e929 [ 419.225294][T15480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.225309][T15480] RSP: 002b:00007fcea6fea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.225329][T15480] RAX: ffffffffffffffda RBX: 00007fcea63b5fa0 RCX: 00007fcea618e929 [ 419.225343][T15480] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 419.225355][T15480] RBP: 00007fcea6fea090 R08: 0000000000000000 R09: 0000000000000000 [ 419.225367][T15480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.225378][T15480] R13: 0000000000000000 R14: 00007fcea63b5fa0 R15: 00007ffe8015a108 [ 419.225408][T15480] [ 419.613803][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 419.909790][T15489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2950'. [ 419.964249][T15489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2950'. [ 420.011069][T15251] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.096551][T15452] lo speed is unknown, defaulting to 1000 [ 420.131070][ T4533] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.138275][ T4533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.212606][ T3518] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.219871][ T3518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.363282][T15520] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2952'. [ 420.653799][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 421.100901][T15251] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 421.125922][T15251] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 421.468821][T15546] Set syz1 is full, maxelem 65536 reached [ 421.656198][T15542] lo speed is unknown, defaulting to 1000 [ 421.693812][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 421.912585][T15251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.588964][T15251] veth0_vlan: entered promiscuous mode [ 422.639894][T15251] veth1_vlan: entered promiscuous mode [ 422.733809][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 422.838982][T15251] veth0_macvtap: entered promiscuous mode [ 422.936800][T15251] veth1_macvtap: entered promiscuous mode [ 423.036414][T15567] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2964'. [ 423.084077][T15569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2965'. [ 423.093188][T15569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2965'. [ 423.182713][T15251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.312778][T15573] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 423.503041][T15251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.565098][ T4533] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.574311][ T4533] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.599592][ T4533] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.621820][ T4533] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.740197][T15581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2970'. [ 423.773876][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 423.886462][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.913929][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.991270][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.019954][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.132694][T15587] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2973'. [ 424.403554][T15596] lo speed is unknown, defaulting to 1000 [ 424.539024][T15605] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2979'. [ 424.813765][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 425.072340][T15514] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.480856][T15514] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.534374][T15618] lo speed is unknown, defaulting to 1000 [ 425.656199][T15514] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.741491][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 425.751615][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 425.763412][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 425.781134][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 425.789863][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 425.853807][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 425.911106][T15514] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.370394][T15623] lo speed is unknown, defaulting to 1000 [ 426.479243][T15514] bridge_slave_1: left allmulticast mode [ 426.496518][T15514] bridge_slave_1: left promiscuous mode [ 426.513188][T15514] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.538020][T15514] bridge_slave_0: left allmulticast mode [ 426.555364][T15514] bridge_slave_0: left promiscuous mode [ 426.561155][T15514] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.900202][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 427.286389][T15514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.308387][T15514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.331663][T15514] bond0 (unregistering): Released all slaves [ 427.419990][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 427.436612][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 427.445707][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 427.475763][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 427.486870][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 427.538619][T15631] lo speed is unknown, defaulting to 1000 [ 427.863756][ T5150] Bluetooth: hci0: command tx timeout [ 427.933775][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 428.347286][T15633] lo speed is unknown, defaulting to 1000 [ 428.370108][T15623] chnl_net:caif_netlink_parms(): no params data found [ 428.388663][T15645] FAULT_INJECTION: forcing a failure. [ 428.388663][T15645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.453797][T15645] CPU: 0 UID: 0 PID: 15645 Comm: syz.1.2991 Not tainted 6.16.0-rc3-syzkaller-00901-gf22e6fdf7b33 #0 PREEMPT(full) [ 428.453824][T15645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 428.453840][T15645] Call Trace: [ 428.453848][T15645] [ 428.453857][T15645] dump_stack_lvl+0x189/0x250 [ 428.453889][T15645] ? __pfx____ratelimit+0x10/0x10 [ 428.453910][T15645] ? __pfx_dump_stack_lvl+0x10/0x10 [ 428.453936][T15645] ? __pfx__printk+0x10/0x10 [ 428.453956][T15645] ? __might_fault+0xb0/0x130 [ 428.453994][T15645] should_fail_ex+0x414/0x560 [ 428.454021][T15645] _copy_from_iter+0x1db/0x16f0 [ 428.454059][T15645] ? rcu_is_watching+0x15/0xb0 [ 428.454086][T15645] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 428.454114][T15645] ? __pfx__copy_from_iter+0x10/0x10 [ 428.454141][T15645] ? __build_skb_around+0x257/0x3e0 [ 428.454167][T15645] ? netlink_sendmsg+0x642/0xb30 [ 428.454186][T15645] ? skb_put+0x11b/0x210 [ 428.454214][T15645] netlink_sendmsg+0x6b2/0xb30 [ 428.454245][T15645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.454270][T15645] ? aa_sock_msg_perm+0x94/0x160 [ 428.454294][T15645] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 428.454316][T15645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.454338][T15645] __sock_sendmsg+0x219/0x270 [ 428.454361][T15645] ____sys_sendmsg+0x505/0x830 [ 428.454391][T15645] ? __pfx_____sys_sendmsg+0x10/0x10 [ 428.454425][T15645] ? import_iovec+0x74/0xa0 [ 428.454446][T15645] ___sys_sendmsg+0x21f/0x2a0 [ 428.454472][T15645] ? __pfx____sys_sendmsg+0x10/0x10 [ 428.454535][T15645] ? __fget_files+0x2a/0x420 [ 428.454553][T15645] ? __fget_files+0x3a0/0x420 [ 428.454583][T15645] __x64_sys_sendmsg+0x19b/0x260 [ 428.454611][T15645] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 428.454645][T15645] ? __pfx_ksys_write+0x10/0x10 [ 428.454668][T15645] ? rcu_is_watching+0x15/0xb0 [ 428.454698][T15645] ? do_syscall_64+0xbe/0x3b0 [ 428.454723][T15645] do_syscall_64+0xfa/0x3b0 [ 428.454741][T15645] ? lockdep_hardirqs_on+0x9c/0x150 [ 428.454760][T15645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.454778][T15645] ? clear_bhb_loop+0x60/0xb0 [ 428.454799][T15645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.454821][T15645] RIP: 0033:0x7f8cdff8e929 [ 428.454839][T15645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.454853][T15645] RSP: 002b:00007f8ce0d54038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 428.454874][T15645] RAX: ffffffffffffffda RBX: 00007f8ce01b5fa0 RCX: 00007f8cdff8e929 [ 428.454889][T15645] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 428.454901][T15645] RBP: 00007f8ce0d54090 R08: 0000000000000000 R09: 0000000000000000 [ 428.454913][T15645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.454924][T15645] R13: 0000000000000000 R14: 00007f8ce01b5fa0 R15: 00007ffd04296bb8 [ 428.454955][T15645] [ 428.760292][T15647] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2990'. [ 428.973734][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 429.046544][T15623] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.054124][T15623] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.061513][T15623] bridge_slave_0: entered allmulticast mode [ 429.105699][T15623] bridge_slave_0: entered promiscuous mode [ 429.139344][T15623] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.163896][T15623] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.171159][T15623] bridge_slave_1: entered allmulticast mode [ 429.235524][T15623] bridge_slave_1: entered promiscuous mode [ 429.302189][T15665] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2995'. [ 429.351849][T15623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.382600][T15623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.534037][ T5150] Bluetooth: hci4: command tx timeout [ 429.757982][T15514] hsr_slave_0: left promiscuous mode [ 429.766404][T15514] hsr_slave_1: left promiscuous mode [ 429.772606][T15514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.790809][T15514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.810011][T15514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.829281][T15514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.871254][T15514] veth1_macvtap: left promiscuous mode [ 429.878294][T15514] veth0_macvtap: left promiscuous mode [ 429.888001][T15514] veth1_vlan: left promiscuous mode [ 429.899925][T15514] veth0_vlan: left promiscuous mode [ 429.938150][ T5150] Bluetooth: hci0: command tx timeout [ 430.013821][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 430.240152][T15678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3001'. [ 430.300104][T15678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3001'. [ 430.314215][T15678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3001'. [ 430.343539][T15682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3001'. [ 430.372823][T15682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3001'. [ 431.057279][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 431.109028][T15514] team0 (unregistering): Port device team_slave_1 removed [ 431.209458][T15514] team0 (unregistering): Port device team_slave_0 removed [ 431.402171][T15708] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3014'. [ 431.613803][ T5150] Bluetooth: hci4: command tx timeout [ 431.832405][T15623] team0: Port device team_slave_0 added [ 431.859592][T15623] team0: Port device team_slave_1 added [ 432.013874][ T5150] Bluetooth: hci0: command tx timeout [ 432.037966][T15623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.050045][T15623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.093756][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 432.112720][T15623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.193339][T15623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.201054][T15623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.230058][T15623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.289197][T15712] tipc: Enabling of bearer rejected, already enabled [ 432.615606][T15623] hsr_slave_0: entered promiscuous mode [ 432.622267][T15623] hsr_slave_1: entered promiscuous mode [ 432.640267][T15623] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 432.711697][T15623] Cannot create hsr debugfs directory [ 433.133731][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 433.234074][T15725] netlink: 'syz.1.3022': attribute type 3 has an invalid length. [ 433.274146][T15725] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3022'. [ 433.413708][T15732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3023'. [ 433.502194][T15633] chnl_net:caif_netlink_parms(): no params data found [ 433.526937][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 433.536472][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 433.544316][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 433.553537][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 433.563255][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 433.693978][ T5150] Bluetooth: hci4: command tx timeout [ 433.771538][T15733] lo speed is unknown, defaulting to 1000 [ 433.851670][T15745] __nla_validate_parse: 1 callbacks suppressed [ 433.851690][T15745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3027'. [ 434.041886][T15633] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.059332][T15633] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.077135][T15633] bridge_slave_0: entered allmulticast mode [ 434.089591][T15633] bridge_slave_0: entered promiscuous mode [ 434.099624][ T5150] Bluetooth: hci0: command tx timeout [ 434.128817][T15633] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.136142][T15633] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.151337][T15633] bridge_slave_1: entered allmulticast mode [ 434.173740][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 434.188701][T15633] bridge_slave_1: entered promiscuous mode [ 434.275634][T15755] netlink: 'syz.1.3030': attribute type 1 has an invalid length. [ 434.289209][T15755] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3030'. [ 434.365815][T15633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.392390][T15633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.521064][T15765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3033'. [ 434.582208][T15633] team0: Port device team_slave_0 added [ 434.597578][T15765] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3033'. [ 434.627204][T15633] team0: Port device team_slave_1 added [ 434.654648][T15765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3033'. [ 434.692659][T15765] netlink: 31 bytes leftover after parsing attributes in process `syz.3.3033'. [ 434.705474][T15768] FAULT_INJECTION: forcing a failure. [ 434.705474][T15768] name failslab, interval 1, probability 0, space 0, times 0 [ 434.713992][T15765] netlink: 'syz.3.3033': attribute type 3 has an invalid length. [ 434.731736][T15765] netlink: 'syz.3.3033': attribute type 2 has an invalid length. [ 434.731760][T15768] CPU: 1 UID: 0 PID: 15768 Comm: syz.1.3034 Not tainted 6.16.0-rc3-syzkaller-00901-gf22e6fdf7b33 #0 PREEMPT(full) [ 434.731781][T15768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 434.731791][T15768] Call Trace: [ 434.731800][T15768] [ 434.731808][T15768] dump_stack_lvl+0x189/0x250 [ 434.731839][T15768] ? __pfx____ratelimit+0x10/0x10 [ 434.731860][T15768] ? __pfx_dump_stack_lvl+0x10/0x10 [ 434.731886][T15768] ? __pfx__printk+0x10/0x10 [ 434.731911][T15768] ? __pfx___might_resched+0x10/0x10 [ 434.731942][T15768] should_fail_ex+0x414/0x560 [ 434.731970][T15768] should_failslab+0xa8/0x100 [ 434.731990][T15768] __kmalloc_noprof+0xcb/0x4f0 [ 434.732006][T15768] ? __kasan_kmalloc+0x93/0xb0 [ 434.732020][T15768] ? nla_strdup+0x9d/0x140 [ 434.732048][T15768] nla_strdup+0x9d/0x140 [ 434.732072][T15768] nf_tables_newchain+0x1998/0x2900 [ 434.732114][T15768] ? __pfx_nf_tables_newchain+0x10/0x10 [ 434.732172][T15768] ? nfnl_pernet+0x23/0x240 [ 434.732208][T15768] ? __nla_parse+0x40/0x60 [ 434.732235][T15768] nfnetlink_rcv+0x1132/0x2520 [ 434.732293][T15768] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 434.732331][T15768] ? __lock_acquire+0xab9/0xd20 [ 434.732400][T15768] ? netlink_deliver_tap+0x2e/0x1b0 [ 434.732427][T15768] ? netlink_deliver_tap+0x2e/0x1b0 [ 434.732453][T15768] netlink_unicast+0x75b/0x8d0 [ 434.732483][T15768] netlink_sendmsg+0x805/0xb30 [ 434.732514][T15768] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.732538][T15768] ? aa_sock_msg_perm+0x94/0x160 [ 434.732562][T15768] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 434.732583][T15768] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.732605][T15768] __sock_sendmsg+0x219/0x270 [ 434.732628][T15768] ____sys_sendmsg+0x505/0x830 [ 434.732657][T15768] ? __pfx_____sys_sendmsg+0x10/0x10 [ 434.732690][T15768] ? import_iovec+0x74/0xa0 [ 434.732712][T15768] ___sys_sendmsg+0x21f/0x2a0 [ 434.732738][T15768] ? __pfx____sys_sendmsg+0x10/0x10 [ 434.732799][T15768] ? __fget_files+0x2a/0x420 [ 434.732817][T15768] ? __fget_files+0x3a0/0x420 [ 434.732847][T15768] __x64_sys_sendmsg+0x19b/0x260 [ 434.732874][T15768] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 434.732907][T15768] ? __pfx_ksys_write+0x10/0x10 [ 434.732930][T15768] ? rcu_is_watching+0x15/0xb0 [ 434.732960][T15768] ? do_syscall_64+0xbe/0x3b0 [ 434.732984][T15768] do_syscall_64+0xfa/0x3b0 [ 434.733003][T15768] ? lockdep_hardirqs_on+0x9c/0x150 [ 434.733023][T15768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.733041][T15768] ? clear_bhb_loop+0x60/0xb0 [ 434.733062][T15768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.733079][T15768] RIP: 0033:0x7f8cdff8e929 [ 434.733096][T15768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.733112][T15768] RSP: 002b:00007f8ce0d54038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 434.733132][T15768] RAX: ffffffffffffffda RBX: 00007f8ce01b5fa0 RCX: 00007f8cdff8e929 [ 434.733145][T15768] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 434.733156][T15768] RBP: 00007f8ce0d54090 R08: 0000000000000000 R09: 0000000000000000 [ 434.733167][T15768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.733179][T15768] R13: 0000000000000000 R14: 00007f8ce01b5fa0 R15: 00007ffd04296bb8 [ 434.733208][T15768] [ 435.066197][T15765] netlink: 31 bytes leftover after parsing attributes in process `syz.3.3033'. [ 435.132827][T15633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.146374][T15633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.179599][T15633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.213734][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 435.295625][T15633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.302599][T15633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.323075][T15773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3036'. [ 435.341036][T15633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.377641][T15773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3036'. [ 435.619666][ T5150] Bluetooth: hci1: command tx timeout [ 435.777060][ T5150] Bluetooth: hci4: command tx timeout [ 436.015855][ T44] dvmrp1 (unregistering): left allmulticast mode [ 436.060156][T15788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3041'. [ 436.094081][ T73] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 436.253811][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 436.414387][T15796] FAULT_INJECTION: forcing a failure. [ 436.414387][T15796] name failslab, interval 1, probability 0, space 0, times 0 [ 436.444311][T15796] CPU: 1 UID: 0 PID: 15796 Comm: syz.1.3045 Not tainted 6.16.0-rc3-syzkaller-00901-gf22e6fdf7b33 #0 PREEMPT(full) [ 436.444339][T15796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 436.444351][T15796] Call Trace: [ 436.444360][T15796] [ 436.444368][T15796] dump_stack_lvl+0x189/0x250 [ 436.444400][T15796] ? __pfx____ratelimit+0x10/0x10 [ 436.444422][T15796] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.444447][T15796] ? __pfx__printk+0x10/0x10 [ 436.444474][T15796] ? __pfx___might_resched+0x10/0x10 [ 436.444505][T15796] should_fail_ex+0x414/0x560 [ 436.444532][T15796] ? nf_tables_newchain+0x1b7e/0x2900 [ 436.444554][T15796] should_failslab+0xa8/0x100 [ 436.444576][T15796] __kvmalloc_node_noprof+0x161/0x5f0 [ 436.444596][T15796] ? nf_tables_newchain+0x1b7e/0x2900 [ 436.444625][T15796] nf_tables_newchain+0x1b7e/0x2900 [ 436.444667][T15796] ? __pfx_nf_tables_newchain+0x10/0x10 [ 436.444724][T15796] ? nfnl_pernet+0x23/0x240 [ 436.444762][T15796] ? __nla_parse+0x40/0x60 [ 436.444791][T15796] nfnetlink_rcv+0x1132/0x2520 [ 436.444850][T15796] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 436.444888][T15796] ? __lock_acquire+0xab9/0xd20 [ 436.444960][T15796] ? netlink_deliver_tap+0x2e/0x1b0 [ 436.444980][T15796] ? netlink_deliver_tap+0x2e/0x1b0 [ 436.445006][T15796] netlink_unicast+0x75b/0x8d0 [ 436.445038][T15796] netlink_sendmsg+0x805/0xb30 [ 436.445070][T15796] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.445095][T15796] ? aa_sock_msg_perm+0x94/0x160 [ 436.445119][T15796] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 436.445141][T15796] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.445163][T15796] __sock_sendmsg+0x219/0x270 [ 436.445187][T15796] ____sys_sendmsg+0x505/0x830 [ 436.445217][T15796] ? __pfx_____sys_sendmsg+0x10/0x10 [ 436.445252][T15796] ? import_iovec+0x74/0xa0 [ 436.445274][T15796] ___sys_sendmsg+0x21f/0x2a0 [ 436.445307][T15796] ? __pfx____sys_sendmsg+0x10/0x10 [ 436.445371][T15796] ? __fget_files+0x2a/0x420 [ 436.445391][T15796] ? __fget_files+0x3a0/0x420 [ 436.445421][T15796] __x64_sys_sendmsg+0x19b/0x260 [ 436.445449][T15796] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 436.445483][T15796] ? __pfx_ksys_write+0x10/0x10 [ 436.445506][T15796] ? rcu_is_watching+0x15/0xb0 [ 436.445537][T15796] ? do_syscall_64+0xbe/0x3b0 [ 436.445562][T15796] do_syscall_64+0xfa/0x3b0 [ 436.445580][T15796] ? lockdep_hardirqs_on+0x9c/0x150 [ 436.445600][T15796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.445617][T15796] ? clear_bhb_loop+0x60/0xb0 [ 436.445640][T15796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.445657][T15796] RIP: 0033:0x7f8cdff8e929 [ 436.445674][T15796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.445689][T15796] RSP: 002b:00007f8ce0d54038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 436.445709][T15796] RAX: ffffffffffffffda RBX: 00007f8ce01b5fa0 RCX: 00007f8cdff8e929 [ 436.445723][T15796] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 436.445735][T15796] RBP: 00007f8ce0d54090 R08: 0000000000000000 R09: 0000000000000000 [ 436.445747][T15796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.445758][T15796] R13: 0000000000000000 R14: 00007f8ce01b5fa0 R15: 00007ffd04296bb8 [ 436.445789][T15796] [ 437.293869][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 437.671344][ T44] bond0 (unregistering): left promiscuous mode [ 437.682236][ T44] bond0 (unregistering): Released all slaves [ 437.694173][ T5150] Bluetooth: hci1: command tx timeout [ 437.847042][ T44] bond1 (unregistering): Released all slaves [ 437.934862][T15794] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 438.082766][ T44] : left promiscuous mode [ 438.208229][T15733] chnl_net:caif_netlink_parms(): no params data found [ 438.247517][ T44] tipc: Disabling bearer [ 438.265102][ T44] tipc: Left network mode [ 438.278955][T15633] hsr_slave_0: entered promiscuous mode [ 438.302009][T15633] hsr_slave_1: entered promiscuous mode [ 438.325754][T15633] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 438.333742][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 438.350604][T15633] Cannot create hsr debugfs directory [ 438.429258][T15804] veth1_to_bond: entered allmulticast mode [ 438.609456][T15805] veth1_to_bond (unregistering): left allmulticast mode [ 439.094873][T15733] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.124205][T15733] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.148398][T15733] bridge_slave_0: entered allmulticast mode [ 439.170104][T15733] bridge_slave_0: entered promiscuous mode [ 439.241270][T15825] __nla_validate_parse: 5 callbacks suppressed [ 439.241290][T15825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3051'. [ 439.262503][T15733] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.280518][T15733] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.294283][T15733] bridge_slave_1: entered allmulticast mode [ 439.302324][T15733] bridge_slave_1: entered promiscuous mode [ 439.373735][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 439.418526][T15830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3053'. [ 439.491862][T15733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.506389][T15830] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3053'. [ 439.514125][T15733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.524666][T15830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3053'. [ 439.524696][T15830] netlink: 31 bytes leftover after parsing attributes in process `syz.3.3053'. [ 439.524712][T15830] netlink: 'syz.3.3053': attribute type 3 has an invalid length. [ 439.524726][T15830] netlink: 'syz.3.3053': attribute type 2 has an invalid length. [ 439.524740][T15830] netlink: 31 bytes leftover after parsing attributes in process `syz.3.3053'. [ 439.740966][T15733] team0: Port device team_slave_0 added [ 439.774397][ T5150] Bluetooth: hci1: command tx timeout [ 439.823540][T15623] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 439.852791][T15733] team0: Port device team_slave_1 added [ 439.903298][T15834] netlink: 'syz.3.3055': attribute type 11 has an invalid length. [ 439.931714][T15623] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 439.943896][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.079956][T15623] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 440.123361][T15623] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 440.222066][T15733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.234093][T15733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.288133][T15842] x_tables: duplicate underflow at hook 1 [ 440.297839][T15733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.387643][T15733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.397914][T15733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.424080][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 440.444728][T15733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.640373][T15733] hsr_slave_0: entered promiscuous mode [ 440.674911][T15733] hsr_slave_1: entered promiscuous mode [ 440.700503][T15733] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 440.723593][T15733] Cannot create hsr debugfs directory [ 440.986848][T15845] lo speed is unknown, defaulting to 1000 [ 441.076913][T15859] Set syz1 is full, maxelem 65536 reached [ 441.416825][ T44] batadv_slave_0: left promiscuous mode [ 441.452138][ T44] hsr_slave_0: left promiscuous mode [ 441.464370][ T44] hsr_slave_1: left promiscuous mode [ 441.464450][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 441.893960][ T5150] Bluetooth: hci1: command tx timeout [ 442.493900][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 443.202668][T15865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3064'. [ 443.543720][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 444.100722][T15633] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 444.132419][T15733] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 512 - 0 [ 444.156504][T15733] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 444.208168][T15633] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 444.264545][T15633] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 444.349104][T15733] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 512 - 0 [ 444.363452][T15733] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 444.421867][T15633] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 444.569823][T15733] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 512 - 0 [ 444.583721][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 444.605256][T15733] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 444.720452][ T44] IPVS: stop unused estimator thread 0... [ 444.738570][T15733] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 512 - 0 [ 444.759125][T15733] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 444.782702][T15623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.866123][T15623] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.945723][T15519] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.952872][T15519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.985554][T15519] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.992713][T15519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.024164][T15879] lo speed is unknown, defaulting to 1000 [ 445.350612][T15733] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 445.453311][T15733] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 445.567562][T15733] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 445.613774][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 445.644373][T15733] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 445.760364][T15633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.997902][T15633] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.097424][T15519] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.104598][T15519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.161338][T15519] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.168524][T15519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.283509][T15899] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3070'. [ 446.416881][T15623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.498555][T15903] netlink: 'syz.3.3072': attribute type 5 has an invalid length. [ 446.638045][T15733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.653789][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 446.757016][T15623] veth0_vlan: entered promiscuous mode [ 446.789919][T15623] veth1_vlan: entered promiscuous mode [ 446.825981][T15908] sctp: [Deprecated]: syz.3.3073 (pid 15908) Use of struct sctp_assoc_value in delayed_ack socket option. [ 446.825981][T15908] Use struct sctp_sack_info instead [ 446.828046][T15733] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.933341][T15519] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.940527][T15519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.979361][T15910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3073'. [ 446.989159][T15519] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.996329][T15519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.150783][T15623] veth0_macvtap: entered promiscuous mode [ 447.180523][T15623] veth1_macvtap: entered promiscuous mode [ 447.256689][T15733] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 447.291225][T15623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.308478][T15633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.329638][T15623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.362208][ T73] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.396156][ T73] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.408017][ T73] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.456919][ T73] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.579981][T15633] veth0_vlan: entered promiscuous mode [ 447.590093][T15920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3076'. [ 447.622610][T15633] veth1_vlan: entered promiscuous mode [ 447.693849][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 447.707516][T15920] 8021q: adding VLAN 0 to HW filter on device team1 [ 447.803934][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.811770][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.950012][ T4533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.992049][ T4533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.031516][T15733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.052256][T15633] veth0_macvtap: entered promiscuous mode [ 448.138430][T15633] veth1_macvtap: entered promiscuous mode [ 448.208056][T15633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.216400][T15931] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3079'. [ 448.226024][T15931] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3079'. [ 448.300622][T15935] netlink: zone id is out of range [ 448.319810][T15931] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 448.336260][T15935] netlink: zone id is out of range [ 448.346004][T15935] netlink: zone id is out of range [ 448.357625][T15935] netlink: zone id is out of range [ 448.373075][T15633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.426883][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.436349][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.484004][T15519] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.556581][T15931] xt_CT: No such helper "snmp" [ 448.567762][T15519] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.578662][T15941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3080'. [ 448.733795][ C0] net_ratelimit: 168 callbacks suppressed [ 448.733814][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 448.900570][ T4533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.958501][ T4533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.183194][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.212582][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.385194][T15961] macvlan3: entered promiscuous mode [ 449.420228][T15961] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 449.773887][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 449.892333][T15973] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3089'. [ 449.918484][T15973] netlink: 'syz.3.3089': attribute type 1 has an invalid length. [ 450.201674][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.251577][T15733] veth0_vlan: entered promiscuous mode [ 450.823793][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 450.894568][ T5150] Bluetooth: hci1: command tx timeout [ 451.853737][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 452.479698][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 452.491742][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 452.518499][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 452.535088][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 452.565293][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 452.671495][T15995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3093'. [ 452.752104][T15997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3094'. [ 452.893841][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 453.381698][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.440320][T15733] veth1_vlan: entered promiscuous mode [ 453.562349][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.628118][T15992] lo speed is unknown, defaulting to 1000 [ 453.687484][T15733] veth0_macvtap: entered promiscuous mode [ 453.735939][T15733] veth1_macvtap: entered promiscuous mode [ 453.782201][T16013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3101'. [ 453.820127][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.922579][T15733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.934164][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 453.945733][T16013] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3101'. [ 453.954911][T16013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3101'. [ 453.969026][T15733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.984824][T16013] netlink: 31 bytes leftover after parsing attributes in process `syz.3.3101'. [ 454.027708][T16013] netlink: 'syz.3.3101': attribute type 3 has an invalid length. [ 454.038733][ T73] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.071584][ T73] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.083876][T16013] netlink: 'syz.3.3101': attribute type 2 has an invalid length. [ 454.091620][T16013] netlink: 31 bytes leftover after parsing attributes in process `syz.3.3101'. [ 454.121452][T16022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3104'. [ 454.139981][ T73] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.173842][ T73] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.656600][ T5837] Bluetooth: hci4: command tx timeout [ 454.711654][ T13] bridge_slave_1: left allmulticast mode [ 454.718656][ T13] bridge_slave_1: left promiscuous mode [ 454.745222][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.799910][ T13] bridge_slave_0: left allmulticast mode [ 454.824918][ T13] bridge_slave_0: left promiscuous mode [ 454.839629][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.973814][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 455.313170][T16041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3110'. [ 455.315450][T16040] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3111'. [ 455.788360][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 455.802683][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 455.817639][ T13] bond0 (unregistering): Released all slaves [ 455.921871][ T4533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.991179][ T4533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.013939][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 456.032664][T16040] lo speed is unknown, defaulting to 1000 [ 456.339941][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.349768][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.736673][ T5837] Bluetooth: hci4: command tx timeout [ 456.770976][T16063] syzkaller0: entered promiscuous mode [ 456.778107][T16063] syzkaller0: entered allmulticast mode [ 456.974925][T16071] netlink: 'syz.3.3118': attribute type 11 has an invalid length. [ 457.063715][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 457.931523][ T5150] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 457.946939][ T5150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 457.962213][ T5150] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 457.977069][ T5150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 457.985849][ T5150] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 458.103732][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 458.824812][ T5837] Bluetooth: hci4: command tx timeout [ 459.146010][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 459.558977][T15992] chnl_net:caif_netlink_parms(): no params data found [ 459.930894][T16086] __nla_validate_parse: 3 callbacks suppressed [ 459.930912][T16086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3121'. [ 460.011482][T16077] lo speed is unknown, defaulting to 1000 [ 460.014849][ T5837] Bluetooth: hci1: command tx timeout [ 460.064062][ T13] hsr_slave_0: left promiscuous mode [ 460.080542][ T13] hsr_slave_1: left promiscuous mode [ 460.123222][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.152024][T16087] "syz.1.3121" (16087) uses obsolete ecb(arc4) skcipher [ 460.155886][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.173716][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 460.220010][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.230747][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.273479][ T13] veth1_macvtap: left promiscuous mode [ 460.285283][ T13] veth0_macvtap: left promiscuous mode [ 460.291569][ T13] veth1_vlan: left promiscuous mode [ 460.298141][ T13] veth0_vlan: left promiscuous mode [ 460.899545][ T5837] Bluetooth: hci4: command tx timeout [ 461.028651][ T13] team0 (unregistering): Port device team_slave_1 removed [ 461.080964][ T13] team0 (unregistering): Port device team_slave_0 removed [ 461.223729][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 462.030986][T15992] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.051434][T15992] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.080770][T15992] bridge_slave_0: entered allmulticast mode [ 462.095674][ T5837] Bluetooth: hci1: command tx timeout [ 462.133256][T15992] bridge_slave_0: entered promiscuous mode [ 462.142962][T15992] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.151733][T15992] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.160209][T15992] bridge_slave_1: entered allmulticast mode [ 462.168744][T15992] bridge_slave_1: entered promiscuous mode [ 462.253718][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 462.397045][T15992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.440200][T15992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.589124][T15992] team0: Port device team_slave_0 added [ 462.680008][T15992] team0: Port device team_slave_1 added [ 462.760001][T16123] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3130'. [ 463.062295][T16132] Cannot find add_set index 0 as target [ 463.120463][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.174948][T15992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.181916][T15992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.251600][T15992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.293852][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 463.691811][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.731360][T15992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.751644][T15992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.813728][T15992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.912934][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.971526][T16156] tun0: tun_chr_ioctl cmd 1074025675 [ 464.019104][T16156] tun0: persist disabled [ 464.058858][T16161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3140'. [ 464.128123][T16152] tun0: tun_chr_ioctl cmd 1074025675 [ 464.133556][T16152] tun0: persist enabled [ 464.148264][T16077] chnl_net:caif_netlink_parms(): no params data found [ 464.176389][ T5837] Bluetooth: hci1: command tx timeout [ 464.228566][T16161] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3140'. [ 464.278830][T16161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3140'. [ 464.307146][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.333784][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 464.340784][T16161] netlink: 31 bytes leftover after parsing attributes in process `syz.0.3140'. [ 464.409157][T16161] netlink: 'syz.0.3140': attribute type 3 has an invalid length. [ 464.420395][T15992] hsr_slave_0: entered promiscuous mode [ 464.437473][T15992] hsr_slave_1: entered promiscuous mode [ 464.455067][T16161] netlink: 'syz.0.3140': attribute type 2 has an invalid length. [ 464.463254][T15992] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 464.484487][T15992] Cannot create hsr debugfs directory [ 464.492321][T16161] netlink: 31 bytes leftover after parsing attributes in process `syz.0.3140'. [ 464.808766][T16184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3146'. [ 465.044805][T16077] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.066346][T16077] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.097476][T16077] bridge_slave_0: entered allmulticast mode [ 465.121583][T16077] bridge_slave_0: entered promiscuous mode [ 465.151912][T16194] erspan0: left promiscuous mode [ 465.162259][T16194] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 465.214471][T16077] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.222972][T16197] xt_CT: No such helper "snmp" [ 465.223357][T16077] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.242232][T16077] bridge_slave_1: entered allmulticast mode [ 465.251055][T16198] xt_CT: No such helper "snmp" [ 465.278476][T16077] bridge_slave_1: entered promiscuous mode [ 465.361986][T16185] lo speed is unknown, defaulting to 1000 [ 465.373791][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 465.452012][T16203] netlink: 'syz.0.3150': attribute type 13 has an invalid length. [ 465.460621][T16203] netlink: 'syz.0.3150': attribute type 17 has an invalid length. [ 465.540874][T16077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.774179][T16207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.868761][T16203] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 465.932746][T16207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.969504][ T13] bridge_slave_1: left allmulticast mode [ 465.981127][ T13] bridge_slave_1: left promiscuous mode [ 465.997348][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.012111][ T13] bridge_slave_0: left allmulticast mode [ 466.033803][ T13] bridge_slave_0: left promiscuous mode [ 466.039630][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.050022][T16207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.254199][ T5837] Bluetooth: hci1: command tx timeout [ 466.417303][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 466.713384][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.730843][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.750050][ T13] bond0 (unregistering): Released all slaves [ 466.775219][T16077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.981507][T16204] lo speed is unknown, defaulting to 1000 [ 467.138744][T16077] team0: Port device team_slave_0 added [ 467.157501][T16077] team0: Port device team_slave_1 added [ 467.230592][T16225] veth1_to_batadv: mtu greater than device maximum [ 467.273319][T16225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3157'. [ 467.463886][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 467.489501][T16225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3157'. [ 467.535071][T16077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.549994][T16077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.585248][T16077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.605815][T16077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.612912][T16077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.639774][T16077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.786695][T16229] xt_hashlimit: size too large, truncated to 1048576 [ 468.142652][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 468.249341][T16077] hsr_slave_0: entered promiscuous mode [ 468.263418][T16077] hsr_slave_1: entered promiscuous mode [ 468.280176][T16077] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 468.287929][T16077] Cannot create hsr debugfs directory [ 468.362795][ T13] hsr_slave_0: left promiscuous mode [ 468.372946][ T13] hsr_slave_1: left promiscuous mode [ 468.381541][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.394188][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.404540][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.414289][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.458211][ T13] veth1_macvtap: left promiscuous mode [ 468.466819][ T13] veth0_macvtap: left promiscuous mode [ 468.472480][ T13] veth1_vlan: left promiscuous mode [ 468.480342][ T13] veth0_vlan: left promiscuous mode [ 468.493717][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 469.358575][ T13] team0 (unregistering): Port device team_slave_1 removed [ 469.440905][ T13] team0 (unregistering): Port device team_slave_0 removed [ 469.534779][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 470.337552][ T5150] Bluetooth: hci1: command 0x0405 tx timeout [ 470.563106][T15992] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 470.573709][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 470.618861][T15992] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 470.640068][T15992] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 470.665865][T15992] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 471.011956][T16253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3163'. [ 471.099046][T15992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.159041][T15992] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.199859][ T3518] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.207032][ T3518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.277674][ T3518] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.284880][ T3518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.504141][T16272] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3170'. [ 471.613783][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 471.814520][T16077] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 471.878762][T16077] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 471.948315][T16077] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 472.005585][T16292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3177'. [ 472.036596][T16077] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 472.098774][T16294] veth15: entered promiscuous mode [ 472.382736][T15992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.645152][T16077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.653790][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 472.671956][T15992] veth0_vlan: entered promiscuous mode [ 472.696145][T15992] veth1_vlan: entered promiscuous mode [ 472.755840][T16077] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.804787][T16322] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3184'. [ 472.824069][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.831216][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.932935][ T3518] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.940187][ T3518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.004521][T15992] veth0_macvtap: entered promiscuous mode [ 473.072272][T15992] veth1_macvtap: entered promiscuous mode [ 473.090079][T16329] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3187'. [ 473.200051][T15992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.267661][T15992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.348017][ T73] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.452536][ T73] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.476481][ T73] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.529381][ T73] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.566098][T16341] raw_sendmsg: syz.1.3190 forgot to set AF_INET. Fix it! [ 473.693733][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 473.809682][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.857363][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.949171][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.975360][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.987248][T16077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.010199][T16351] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 474.221318][T16366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3197'. [ 474.478399][T16375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3200'. [ 474.523323][T16375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3200'. [ 474.550225][T16375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3200'. [ 474.587070][T16380] netlink: 'syz.3.3201': attribute type 7 has an invalid length. [ 474.613243][T16381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3200'. [ 474.658159][T16381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3200'. [ 474.686124][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.733709][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 474.863154][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.003180][T16077] veth0_vlan: entered promiscuous mode [ 475.038604][T16077] veth1_vlan: entered promiscuous mode [ 475.076559][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.141643][T16077] veth0_macvtap: entered promiscuous mode [ 475.161390][T16077] veth1_macvtap: entered promiscuous mode [ 475.188252][T16077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.229815][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.257330][T16077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.272324][T15519] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.299364][ T44] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.316122][ T44] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.352555][ T44] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.481034][ T13] bridge_slave_1: left allmulticast mode [ 475.487950][ T13] bridge_slave_1: left promiscuous mode [ 475.494191][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.506469][ T13] bridge_slave_0: left allmulticast mode [ 475.512126][ T13] bridge_slave_0: left promiscuous mode [ 475.518818][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.775044][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 475.954563][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.970898][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.981551][ T13] bond0 (unregistering): Released all slaves [ 476.006273][T15519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.033808][T15519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.160415][T15514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.172497][T15514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.543758][ T13] hsr_slave_0: left promiscuous mode [ 476.560731][ T13] hsr_slave_1: left promiscuous mode [ 476.579699][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.587956][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.609598][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.617810][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.710034][T16388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3204'. [ 476.731838][ T13] veth1_macvtap: left promiscuous mode [ 476.753908][ T13] veth0_macvtap: left promiscuous mode [ 476.782602][ T13] veth1_vlan: left promiscuous mode [ 476.795617][ T13] veth0_vlan: left promiscuous mode [ 476.813738][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 477.482081][ T5150] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 477.493242][ T5150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 477.502007][ T5150] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 477.511845][ T5150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 477.521816][ T5150] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 477.732216][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 477.752478][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 477.766699][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 477.786064][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 477.805942][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 477.856613][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 478.047257][ T13] team0 (unregistering): Port device team_slave_1 removed [ 478.092794][ T13] team0 (unregistering): Port device team_slave_0 removed [ 478.770684][T16407] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3206'. [ 478.851123][T16404] lo speed is unknown, defaulting to 1000 [ 478.893705][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 478.963931][T16415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3209'. [ 478.996257][T16416] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3208'. [ 479.049221][T16416] Bluetooth: MGMT ver 1.23 [ 479.070206][T16417] vlan1: entered allmulticast mode [ 479.083811][T16417] veth0_vlan: entered allmulticast mode [ 479.291890][T16427] netlink: 14212 bytes leftover after parsing attributes in process `syz.0.3211'. [ 479.393519][T16432] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3212'. [ 479.426034][T16432] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3212'. [ 479.541004][T16435] netlink: zone id is out of range [ 479.547767][T16435] netlink: zone id is out of range [ 479.553078][T16435] netlink: zone id is out of range [ 479.570297][T16402] lo speed is unknown, defaulting to 1000 [ 479.587453][T16435] netlink: zone id is out of range [ 479.606487][T16435] netlink: zone id is out of range [ 479.616065][ T5150] Bluetooth: hci1: command tx timeout [ 479.640081][T16438] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input22 [ 479.695081][T16440] netlink: 'syz.3.3214': attribute type 4 has an invalid length. [ 479.727979][T16440] netlink: 'syz.3.3214': attribute type 2 has an invalid length. [ 479.818313][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.856159][ T5150] Bluetooth: hci4: command tx timeout [ 479.933713][ C0] net_ratelimit: 18 callbacks suppressed [ 479.933732][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 480.085992][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.116383][T16455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3219'. [ 480.330741][T16463] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3223'. [ 480.344748][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.473563][T16463] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3223'. [ 480.505639][T16463] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3223'. [ 480.540872][T16463] netlink: 'syz.3.3223': attribute type 3 has an invalid length. [ 480.590337][T16463] netlink: 'syz.3.3223': attribute type 2 has an invalid length. [ 480.619569][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.790245][T16478] netlink: 'syz.1.3228': attribute type 1 has an invalid length. [ 480.980874][T16478] bond4: entered promiscuous mode [ 480.983714][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 480.990703][T16478] 8021q: adding VLAN 0 to HW filter on device bond4 [ 481.122204][T16492] netlink: 'syz.1.3232': attribute type 1 has an invalid length. [ 481.369279][T16496] bond0: entered promiscuous mode [ 481.381196][T16496] bond_slave_0: entered promiscuous mode [ 481.388269][T16496] bond_slave_1: entered promiscuous mode [ 481.399899][T16496] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 481.409853][T16496] bond0: left promiscuous mode [ 481.424310][T16496] bond_slave_0: left promiscuous mode [ 481.430027][T16496] bond_slave_1: left promiscuous mode [ 481.500893][T16404] chnl_net:caif_netlink_parms(): no params data found [ 481.649843][T16402] chnl_net:caif_netlink_parms(): no params data found [ 481.693794][ T5150] Bluetooth: hci1: command tx timeout [ 481.864864][ T13] bridge_slave_1: left allmulticast mode [ 481.870540][ T13] bridge_slave_1: left promiscuous mode [ 481.898440][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.919869][ T13] bridge_slave_0: left allmulticast mode [ 481.937257][ T5150] Bluetooth: hci4: command tx timeout [ 481.950786][ T13] bridge_slave_0: left promiscuous mode [ 481.969073][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.023730][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 482.649743][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 482.669677][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 482.690633][ T13] bond0 (unregistering): Released all slaves [ 483.063718][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 483.338818][T16404] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.366519][T16404] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.375918][T16404] bridge_slave_0: entered allmulticast mode [ 483.389155][T16404] bridge_slave_0: entered promiscuous mode [ 483.430847][T16567] netlink: 'syz.3.3252': attribute type 10 has an invalid length. [ 483.499090][T16570] netlink: 'syz.3.3252': attribute type 10 has an invalid length. [ 483.511955][T16404] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.534049][T16404] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.541472][T16404] bridge_slave_1: entered allmulticast mode [ 483.550891][T16404] bridge_slave_1: entered promiscuous mode [ 483.558805][T16402] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.567627][T16402] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.577880][T16402] bridge_slave_0: entered allmulticast mode [ 483.587215][T16402] bridge_slave_0: entered promiscuous mode [ 483.596270][T16402] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.607020][T16402] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.619054][T16402] bridge_slave_1: entered allmulticast mode [ 483.672615][T16402] bridge_slave_1: entered promiscuous mode [ 483.694925][T16570] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.701761][T16570] batman_adv: batadv0: Interface activated: team0 [ 483.733881][T16570] batman_adv: batadv0: Interface deactivated: team0 [ 483.749413][T16570] batman_adv: batadv0: Removing interface: team0 [ 483.763298][T16570] bridge0: port 1(team0) entered blocking state [ 483.774441][ T5150] Bluetooth: hci1: command tx timeout [ 483.777452][T16570] bridge0: port 1(team0) entered disabled state [ 483.804350][T16570] team0: entered allmulticast mode [ 483.835016][T16583] netlink: 'syz.1.3256': attribute type 13 has an invalid length. [ 483.987926][ T13] hsr_slave_0: left promiscuous mode [ 483.998917][ T13] hsr_slave_1: left promiscuous mode [ 484.006599][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.015200][ T5150] Bluetooth: hci4: command tx timeout [ 484.020871][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.032127][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.039848][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.058056][T16591] __nla_validate_parse: 11 callbacks suppressed [ 484.058074][T16591] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.3258'. [ 484.065236][ T13] veth1_macvtap: left promiscuous mode [ 484.080215][ T13] veth0_macvtap: left promiscuous mode [ 484.086053][ T13] veth1_vlan: left promiscuous mode [ 484.091426][ T13] veth0_vlan: left promiscuous mode [ 484.096685][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 484.508838][ T13] team0 (unregistering): Port device team_slave_1 removed [ 484.548965][ T13] team0 (unregistering): Port device team_slave_0 removed [ 485.138721][T16576] syzkaller0: entered promiscuous mode [ 485.144302][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 485.153948][T16576] syzkaller0: entered allmulticast mode [ 485.166892][T16404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.182775][T16402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.306125][T16595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3260'. [ 485.315997][T16595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3260'. [ 485.855006][ T5150] Bluetooth: hci1: command tx timeout [ 486.093822][ T5150] Bluetooth: hci4: command tx timeout [ 486.176267][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 486.833036][ T36] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 486.841639][ T36] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 486.852319][T16404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.888653][T16402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.948647][ T36] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 486.976738][T16611] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3266'. [ 487.061016][ T36] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 487.081520][T16404] team0: Port device team_slave_0 added [ 487.103011][T16404] team0: Port device team_slave_1 added [ 487.111221][T16402] team0: Port device team_slave_0 added [ 487.213712][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 487.247152][T16402] team0: Port device team_slave_1 added [ 487.254228][T16619] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3269'. [ 487.270379][T16404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.272275][T16622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3271'. [ 487.283086][T16404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.315751][T16404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.346023][T16404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.363226][T16404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.405483][T16404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.405568][T16624] can: request_module (can-proto-3) failed. [ 487.459035][T16618] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3269'. [ 487.620962][T16637] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3275'. [ 487.632659][T16402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.644047][T16402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.692058][T16641] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3275'. [ 487.718022][T16402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.770928][T16404] hsr_slave_0: entered promiscuous mode [ 487.777994][T16404] hsr_slave_1: entered promiscuous mode [ 487.784872][T16404] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 487.792600][T16404] Cannot create hsr debugfs directory [ 487.804860][T16402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.820947][T16402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.856991][T16402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.911533][T16647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3279'. [ 487.957477][T16645] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 488.253722][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 488.272249][T16402] hsr_slave_0: entered promiscuous mode [ 488.288015][T16402] hsr_slave_1: entered promiscuous mode [ 488.302438][T16402] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 488.320414][T16402] Cannot create hsr debugfs directory [ 488.486495][T16660] lo speed is unknown, defaulting to 1000 [ 489.106262][T16686] __nla_validate_parse: 5 callbacks suppressed [ 489.106281][T16686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3294'. [ 489.129646][T16686] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3294'. [ 489.293706][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 489.458520][T16696] netlink: 'syz.3.3298': attribute type 9 has an invalid length. [ 489.466756][T16696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3298'. [ 489.510232][T16696] macvlan3: entered promiscuous mode [ 489.524209][T16696] hsr0: entered promiscuous mode [ 489.529375][T16696] macvlan3: entered allmulticast mode [ 489.554221][T16696] hsr0: entered allmulticast mode [ 489.583830][T16696] hsr_slave_0: entered allmulticast mode [ 489.594494][T16696] hsr_slave_1: entered allmulticast mode [ 489.686776][T16705] batadv0: entered promiscuous mode [ 489.692052][T16705] vlan2: entered promiscuous mode [ 489.773787][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 489.801687][ T5897] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 489.811945][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 489.959260][T16718] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3307'. [ 489.971318][T16712] lo speed is unknown, defaulting to 1000 [ 489.996738][T16719] pimreg: entered allmulticast mode [ 490.028657][ T5897] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 490.030171][T16404] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 490.092706][T16722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3308'. [ 490.102011][T16722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3308'. [ 490.252455][T16404] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 490.264088][T16404] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 490.343712][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 490.377699][T16404] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 490.402831][T16715] lo speed is unknown, defaulting to 1000 [ 490.565388][T16743] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3313'. [ 490.575983][T16743] netlink: 'syz.3.3313': attribute type 7 has an invalid length. [ 490.585821][T16743] netlink: 'syz.3.3313': attribute type 8 has an invalid length. [ 490.589268][T16744] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3313'. [ 490.593896][T16743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3313'. [ 490.634071][T16744] netlink: 'syz.3.3313': attribute type 7 has an invalid length. [ 490.725010][T16744] netlink: 'syz.3.3313': attribute type 8 has an invalid length. [ 490.732780][T16744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3313'. [ 490.742081][ T5952] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 490.796406][T16402] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 490.813547][T16402] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 490.884259][T16402] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 490.900751][T16402] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 491.015712][T16720] lo speed is unknown, defaulting to 1000 [ 491.160054][T16404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.198343][T16760] vlan3: entered promiscuous mode [ 491.242460][T16404] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.292571][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.299757][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.369831][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.377028][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.383699][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 491.568431][T16402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.593149][T16768] netlink: 'syz.1.3320': attribute type 3 has an invalid length. [ 491.611928][T16768] netlink: 'syz.1.3320': attribute type 2 has an invalid length. [ 491.660394][T16402] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.804171][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.811375][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.937848][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.945044][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.177450][T16787] delete_channel: no stack [ 492.206955][T16404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.413846][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 492.738925][T16804] lo speed is unknown, defaulting to 1000 [ 493.000662][T16402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.108221][T16404] veth0_vlan: entered promiscuous mode [ 493.130557][T16404] veth1_vlan: entered promiscuous mode [ 493.174761][T16815] vlan5: entered promiscuous mode [ 493.247423][T16404] veth0_macvtap: entered promiscuous mode [ 493.272531][T16404] veth1_macvtap: entered promiscuous mode [ 493.379433][T16404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.425902][T16402] veth0_vlan: entered promiscuous mode [ 493.433589][T16404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.453747][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 493.521175][ T73] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.547410][T16402] veth1_vlan: entered promiscuous mode [ 493.555265][ T73] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.606499][ T73] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.632130][T15514] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.857895][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 493.874887][T16402] veth0_macvtap: entered promiscuous mode [ 493.910955][T15519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.932484][T16402] veth1_macvtap: entered promiscuous mode [ 493.946204][T15519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.000827][T16402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.146065][ T4533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.159610][T16402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.169310][ T4533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.209192][T16848] __nla_validate_parse: 11 callbacks suppressed [ 494.209209][T16848] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3340'. [ 494.230592][T16846] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3339'. [ 494.265148][T16846] tc_dump_action: action bad kind [ 494.274571][T15514] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.300680][T15514] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.372357][T16853] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3342'. [ 494.385210][T15514] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.403166][T15514] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.493751][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 494.584585][T16860] xt_cgroup: path and classid specified [ 494.601063][T16860] IPVS: set_ctl: invalid protocol: 50 10.1.1.2:20004 [ 494.623275][T16860] netlink: zone id is out of range [ 494.633231][T16860] netlink: zone id is out of range [ 494.639693][T16860] netlink: zone id is out of range [ 494.656558][T16860] netlink: zone id is out of range [ 494.661835][T16864] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3347'. [ 494.671437][T16860] netlink: zone id is out of range [ 494.687854][T16865] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input23 [ 494.711428][T16866] xt_hashlimit: size too large, truncated to 1048576 [ 494.738576][T16860] netlink: 'syz.1.3344': attribute type 4 has an invalid length. [ 494.747139][T16860] netlink: 'syz.1.3344': attribute type 2 has an invalid length. [ 495.038906][ T3518] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.192918][T15519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.208126][T15519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.298511][ T3518] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.315816][T15519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.325303][T15519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.520705][ T3518] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.533753][ C0] net_ratelimit: 18 callbacks suppressed [ 495.533770][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 495.610616][ T3518] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.787986][ T3518] bridge_slave_1: left allmulticast mode [ 495.793940][ T3518] bridge_slave_1: left promiscuous mode [ 495.800956][ T3518] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.812030][ T3518] bridge_slave_0: left allmulticast mode [ 495.818410][ T3518] bridge_slave_0: left promiscuous mode [ 495.827985][ T3518] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.111318][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 496.126556][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 496.140639][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 496.150126][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 496.158204][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 496.278276][ T3518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.289511][ T3518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.300091][ T3518] bond0 (unregistering): Released all slaves [ 496.373329][T16884] lo speed is unknown, defaulting to 1000 [ 496.580530][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 496.777861][ T3518] hsr_slave_0: left promiscuous mode [ 496.786668][ T3518] hsr_slave_1: left promiscuous mode [ 496.792435][ T3518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.800881][ T3518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.809354][ T3518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.819062][ T3518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.840414][ T3518] veth1_macvtap: left promiscuous mode [ 496.846437][ T3518] veth0_macvtap: left promiscuous mode [ 496.852007][ T3518] veth1_vlan: left promiscuous mode [ 496.858310][ T3518] veth0_vlan: left promiscuous mode [ 497.231620][ T3518] team0 (unregistering): Port device team_slave_1 removed [ 497.268623][ T3518] team0 (unregistering): Port device team_slave_0 removed [ 497.623705][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 497.867048][T16890] vlan3: entered promiscuous mode [ 497.900544][T16903] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3353'. [ 497.960952][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 497.970765][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 497.982521][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 498.002403][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 498.013455][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 498.044277][T16904] _ÐZ`Ô€@ÿÿ: entered promiscuous mode [ 498.112749][T16906] lo speed is unknown, defaulting to 1000 [ 498.219518][T16884] chnl_net:caif_netlink_parms(): no params data found [ 498.257600][ T5837] Bluetooth: hci1: command tx timeout [ 498.404726][T16917] netlink: 'syz.3.3356': attribute type 1 has an invalid length. [ 498.454423][T16917] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3356'. [ 498.652923][T16909] lo speed is unknown, defaulting to 1000 [ 498.653102][T16884] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.665929][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 498.694162][T16884] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.702332][T16884] bridge_slave_0: entered allmulticast mode [ 498.718164][T16884] bridge_slave_0: entered promiscuous mode [ 498.757849][T16884] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.766968][T16884] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.774989][T16884] bridge_slave_1: entered allmulticast mode [ 498.783065][T16884] bridge_slave_1: entered promiscuous mode [ 498.841350][T16929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3360'. [ 498.902869][T16884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.973571][T16884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.093250][ T3518] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.108363][T16935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3361'. [ 499.117564][T16935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3361'. [ 499.127426][T16935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3361'. [ 499.130270][T16884] team0: Port device team_slave_0 added [ 499.161528][T16884] team0: Port device team_slave_1 added [ 499.220976][ T3518] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.255186][T16884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.262282][T16884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.288693][T16884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.306421][T16884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.313369][T16884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.339976][T16884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.366033][ T3518] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.461383][ T3518] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.693753][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 499.711457][T16884] hsr_slave_0: entered promiscuous mode [ 499.720190][T16884] hsr_slave_1: entered promiscuous mode [ 499.727196][T16884] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 499.735615][T16884] Cannot create hsr debugfs directory [ 499.858616][T16906] chnl_net:caif_netlink_parms(): no params data found [ 499.995113][T16947] __nla_validate_parse: 2 callbacks suppressed [ 499.995131][T16947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3365'. [ 500.079782][ T3518] bridge_slave_1: left allmulticast mode [ 500.093001][ T3518] bridge_slave_1: left promiscuous mode [ 500.100024][ T4533] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 500.110684][ T5150] Bluetooth: hci4: command tx timeout [ 500.121396][ T4533] ------------[ cut here ]------------ [ 500.127594][ T4533] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1229:5 [ 500.135452][ T4533] index 11 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 500.137429][ T3518] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.151023][ T4533] CPU: 0 UID: 0 PID: 4533 Comm: kworker/u8:8 Not tainted 6.16.0-rc3-syzkaller-00901-gf22e6fdf7b33 #0 PREEMPT(full) [ 500.151047][ T4533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 500.151060][ T4533] Workqueue: events_unbound cfg80211_wiphy_work [ 500.151088][ T4533] Call Trace: [ 500.151096][ T4533] [ 500.151105][ T4533] dump_stack_lvl+0x189/0x250 [ 500.151138][ T4533] ? __pfx_dump_stack_lvl+0x10/0x10 [ 500.151163][ T4533] ? __pfx__printk+0x10/0x10 [ 500.151196][ T4533] ubsan_epilogue+0xa/0x40 [ 500.151215][ T4533] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 500.151249][ T4533] ieee80211_request_ibss_scan+0x600/0x8b0 [ 500.151284][ T4533] ieee80211_ibss_work+0xd8a/0x1060 [ 500.151309][ T4533] ? lockdep_hardirqs_on+0x9c/0x150 [ 500.151331][ T4533] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 500.151350][ T4533] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 500.151369][ T4533] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 500.151401][ T4533] ? skb_dequeue+0x10e/0x150 [ 500.151418][ T4533] ? ieee80211_iface_work+0xcdb/0xfe0 [ 500.151440][ T4533] ? ieee80211_iface_work+0xf39/0xfe0 [ 500.151461][ T4533] ? rcu_is_watching+0x15/0xb0 [ 500.151491][ T4533] cfg80211_wiphy_work+0x2df/0x460 [ 500.151513][ T4533] ? process_scheduled_works+0x9ef/0x17b0 [ 500.151540][ T4533] process_scheduled_works+0xae1/0x17b0 [ 500.151596][ T4533] ? __pfx_process_scheduled_works+0x10/0x10 [ 500.151639][ T4533] worker_thread+0x8a0/0xda0 [ 500.151668][ T4533] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 500.151695][ T4533] ? __kthread_parkme+0x7b/0x200 [ 500.151724][ T4533] kthread+0x70e/0x8a0 [ 500.151746][ T4533] ? __pfx_worker_thread+0x10/0x10 [ 500.151771][ T4533] ? __pfx_kthread+0x10/0x10 [ 500.151793][ T4533] ? _raw_spin_unlock_irq+0x23/0x50 [ 500.151810][ T4533] ? lockdep_hardirqs_on+0x9c/0x150 [ 500.151827][ T4533] ? __pfx_kthread+0x10/0x10 [ 500.151848][ T4533] ret_from_fork+0x3fc/0x770 [ 500.151874][ T4533] ? __pfx_ret_from_fork+0x10/0x10 [ 500.151911][ T4533] ? __switch_to_asm+0x39/0x70 [ 500.151929][ T4533] ? __switch_to_asm+0x33/0x70 [ 500.151945][ T4533] ? __pfx_kthread+0x10/0x10 [ 500.151965][ T4533] ret_from_fork_asm+0x1a/0x30 [ 500.152001][ T4533] [ 500.152009][ T4533] ---[ end trace ]--- [ 500.393892][ T5837] Bluetooth: hci1: command tx timeout [ 500.409303][ T4533] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 500.416522][ T4533] CPU: 0 UID: 0 PID: 4533 Comm: kworker/u8:8 Not tainted 6.16.0-rc3-syzkaller-00901-gf22e6fdf7b33 #0 PREEMPT(full) [ 500.428678][ T4533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 500.438832][ T4533] Workqueue: events_unbound cfg80211_wiphy_work [ 500.445097][ T4533] Call Trace: [ 500.448379][ T4533] [ 500.451307][ T4533] dump_stack_lvl+0x99/0x250 [ 500.455900][ T4533] ? __asan_memcpy+0x40/0x70 [ 500.460743][ T4533] ? __pfx_dump_stack_lvl+0x10/0x10 [ 500.465948][ T4533] ? __pfx__printk+0x10/0x10 [ 500.470625][ T4533] panic+0x2db/0x790 [ 500.474522][ T4533] ? __pfx_panic+0x10/0x10 [ 500.478928][ T4533] ? _printk+0xcf/0x120 [ 500.483073][ T4533] ? __pfx__printk+0x10/0x10 [ 500.487660][ T4533] check_panic_on_warn+0x89/0xb0 [ 500.492594][ T4533] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 500.498311][ T4533] ieee80211_request_ibss_scan+0x600/0x8b0 [ 500.504118][ T4533] ieee80211_ibss_work+0xd8a/0x1060 [ 500.509309][ T4533] ? lockdep_hardirqs_on+0x9c/0x150 [ 500.514497][ T4533] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 500.520378][ T4533] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 500.526693][ T4533] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 500.532348][ T4533] ? skb_dequeue+0x10e/0x150 [ 500.536948][ T4533] ? ieee80211_iface_work+0xcdb/0xfe0 [ 500.542332][ T4533] ? ieee80211_iface_work+0xf39/0xfe0 [ 500.547700][ T4533] ? rcu_is_watching+0x15/0xb0 [ 500.552466][ T4533] cfg80211_wiphy_work+0x2df/0x460 [ 500.557574][ T4533] ? process_scheduled_works+0x9ef/0x17b0 [ 500.563289][ T4533] process_scheduled_works+0xae1/0x17b0 [ 500.568850][ T4533] ? __pfx_process_scheduled_works+0x10/0x10 [ 500.574840][ T4533] worker_thread+0x8a0/0xda0 [ 500.579424][ T4533] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 500.585743][ T4533] ? __kthread_parkme+0x7b/0x200 [ 500.590676][ T4533] kthread+0x70e/0x8a0 [ 500.594733][ T4533] ? __pfx_worker_thread+0x10/0x10 [ 500.599834][ T4533] ? __pfx_kthread+0x10/0x10 [ 500.604412][ T4533] ? _raw_spin_unlock_irq+0x23/0x50 [ 500.609595][ T4533] ? lockdep_hardirqs_on+0x9c/0x150 [ 500.614776][ T4533] ? __pfx_kthread+0x10/0x10 [ 500.619360][ T4533] ret_from_fork+0x3fc/0x770 [ 500.623962][ T4533] ? __pfx_ret_from_fork+0x10/0x10 [ 500.629080][ T4533] ? __switch_to_asm+0x39/0x70 [ 500.633831][ T4533] ? __switch_to_asm+0x33/0x70 [ 500.638588][ T4533] ? __pfx_kthread+0x10/0x10 [ 500.643165][ T4533] ret_from_fork_asm+0x1a/0x30 [ 500.647933][ T4533] [ 500.651079][ T4533] Kernel Offset: disabled [ 500.655436][ T4533] Rebooting in 86400 seconds..