last executing test programs: 1m23.555710144s ago: executing program 0 (id=491): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000004c0)={'ip6tnl0\x00', 0x0, 0x4, 0xf, 0xa, 0xbed, 0x41, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x8000, 0xe61, 0xffff822f}}) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x200000100000011, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa1400060000000000ffffffff"], 0x54}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000003c0)={r0, 0x27d, 0x8, 0xfffffffffffffffb}) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x4, 0x20, 0x2, 0x0, 0xff, 0x6, 0x0, @rand_addr=0x64010101, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x0, {[@exp_smc]}}}}}}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_tracing={0x1a, 0x0, &(0x7f0000000440), &(0x7f00000000c0)='syzkaller\x00', 0x8, 0xe, &(0x7f0000000140)=""/14, 0x41000, 0x49, '\x00', r1, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x1f516, r0, 0x8, &(0x7f0000000540)=[0x1, 0xffffffffffffffff], &(0x7f0000000580)=[{0x3, 0x1, 0x0, 0x7}, {0x20000004, 0x4, 0x1, 0x6}, {0x3, 0x5, 0xb, 0xc}, {0x5, 0x4, 0xc}, {0x5, 0x4, 0x8, 0x7}, {0x1, 0x2, 0x4, 0x4}, {0x2, 0x2, 0xb, 0x2}, {0x1, 0x3, 0xb, 0x4}], 0x10, 0x1a84, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r4}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1m9.235001577s ago: executing program 0 (id=491): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000004c0)={'ip6tnl0\x00', 0x0, 0x4, 0xf, 0xa, 0xbed, 0x41, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x8000, 0xe61, 0xffff822f}}) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x200000100000011, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa1400060000000000ffffffff"], 0x54}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000003c0)={r0, 0x27d, 0x8, 0xfffffffffffffffb}) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x4, 0x20, 0x2, 0x0, 0xff, 0x6, 0x0, @rand_addr=0x64010101, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x0, {[@exp_smc]}}}}}}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_tracing={0x1a, 0x0, &(0x7f0000000440), &(0x7f00000000c0)='syzkaller\x00', 0x8, 0xe, &(0x7f0000000140)=""/14, 0x41000, 0x49, '\x00', r1, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x1f516, r0, 0x8, &(0x7f0000000540)=[0x1, 0xffffffffffffffff], &(0x7f0000000580)=[{0x3, 0x1, 0x0, 0x7}, {0x20000004, 0x4, 0x1, 0x6}, {0x3, 0x5, 0xb, 0xc}, {0x5, 0x4, 0xc}, {0x5, 0x4, 0x8, 0x7}, {0x1, 0x2, 0x4, 0x4}, {0x2, 0x2, 0xb, 0x2}, {0x1, 0x3, 0xb, 0x4}], 0x10, 0x1a84, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r4}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 55.754728582s ago: executing program 0 (id=491): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000004c0)={'ip6tnl0\x00', 0x0, 0x4, 0xf, 0xa, 0xbed, 0x41, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x8000, 0xe61, 0xffff822f}}) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x200000100000011, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa1400060000000000ffffffff"], 0x54}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000003c0)={r0, 0x27d, 0x8, 0xfffffffffffffffb}) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x4, 0x20, 0x2, 0x0, 0xff, 0x6, 0x0, @rand_addr=0x64010101, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x0, {[@exp_smc]}}}}}}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_tracing={0x1a, 0x0, &(0x7f0000000440), &(0x7f00000000c0)='syzkaller\x00', 0x8, 0xe, &(0x7f0000000140)=""/14, 0x41000, 0x49, '\x00', r1, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x1f516, r0, 0x8, &(0x7f0000000540)=[0x1, 0xffffffffffffffff], &(0x7f0000000580)=[{0x3, 0x1, 0x0, 0x7}, {0x20000004, 0x4, 0x1, 0x6}, {0x3, 0x5, 0xb, 0xc}, {0x5, 0x4, 0xc}, {0x5, 0x4, 0x8, 0x7}, {0x1, 0x2, 0x4, 0x4}, {0x2, 0x2, 0xb, 0x2}, {0x1, 0x3, 0xb, 0x4}], 0x10, 0x1a84, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r4}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 42.330173278s ago: executing program 0 (id=491): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000004c0)={'ip6tnl0\x00', 0x0, 0x4, 0xf, 0xa, 0xbed, 0x41, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x8000, 0xe61, 0xffff822f}}) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x200000100000011, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa1400060000000000ffffffff"], 0x54}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000003c0)={r0, 0x27d, 0x8, 0xfffffffffffffffb}) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x4, 0x20, 0x2, 0x0, 0xff, 0x6, 0x0, @rand_addr=0x64010101, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x0, {[@exp_smc]}}}}}}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_tracing={0x1a, 0x0, &(0x7f0000000440), &(0x7f00000000c0)='syzkaller\x00', 0x8, 0xe, &(0x7f0000000140)=""/14, 0x41000, 0x49, '\x00', r1, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x1f516, r0, 0x8, &(0x7f0000000540)=[0x1, 0xffffffffffffffff], &(0x7f0000000580)=[{0x3, 0x1, 0x0, 0x7}, {0x20000004, 0x4, 0x1, 0x6}, {0x3, 0x5, 0xb, 0xc}, {0x5, 0x4, 0xc}, {0x5, 0x4, 0x8, 0x7}, {0x1, 0x2, 0x4, 0x4}, {0x2, 0x2, 0xb, 0x2}, {0x1, 0x3, 0xb, 0x4}], 0x10, 0x1a84, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r4}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 28.828874791s ago: executing program 0 (id=491): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000004c0)={'ip6tnl0\x00', 0x0, 0x4, 0xf, 0xa, 0xbed, 0x41, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x8000, 0xe61, 0xffff822f}}) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x200000100000011, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa1400060000000000ffffffff"], 0x54}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000003c0)={r0, 0x27d, 0x8, 0xfffffffffffffffb}) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x4, 0x20, 0x2, 0x0, 0xff, 0x6, 0x0, @rand_addr=0x64010101, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x0, {[@exp_smc]}}}}}}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_tracing={0x1a, 0x0, &(0x7f0000000440), &(0x7f00000000c0)='syzkaller\x00', 0x8, 0xe, &(0x7f0000000140)=""/14, 0x41000, 0x49, '\x00', r1, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x1f516, r0, 0x8, &(0x7f0000000540)=[0x1, 0xffffffffffffffff], &(0x7f0000000580)=[{0x3, 0x1, 0x0, 0x7}, {0x20000004, 0x4, 0x1, 0x6}, {0x3, 0x5, 0xb, 0xc}, {0x5, 0x4, 0xc}, {0x5, 0x4, 0x8, 0x7}, {0x1, 0x2, 0x4, 0x4}, {0x2, 0x2, 0xb, 0x2}, {0x1, 0x3, 0xb, 0x4}], 0x10, 0x1a84, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r4}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 12.127893324s ago: executing program 0 (id=491): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000004c0)={'ip6tnl0\x00', 0x0, 0x4, 0xf, 0xa, 0xbed, 0x41, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x8000, 0xe61, 0xffff822f}}) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x200000100000011, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa1400060000000000ffffffff"], 0x54}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000003c0)={r0, 0x27d, 0x8, 0xfffffffffffffffb}) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x4, 0x20, 0x2, 0x0, 0xff, 0x6, 0x0, @rand_addr=0x64010101, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x0, {[@exp_smc]}}}}}}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_tracing={0x1a, 0x0, &(0x7f0000000440), &(0x7f00000000c0)='syzkaller\x00', 0x8, 0xe, &(0x7f0000000140)=""/14, 0x41000, 0x49, '\x00', r1, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x1f516, r0, 0x8, &(0x7f0000000540)=[0x1, 0xffffffffffffffff], &(0x7f0000000580)=[{0x3, 0x1, 0x0, 0x7}, {0x20000004, 0x4, 0x1, 0x6}, {0x3, 0x5, 0xb, 0xc}, {0x5, 0x4, 0xc}, {0x5, 0x4, 0x8, 0x7}, {0x1, 0x2, 0x4, 0x4}, {0x2, 0x2, 0xb, 0x2}, {0x1, 0x3, 0xb, 0x4}], 0x10, 0x1a84, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r4}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 2.460995248s ago: executing program 3 (id=1869): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000030e411800c0001006d6163766c616e0020310002800800010010000000080003003f54010000000a000400aaaaaaaabcbb0000080005002e28d2688f925e390b9f43021efab3df2d6ed922db7389a29707265dcbc306465678117c7ef7c342abc1440f481eb43d6a32faf7e8927875cbd0db2182d1ee7c75920aa54cd912f064034bfc3d2ac165263903c7b1fcff4566b12af7233054758aaa47dafc766668d97c51a2194eb14df59b3faf28daa70c429af7c00465923437ba228f9c16e21d1a29ee107a2ae6b9c09470a516b60450e67588ca0187a0e28f58766c6ba20bfef2efd0b5fccbb415de3dde43", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) 2.214865349s ago: executing program 3 (id=1872): r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@qipcrtr, &(0x7f0000000000)=0x80, 0x80800) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000100)={@rand_addr=0x64010100, @loopback, 0xffffffffffffffff, "8a750357aecf826425dea219d3a43078e18aa53a4ecf537c35524889e8e96016", 0x8, 0xc, 0x80000001, 0x4}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=@delqdisc={0xbc, 0x25, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xffe0, 0xa}, {0xfff3, 0xc}, {0xffff, 0x7}}, [@q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6}]}}, @q_dsmark={{0xb}, {0x44, 0x2, [@TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x22}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7fff}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x25}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x24}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x17}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000010}, 0x24004010) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUEUE_FLAGS={0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) 1.969481914s ago: executing program 4 (id=1877): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'ip6gre0\x00', r1, 0x29, 0x9, 0x8, 0x8, 0x57, @remote, @local, 0x7800, 0x7800, 0x101, 0xb6}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f00000002c0)={'syztnl0\x00', r1, 0x80, 0x20, 0x8a5, 0x3, {{0x2c, 0x4, 0x3, 0x2, 0xb0, 0x65, 0x0, 0xb, 0x29, 0x0, @empty, @local, {[@cipso={0x86, 0x1e, 0x2, [{0x6, 0x3, "83"}, {0x7, 0x5, "872b40"}, {0x7, 0x10, "62f0a3f12392ced880370f39d852"}]}, @timestamp={0x44, 0x28, 0xbf, 0x0, 0x2, [0x4, 0x4, 0x9, 0x800, 0x8, 0x1a, 0x7, 0x4, 0x2]}, @lsrr={0x83, 0x7, 0xf5, [@local]}, @noop, @ssrr={0x89, 0x13, 0x11, [@rand_addr=0x64010101, @loopback, @broadcast, @multicast2]}, @lsrr={0x83, 0xb, 0x79, [@remote, @empty]}, @end, @timestamp_addr={0x44, 0x2c, 0xbb, 0x1, 0x1, [{@empty, 0xd635}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc}, {@multicast2}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x2}, {@broadcast, 0xfffffffc}]}, @end]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x148, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x80}, 0x800) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan4\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)={0x14, r5, 0x1, 0x70bd25, 0x2, {0x1, 0x6c00000000000000}}, 0x14}, 0x1, 0xf000, 0x0, 0x3040001}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000005000000000000000000711232000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.885687861s ago: executing program 3 (id=1878): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0), r0) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r4, 0x0, 0x0) (async) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000073017f000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf251500000008000300", @ANYRES32=r2, @ANYBLOB="0500290004000000"], 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x10) 1.733673276s ago: executing program 4 (id=1879): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'veth0_to_batadv\x00', &(0x7f0000000080)=@ethtool_cmd={0x1f, 0x6, 0x762c, 0x6, 0x0, 0x0, 0x6, 0x1, 0xc, 0xba, 0x8, 0x2, 0x3, 0x1, 0xfd, 0x680, [0x0, 0xfffffffc]}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mem_disconnect\x00', r6}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$inet6(0x10, 0x2, 0x0) sendto$inet6(r9, &(0x7f00000002c0)="1c0000", 0x3, 0x0, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@RTM_GETNSID={0x24, 0x5a, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NETNSA_FD={0x8, 0x3, r4}, @NETNSA_FD={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x200080e0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.732310402s ago: executing program 3 (id=1880): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275c, 0x0) clock_gettime(0xfffffff2, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10, 0xffff, 0x0, 0x7, 0x1}) 1.629899988s ago: executing program 1 (id=1881): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b400000000000000791090000000000063000000000000009500000000000000b8a164aed91d3d5b664c4ca806f01293f84f25209077b1bb4ab4cf447b29fad55603aa97715b6f60e53760e0565b07dd0f"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5c38b46af21a0", 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="fd", 0x0}, 0x50) (async) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x700, 0x20, 0x4, 0x6c, {{0x3a, 0x4, 0x2, 0x4, 0xe8, 0x64, 0x0, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, {[@generic={0x94, 0x4, 'Xj'}, @timestamp_prespec={0x44, 0x34, 0x77, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x13}, 0x3}, {@rand_addr=0x64010102, 0xf}, {@broadcast, 0x8a7}, {@empty, 0x2}, {@local, 0xaf}, {@private=0xa010102, 0x1}]}, @generic={0x89, 0xb, "5b8b93442c9391a49a"}, @rr={0x7, 0x1f, 0x25, [@multicast2, @local, @local, @private=0xa010100, @loopback, @local, @remote]}, @generic={0x89, 0x8, "d4eeaa7813de"}, @timestamp_addr={0x44, 0x3c, 0xc9, 0x1, 0xe, [{@private=0xa010101, 0x7e}, {@multicast2, 0x5}, {@broadcast, 0x400}, {@private=0xa010101, 0xf77}, {@empty, 0x6}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc}]}, @lsrr={0x83, 0x7, 0x19, [@local]}, @rr={0x7, 0x17, 0xe5, [@empty, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @timestamp={0x44, 0x10, 0xaa, 0x0, 0x9, [0x6, 0x4, 0x1]}]}}}}}) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0x0, 0xffe2}, {0x5, 0xffe0}}}, 0x24}}, 0x20000000) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3}, @ETHTOOL_A_LINKINFO_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xaf}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)}, 0x20000040) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0, @ANYRES8=r0], 0x54}}, 0x24040840) 1.536644969s ago: executing program 3 (id=1883): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f000000f780)={0x0, 0x0, &(0x7f000000f740)={&(0x7f000000f680)={0x28, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x44040) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x84, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80000001}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xb}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}]}, 0x84}, 0x1, 0x0, 0x0, 0x20}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x24, r2, 0x1, 0x33, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xfffff94e}]}, 0x24}}, 0x0) r4 = accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80000) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xf, 0x80010, r4, 0x85763000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r5) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010326bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x40011}, 0x20040814) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="02002dbd7000fedbdf2503000000050005000100000005000200070000001c0001800800030077916f28080003000000000008000100", @ANYRES32=r3, @ANYBLOB="2cf0320039bdcc732e331a9a4a359bd553bc47765a7f62de14007e4338f363040ce6863a19e188dd7c5939be64fd83214fdc0fbdb63550870bd71297b2b14b8db9ae77d3411db3fb8cdf78079dd58776c6aaa8994fc519f49d96e1f5ad21e48e13d35b603cc07439a782ff942a33218724c634ff298c3d7e5323bd89ea5fb2a0582f82df0e416e80e95596ccb4ecbad0137bc2f440d1a23d2051e2643eb54aed3b3d300ad5740e4b066c"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x24000000) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r10, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x2c}}, 0x0) bind$packet(r7, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000002bbbbbbbbbbbb08004500001c0000000200119078000000000000002a14e9a5b47d48000000000000089078"], 0x0) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}, @TCA_CAKE_WASH={0x8, 0xd, 0x4}]}}]}, 0x44}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r8, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)={0x108, r11, 0x100, 0x5, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x25, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x2c, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r14}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x20004841}, 0x4841) 1.517171639s ago: executing program 4 (id=1884): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x82}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x9}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40001}, 0x1) 1.441873178s ago: executing program 1 (id=1885): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1}, 0xc) listen(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x30, r3, 0x101, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}], @NL80211_ATTR_KEYS={0x4}]}, 0x30}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xf4, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, r3, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x30, 0x69}}}}, [@NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x3, 0x6}, {0xff, 0x2}, {0x1, 0x2}, {0x5, 0x5}, {0x8, 0x4}, {0xa, 0x2}, {0xc}, {0x3, 0x3}, {0xf, 0x2}, {0x2a, 0x6}, {0x2c, 0x2}], "e1c4aacdd9d00d0e"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x99}, {0x2, 0x1}, {0x3, 0x7}, {0x4, 0x2}, {0xb1}, {0x8, 0x5}], "d40917142007692d"}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x24040001) ppoll(&(0x7f0000000280)=[{r0, 0x601}], 0x1, &(0x7f0000000300)={0x0, 0x989680}, 0x0, 0x0) 1.31915917s ago: executing program 2 (id=1887): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x1398, 0xffffffff, 0x0, 0x11d8, 0x10f8, 0xffffffff, 0xffffffff, 0x1300, 0x1300, 0x1300, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x10d0, 0x10f8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x7}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.net/syz1\x00'}}]}, @REJECT={0x28}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'macvtap0\x00'}, 0x0, 0xa0, 0xe0, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ip={@private, @loopback, 0x0, 0x0, 'erspan0\x00', 'ip6erspan0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@socket0={{0x20}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x13f8) (async) r1 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) connect$rose(r1, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, [@bcast, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default]}, 0x40) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ITS={0x4}]}, @CTA_MARK={0x8}]}, 0xb8}, 0x1, 0xfffff000}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r3, 0x1) (async) setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f0000000040)=0x7, 0x4) (async) recvmmsg(r4, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/9, 0x9}, 0xfec1}], 0x1, 0x40000360, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000073117000000000008510000002000000850000000500010095000000000000009500a505000000009e3c5012d001cd60cd367e723983fe12f001bbc74ec6009f7b78abf5d31bb8b9a7ffbe741a957146d6366d93f6c2a3ea91921bac7551cf105c2b71be23f6099b4811193b2a22b41308da5c4ea5c4d0e798527ebb720848ba65d359070b5a092f6f5f7e65c0ef1f6ad70c1f18d5508ec353876a032f8b0674bc194ad2073619bf3b1beeae23884eb2aacbe52fd0d2bb7fa0a07d15142c915f6f9613"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 1.30103814s ago: executing program 4 (id=1888): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000340)={{0x2, 0x4e23, @empty}, {0x0, @link_local}, 0xa, {0x2, 0x0, @multicast2}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e2a, @broadcast}, {0x0, @multicast}, 0x4e, {}, 'lo\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x28, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}]}, 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x300048c0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@remote, 0x0, 0x2b}, @in6=@mcast1, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x1000}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000180001000000000000010000020000000000000900000000060015000200000014001680100008800c00038004000400"], 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000340)={{0x2, 0x4e23, @empty}, {0x0, @link_local}, 0xa, {0x2, 0x0, @multicast2}, 'lo\x00'}) (async) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e2a, @broadcast}, {0x0, @multicast}, 0x4e, {}, 'lo\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x0) (async) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r1) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x28, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}]}, 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x300048c0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@remote, 0x0, 0x2b}, @in6=@mcast1, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x1000}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000180001000000000000010000020000000000000900000000060015000200000014001680100008800c00038004000400"], 0x38}}, 0x0) (async) 1.141422106s ago: executing program 1 (id=1889): syz_emit_ethernet(0xbe, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0xb0, 0x64, 0x41, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "197d25ab5c6cdbf01fe39863eb62f49000c3d6942a5e686ea59618aa7c984968", "12d234da810a504a6b0a4166eccca2e766c504479ebb08d334b334ee3d90b5ae5e1f8578858cec6b7f0937827e16b047", "3cec384575ba47e50f91fcc0eafcc824113d3c52b65c89357f4f3052", {"bd88a81b8301690b4baa4a55f96f03f3", "cc13d82e7d8ecbb5d90a4000d1d2d556"}}}}}}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) sendto$inet6(r1, &(0x7f0000000080)="7b864c802b413781e610acfca5b0aabaeef42982440abaa0e214289534e1d8b9c9eb5d40c93e6705970eba5b694f2d4a493141b36251e30f572abd3cdf990d9925f296b62ee435503cf7dd4a257220b920b8998192813d3b6f763c229baeb785ce8225586bc49a2c0d0e80a877c18ac6a5746936b76b43679f", 0x79, 0xc000, &(0x7f0000000280)={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x18}, 0x2}, 0x1c) listen(r4, 0x10000) sendto$packet(r0, &(0x7f0000000180)="0b040700e0ff030002004788aa96a13bb100000000004305400f", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 992.659167ms ago: executing program 2 (id=1890): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000100)=""/146, &(0x7f00000001c0)=0x28) getsockopt$inet6_int(r0, 0x29, 0x46, 0x0, &(0x7f00000000c0)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="000400ff158104531b87ff00000400006d5643d08049b324e70002000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xc, 0x4, 0x4, 0x8, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r3) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r6) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="308d335e2b000000", @ANYRES16=r7, @ANYBLOB="010028bd7000ffdbdf253100000005003300030000000a0001007770616e300000000500350000000000"], 0x30}, 0x1, 0x0, 0x0, 0x24008004}, 0x40000) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000040)={r4, r5/1000+60000}, 0x10) 975.154647ms ago: executing program 4 (id=1891): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x5, 0x1, 0x100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x5, 0x1, 0x100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018210000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000cf000000bf0900000000000055090100000000409500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet(0x2, 0x3, 0x6) (async) r3 = socket$inet(0x2, 0x3, 0x6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r3}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%pS \x00'}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r7, 0xff07, 0x10000000) sendmsg$nl_route(r7, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@getroute={0x14, 0x1a, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40) (async) sendmsg$nl_route(r7, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@getroute={0x14, 0x1a, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vxcan0\x00', 0x0}) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@generic={&(0x7f00000004c0)='./file0\x00', 0x0, 0x8}, 0x18) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="3b994a0a64050000abfbdc889001e90b00"/28], 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r12, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r12, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r13}, &(0x7f0000000300), &(0x7f0000000340)=r12, 0x1000000}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xb79a, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xb79a, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x38, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffd}, @map_fd={0x18, 0xa, 0x1, 0x0, r2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xf}, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0xffffffff, 0x4f, &(0x7f0000000380)=""/79, 0x40f00, 0xc, '\x00', r8, 0x25, r9, 0x8, &(0x7f0000000480)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r10, r11, r12, r14, r15], 0x0, 0x10, 0x81, @void, @value}, 0x94) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 909.445744ms ago: executing program 1 (id=1892): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x27}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) accept(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x44, r0, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40905}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x2, 0x3bd8f98c61abb38b, 0x0, 0x0, 0x0, 0x1, 0xff, 0x9}, [@RTA_DST={0x8, 0x1, @broadcast}, @RTA_IP_PROTO={0x5, 0x1b, 0x11}, @RTA_FLOW={0x8, 0xb, 0x80000001}]}, 0x34}}, 0x0) 864.44181ms ago: executing program 3 (id=1893): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00e\x00\a'], 0x20}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="04000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) close(0x4) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0xfffffffffffff20, [{}, {0x0, 0x100000000000000}]}, 0x68) 791.122218ms ago: executing program 2 (id=1894): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0xa, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="44000000fab1af7125e17d8be17af6f667622189eb6297f2a484f22d5383d03a136c4a1f2aa908f6e6d155582d9113c7a88a7d11c3e639946f391f290b3457dbf790390d7fa92d7aec7895bfeacb5bc2e214dbf0e416499f54b1a4a285f0dc5da320f71f763a221bc5bff0c13129a902e7fd43bb2de68fbccbee731132eb21f1a9385b80ee4d073caf84b146d5d3d0e77a60c2e227274b41b6f3772441803dfe890074e45d82195c442bbfac5f9c58cc05ab3fff09370e1d09c548b9f023668f8b22906e03037053093037dc9fe11412258ed544d1785e68aed91e89d7a77b125f8dda4e3a34e48a", @ANYRES16=r2, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r4, @ANYBLOB="0a00180003030303030300001c005a80180001801400030049080b00090009000800ab07f517ffff"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x44}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002d00)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x200440d4}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0b0400000000000000000200000048000480440001800b0001006578746864720000340002800800034000000000080001400000000005000200000000000800064000000004080004400000000008000540002000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000340)="e00cbd73001a000000000000a9a8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 745.126649ms ago: executing program 1 (id=1895): syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08060001080006040001aaaaaaaaa7aaac1414bb0180c2000000ffffffff"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000880)=ANY=[@ANYRES64=r2, @ANYRESHEX=r2, @ANYRES16=r0, @ANYRESOCT=r2, @ANYRESDEC=r2, @ANYRESDEC=r1, @ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20005) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r3) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c030000", @ANYRES16=r6, @ANYBLOB="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"], 0x31c}}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e21, 0x200, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5}}, 0x30, 0xbb1, 0x7, 0xe5c5, 0x86, 0x0, 0xf8}, &(0x7f0000000380)=0x9c) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000780)={r7, @in={{0x2, 0x4e23, @remote}}}, &(0x7f0000000840)=0x84) 608.16769ms ago: executing program 2 (id=1896): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x214, 0x30, 0x51b, 0x0, 0x0, {}, [{0x200, 0x1, [@m_skbmod={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0xa8, 0x2, 0x0, 0x0, {{0x7}, {0xfffffffffffffff5, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0xfffffdf9}]}, {0x68, 0x6, "9f9b3fc2ddc24af6f0e10a015de0eee6fc0900c6e7d94c24ec368c475d7486514b6d2677226afad90c7d6c3ad311a9dee1f031afe3919c34f8636d67f86e3ebd80589ce5f55db46e88a14f002788b194b3ccfdf8c4b86ba094bef19b3a0cddb8831b84bb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xec, 0x0, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x3}}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x0, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010103}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x34e80bc827e65cec}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x0, 0x3, @rand_addr=0x64010101}]}, {0x69, 0x6, "9c52af17f462814d38170f632f883a02e6a90db7e490d2b8bd19fcb7872621f629a33220c9b5f21052aa40bb9616cbe2ae3debc7ea8dcc879c436c50c4b2e001d6b687516d71ee6b27e990693d6b67974963a28a690808e192e0ecf03e7f3535c9492c8e09"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x214}}, 0x0) 576.531522ms ago: executing program 1 (id=1897): ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x2, 'vlan0\x00', {}, 0x6}) (async) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r0 = socket$inet(0x10, 0x3, 0x0) socket(0x3, 0x80801, 0x5) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) socket$unix(0x1, 0x1, 0x0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000004c0)={0x1, 0x2, "ff9edf", 0x6c, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0x0, 0x0, 0x8003, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) (async) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a42000000000800410073697700140033006c6f00000000000000000000000000004cf3bd9e5c2e05977cda500e25d82fdde07f9d49969ec125a91df4cfda4d2936040bf545b03b887609133ad3114e53ad47968bfbd201cdcfcf62c3d898a82cec352d5fa72cc5693be9148b395911cf027778b0c332e7abaf"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000021301000600000600000000000000000e0003006269746d61f03a6970000000050003"], 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x63, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6}, {0x4, 0x8}}}, 0x24}}, 0x40004) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='7\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000001000000080002000100000008000100fbffffff0800048004000b80"], 0x2c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x24, 0x1402, 0x1, 0x70bd2a, 0x25dfdc02, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150007000000000000120800040043430000a80016000a0001407c6f94007134cf6ee08000a0e408e8a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3adfe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee0000000000000000a48156a65908145da1062ff2b44ac6a5", 0xd8}], 0x1}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) socket(0x1, 0x803, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/169, 0xa9, 0x0, &(0x7f00000000c0)=""/7, 0x7}, &(0x7f0000000140)=0xffffffffffffff8b) 314.14729ms ago: executing program 2 (id=1898): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a0000000000006111a400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="0c00238006000b00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x98, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x2e}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x16, 0xcd, [0x7ff, 0x3ff, 0x6, 0x1000, 0x1000, 0x0, 0x4, 0xfffb, 0x200]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x170c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xf5d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}]]}, 0x98}, 0x1, 0x0, 0x0, 0xc005}, 0x8806) 130.642266ms ago: executing program 2 (id=1899): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6000000002060108000000000000000000000000050004000000000012000300686173683a6e657418706f72740000001400078005001500050000008800124000000000050005000a00000005000100"], 0x60}}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0xf, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x68, 0x28, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xb}, {0x3}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x3c, 0x2, [@TCA_BPF_ACT={0x38, 0x1, [@m_xt={0x34, 0x8, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004c885}, 0x0) 0s ago: executing program 4 (id=1900): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000840)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r4, 0x1, 0x9, 0x0, &(0x7f0000000dc0)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = socket(0x1d, 0x2, 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r7, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f0000002740)=""/4097, 0x1001}, {&(0x7f0000000380)=""/182, 0xb6}, {&(0x7f0000000440)=""/242, 0xf2}], 0x4}, 0x9}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x10001}, {{&(0x7f0000000d40)=@nfc_llcp, 0x80, 0x0}, 0x80}], 0x4, 0x10160, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r6, 0x10f, 0x7f, &(0x7f0000000540)=0x5, 0x4) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3d8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x340, 0xffffffff, 0xffffffff, 0x340, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'wg1\x00'}, 0x0, 0x1f8, 0x220, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'vcan0\x00', {0x4386, 0x0, 0x6a, 0x0, 0x0, 0xfe5, 0x20}}}, @common=@unspec=@devgroup={{0x38}, {0xb}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00'}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r9, 0x29, 0x41, 0x0, 0x48) bind$unix(r6, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24008081}, 0x4005002) sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r10, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x18, 0x13, @l2={'eth', 0x3a, 'veth1_to_bridge\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20008041) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x50, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xf4, 0x13}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}]]}, 0x50}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) kernel console output (not intermixed with test programs): 3 length: 249 > 1 [ 159.109106][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 159.117663][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 159.126677][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 159.136708][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 159.456260][ T1055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.468223][ T1055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.480077][ T1055] bond0 (unregistering): Released all slaves [ 159.700531][ T8961] __nla_validate_parse: 5 callbacks suppressed [ 159.700551][ T8961] netlink: 12 bytes leftover after parsing attributes in process `syz.4.799'. [ 159.749332][ T8961] netlink: 60 bytes leftover after parsing attributes in process `syz.4.799'. [ 159.769997][ T8965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.801'. [ 159.778538][ T8961] netlink: 12 bytes leftover after parsing attributes in process `syz.4.799'. [ 159.788030][ T8965] openvswitch: netlink: nsh attribute has 65520 unknown bytes. [ 159.793595][ T8961] netlink: 60 bytes leftover after parsing attributes in process `syz.4.799'. [ 159.808714][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 159.809087][ T8965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.819904][ T8961] netlink: 104 bytes leftover after parsing attributes in process `syz.4.799'. [ 159.879967][ T8974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.800'. [ 159.911862][ T8974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.800'. [ 160.103165][ T8983] ieee802154 phy0 wpan0: encryption failed: -22 [ 160.270483][ T8994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.807'. [ 160.345370][ T8997] Cannot find add_set index 1 as target [ 160.369888][ T8998] netlink: 696 bytes leftover after parsing attributes in process `syz.1.808'. [ 160.620593][ T1055] hsr_slave_0: left promiscuous mode [ 160.659497][ T1055] hsr_slave_1: left promiscuous mode [ 160.685090][ T1055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.696108][ T1055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.753631][ T1055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.783739][ T1055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.858697][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 160.859893][ T1055] veth1_macvtap: left promiscuous mode [ 160.915389][ T1055] veth0_macvtap: left promiscuous mode [ 160.936335][ T1055] veth1_vlan: left promiscuous mode [ 160.959701][ T1055] veth0_vlan: left promiscuous mode [ 161.169308][ T5836] Bluetooth: hci3: command tx timeout [ 161.527751][ T1055] team0 (unregistering): Port device team_slave_1 removed [ 161.565531][ T1055] team0 (unregistering): Port device team_slave_0 removed [ 161.888707][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 162.052980][ T8954] chnl_net:caif_netlink_parms(): no params data found [ 162.652546][ T8954] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.681037][ T8954] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.731497][ T8954] bridge_slave_0: entered allmulticast mode [ 162.773751][ T8954] bridge_slave_0: entered promiscuous mode [ 162.800867][ T8954] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.808065][ T8954] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.842628][ T8954] bridge_slave_1: entered allmulticast mode [ 162.879719][ T8954] bridge_slave_1: entered promiscuous mode [ 162.928694][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 163.113265][ T8954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.205121][ T8954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.249929][ T5836] Bluetooth: hci3: command tx timeout [ 163.416436][ T8954] team0: Port device team_slave_0 added [ 163.456230][ T8954] team0: Port device team_slave_1 added [ 163.715607][ T8954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.741291][ T8954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.874817][ T8954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.936984][ T8954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.950791][ T8954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.978666][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 164.066933][ T8954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.420324][ T8954] hsr_slave_0: entered promiscuous mode [ 164.441068][ T8954] hsr_slave_1: entered promiscuous mode [ 164.461951][ T8954] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.481178][ T8954] Cannot create hsr debugfs directory [ 164.505107][ T9143] bridge4: entered promiscuous mode [ 164.514262][ T9143] bridge4: entered allmulticast mode [ 165.008774][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 165.136385][ T9166] __nla_validate_parse: 10 callbacks suppressed [ 165.136405][ T9166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.848'. [ 165.338937][ T5836] Bluetooth: hci3: command tx timeout [ 165.550477][ T9186] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 165.570821][ T9188] netlink: 4320 bytes leftover after parsing attributes in process `syz.3.855'. [ 165.585499][ T9186] netlink: 'syz.1.854': attribute type 1 has an invalid length. [ 165.636686][ T9188] netlink: 1276 bytes leftover after parsing attributes in process `syz.3.855'. [ 165.884288][ T9207] netlink: 'syz.3.859': attribute type 7 has an invalid length. [ 165.929494][ T9191] netdevsim netdevsim2: Direct firmware load for +. failed with error -2 [ 165.955098][ T9207] : entered promiscuous mode [ 165.958814][ T9191] netdevsim netdevsim2: Falling back to sysfs fallback for: +. [ 166.024284][ T9211] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 166.058796][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 166.264459][ T9222] netlink: 'syz.3.863': attribute type 11 has an invalid length. [ 166.305795][ T9228] netlink: 40 bytes leftover after parsing attributes in process `syz.1.864'. [ 166.318763][ T9222] netlink: 224 bytes leftover after parsing attributes in process `syz.3.863'. [ 166.590826][ T9238] openvswitch: netlink: IP tunnel TTL not specified. [ 166.648519][ T9238] netlink: 72 bytes leftover after parsing attributes in process `syz.3.866'. [ 166.684196][ T9250] netlink: 'syz.3.866': attribute type 2 has an invalid length. [ 166.762739][ T8954] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 166.825972][ T8954] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 166.949188][ T8954] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 167.038139][ T8954] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 167.078495][ T9260] netlink: 20 bytes leftover after parsing attributes in process `syz.2.872'. [ 167.089464][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 167.410065][ T5836] Bluetooth: hci3: command tx timeout [ 167.438359][ T9280] Cannot find del_set index 5 as target [ 167.474666][ T8954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.583095][ T9280] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 167.623140][ T8954] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.695271][ T2994] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.702511][ T2994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.751642][ T2994] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.758897][ T2994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.128706][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 168.694361][ T8954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.756798][ T9344] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 169.039259][ T9357] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 169.071918][ T8954] veth0_vlan: entered promiscuous mode [ 169.107563][ T8954] veth1_vlan: entered promiscuous mode [ 169.178776][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 169.273084][ T8954] veth0_macvtap: entered promiscuous mode [ 169.332268][ T8954] veth1_macvtap: entered promiscuous mode [ 169.380932][ T8954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.398627][ T8954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.429238][ T8954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.445449][ T8954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.456981][ T8954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.474961][ T8954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.517044][ T8954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.592224][ T8954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.606181][ T8954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.617177][ T8954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.628022][ T8954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.642581][ T8954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.662614][ T8954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.674623][ T8954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.774680][ T8954] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.808665][ T8954] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.850930][ T8954] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.870696][ T8954] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.208712][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 170.503622][ T1055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.530205][ T1055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.674557][ T2994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.693363][ T2994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.006012][ T9435] netlink: 28 bytes leftover after parsing attributes in process `syz.1.911'. [ 171.248737][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 171.620855][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.791144][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.932795][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.004540][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.288735][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 172.303201][ T12] bridge_slave_1: left allmulticast mode [ 172.344389][ T12] bridge_slave_1: left promiscuous mode [ 172.364943][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.398913][ T9496] delete_channel: no stack [ 172.406100][ T12] bridge_slave_0: left allmulticast mode [ 172.429213][ T12] bridge_slave_0: left promiscuous mode [ 172.451107][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.784620][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 172.795227][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 172.813314][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 172.830255][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 172.843095][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 172.917754][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.932362][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.951752][ T12] bond0 (unregistering): Released all slaves [ 172.979349][ T9488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.920'. [ 173.328729][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 174.036782][ T9541] netlink: 96 bytes leftover after parsing attributes in process `syz.1.930'. [ 174.166177][ T9564] netlink: 24 bytes leftover after parsing attributes in process `syz.3.932'. [ 174.220102][ T12] hsr_slave_0: left promiscuous mode [ 174.229057][ T12] hsr_slave_1: left promiscuous mode [ 174.249594][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.257069][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.266237][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.273915][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.299213][ T12] veth1_macvtap: left promiscuous mode [ 174.304987][ T12] veth0_macvtap: left promiscuous mode [ 174.310733][ T12] veth1_vlan: left promiscuous mode [ 174.316158][ T12] veth0_vlan: left promiscuous mode [ 174.378692][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 174.933192][ T55] Bluetooth: hci3: command tx timeout [ 174.940522][ T12] team0 (unregistering): Port device team_slave_1 removed [ 174.977603][ T12] team0 (unregistering): Port device team_slave_0 removed [ 175.064879][ T9587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.936'. [ 175.408688][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 175.949281][ T9502] chnl_net:caif_netlink_parms(): no params data found [ 176.237726][ T9626] vlan2: entered promiscuous mode [ 176.243001][ T9626] bridge0: entered promiscuous mode [ 176.285508][ T9630] tipc: Started in network mode [ 176.293476][ T9630] tipc: Node identity ac1414aa, cluster identity 4711 [ 176.317586][ T9630] tipc: Enabled bearer , priority 10 [ 176.325839][ T9624] xt_bpf: check failed: parse error [ 176.349437][ T9636] netlink: 36 bytes leftover after parsing attributes in process `syz.3.949'. [ 176.449408][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 176.680841][ T9502] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.688102][ T9502] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.695253][ T9656] netlink: 'syz.1.954': attribute type 21 has an invalid length. [ 176.717710][ T9502] bridge_slave_0: entered allmulticast mode [ 176.737925][ T9502] bridge_slave_0: entered promiscuous mode [ 176.747031][ T9653] netlink: 64 bytes leftover after parsing attributes in process `syz.2.951'. [ 176.757980][ T9502] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.767542][ T9502] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.777233][ T9502] bridge_slave_1: entered allmulticast mode [ 176.788888][ T9651] netlink: 40 bytes leftover after parsing attributes in process `syz.2.951'. [ 176.790215][ T9502] bridge_slave_1: entered promiscuous mode [ 176.805021][ T9660] netlink: 24 bytes leftover after parsing attributes in process `syz.3.953'. [ 176.839507][ T9656] netlink: 132 bytes leftover after parsing attributes in process `syz.1.954'. [ 176.970216][ T9654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.953'. [ 176.975645][ T9651] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.988213][ T9651] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.997033][ T9651] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.006005][ T9651] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.023630][ T55] Bluetooth: hci3: command tx timeout [ 177.113935][ T9502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.151346][ T9502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.394452][ T9502] team0: Port device team_slave_0 added [ 177.429839][ T5897] tipc: Node number set to 2886997162 [ 177.452470][ T9502] team0: Port device team_slave_1 added [ 177.484408][ T9692] veth0: entered promiscuous mode [ 177.489753][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 177.613332][ T9697] netlink: 'syz.1.960': attribute type 1 has an invalid length. [ 177.683697][ T9684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.960'. [ 177.720301][ T9701] netlink: 'syz.3.962': attribute type 10 has an invalid length. [ 177.823311][ T9502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.842996][ T9502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.958621][ T9502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.986804][ T9683] veth0: left promiscuous mode [ 178.025680][ T9502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.061071][ T9502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.113317][ T9502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.234983][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 178.417478][ T9730] netlink: 'syz.3.969': attribute type 1 has an invalid length. [ 178.474536][ T9732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.501045][ T9732] bond0: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 178.528734][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 178.547770][ T9732] bond0: (slave ip6tnl1): Error -95 calling set_mac_address [ 178.634106][ T9502] hsr_slave_0: entered promiscuous mode [ 178.669907][ T9502] hsr_slave_1: entered promiscuous mode [ 178.693680][ T9502] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.748770][ T9502] Cannot create hsr debugfs directory [ 178.930951][ T9739] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 178.962158][ T9739] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 178.983910][ T9739] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 178.993180][ T9739] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 179.005659][ T9739] bond1: (slave geneve2): making interface the new active one [ 179.015091][ T9739] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 179.088773][ T55] Bluetooth: hci3: command tx timeout [ 179.237146][ T9779] netlink: 20 bytes leftover after parsing attributes in process `syz.3.973'. [ 179.401586][ T9783] netlink: 'syz.4.974': attribute type 10 has an invalid length. [ 179.578762][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 179.797786][ T9806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.980'. [ 180.159524][ T9825] netlink: 16 bytes leftover after parsing attributes in process `syz.2.983'. [ 180.381566][ T9840] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 180.608845][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 180.912005][ T9861] geneve2: entered promiscuous mode [ 180.925632][ T9861] geneve2: entered allmulticast mode [ 181.168980][ T55] Bluetooth: hci3: command tx timeout [ 181.302012][ T9502] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 181.362217][ T9502] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 181.378716][ T9893] __nla_validate_parse: 5 callbacks suppressed [ 181.378732][ T9893] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1001'. [ 181.414100][ T9502] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 181.479206][ T9502] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 181.648781][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 181.898839][ T9918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1005'. [ 182.027183][ T9918] bond2: entered promiscuous mode [ 182.036723][ T9918] bond2: entered allmulticast mode [ 182.233199][ T9502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.316728][ T9502] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.370801][ T2994] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.378062][ T2994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.457843][ T9946] batman_adv: batadv0: Adding interface: dummy0 [ 182.476843][ T9946] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.549077][ T9946] batman_adv: batadv0: Interface activated: dummy0 [ 182.599219][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.606369][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.688895][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 182.953920][ T9979] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1017'. [ 183.015424][ T9981] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1017'. [ 183.469179][T10003] x_tables: duplicate underflow at hook 2 [ 183.546163][ T9502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.728808][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 184.014413][ T9502] veth0_vlan: entered promiscuous mode [ 184.026240][T10021] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1025'. [ 184.083250][T10025] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 184.336238][ T9502] veth1_vlan: entered promiscuous mode [ 184.570816][ T9502] veth0_macvtap: entered promiscuous mode [ 184.622399][ T9502] veth1_macvtap: entered promiscuous mode [ 184.648022][T10045] netlink: 'syz.1.1030': attribute type 10 has an invalid length. [ 184.680990][T10045] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1030'. [ 184.768975][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 184.852962][T10045] team0: Port device geneve0 added [ 184.902979][ T9502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.956058][ T9502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.976158][ T9502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.006179][ T9502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.035542][ T9502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.066452][ T9502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.097165][ T9502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.137495][ T9502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.174973][ T9502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.186426][ T9502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.206647][ T9502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.243993][ T9502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.286639][ T9502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.341930][ T9502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.394980][T10076] tipc: Enabled bearer , priority 0 [ 185.443373][ T9502] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.506792][ T9502] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.563854][ T9502] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.592451][ T9502] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.621313][T10076] tipc: Disabling bearer [ 185.808797][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 185.899567][T10096] netlink: 'syz.3.1043': attribute type 1 has an invalid length. [ 185.993323][T10099] gtp0: entered promiscuous mode [ 186.021390][T10103] netlink: 'syz.1.1047': attribute type 10 has an invalid length. [ 186.046607][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.075437][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.151436][T10103] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 186.340095][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.363768][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.483177][T10121] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1051'. [ 186.582843][T10127] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1054'. [ 186.858758][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 186.929998][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.113388][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.254013][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.336326][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.471346][ T13] bridge_slave_1: left allmulticast mode [ 187.477104][ T13] bridge_slave_1: left promiscuous mode [ 187.484299][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.495156][ T13] bridge_slave_0: left allmulticast mode [ 187.501166][ T13] bridge_slave_0: left promiscuous mode [ 187.506900][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.849447][T10151] openvswitch: netlink: Actions may not be safe on all matching packets [ 187.888768][T10158] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1062'. [ 187.898733][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 187.949847][T10159] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1062'. [ 187.973285][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.033514][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.081249][ T13] bond0 (unregistering): Released all slaves [ 188.339043][T10170] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1066'. [ 188.348420][T10163] team0: Port device geneve0 removed [ 188.433219][T10178] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1066'. [ 188.452373][T10163] bond0: (slave wlan1): Releasing backup interface [ 188.512073][T10178] nbd: device at index 64 is going down [ 188.530062][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 188.553551][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 188.562419][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 188.582343][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 188.590204][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 188.921355][T10197] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.1070'. [ 188.938880][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 189.609434][ T13] hsr_slave_0: left promiscuous mode [ 189.622591][T10238] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1079'. [ 189.632553][ T13] hsr_slave_1: left promiscuous mode [ 189.640442][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.651670][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.662444][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.672440][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.689364][T10241] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1079'. [ 189.704504][ T13] veth1_macvtap: left promiscuous mode [ 189.715310][ T13] veth0_macvtap: left promiscuous mode [ 189.724893][ T13] veth1_vlan: left promiscuous mode [ 189.737805][ T13] veth0_vlan: left promiscuous mode [ 189.970050][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 190.325351][ T13] team0 (unregistering): Port device team_slave_1 removed [ 190.359513][ T13] team0 (unregistering): Port device team_slave_0 removed [ 190.688780][ T55] Bluetooth: hci3: command tx timeout [ 190.938070][ T30] audit: type=1800 audit(1745672855.630:6): pid=10270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1084" name="memory.events" dev="tmpfs" ino=1233 res=0 errno=0 [ 191.008750][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 191.176669][T10278] netlink: 'syz.1.1085': attribute type 10 has an invalid length. [ 191.284758][T10275] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 191.425613][T10278] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 191.463117][T10281] bond0: entered promiscuous mode [ 191.483537][T10281] batadv0: entered promiscuous mode [ 191.510899][T10281] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 191.554692][T10281] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 191.584471][T10281] bond0: left promiscuous mode [ 191.608762][T10281] batadv0: left promiscuous mode [ 191.622945][T10297] netlink: 'syz.3.1089': attribute type 64 has an invalid length. [ 191.636543][T10297] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1089'. [ 191.684389][T10182] chnl_net:caif_netlink_parms(): no params data found [ 191.696261][T10296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.949491][T10314] netlink: 'syz.2.1091': attribute type 5 has an invalid length. [ 192.048763][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 192.134843][T10324] netlink: 252 bytes leftover after parsing attributes in process `syz.4.1094'. [ 192.389836][T10182] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.411433][T10182] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.448053][T10182] bridge_slave_0: entered allmulticast mode [ 192.448781][T10343] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1098'. [ 192.472777][T10182] bridge_slave_0: entered promiscuous mode [ 192.507355][T10182] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.523466][T10182] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.561112][T10182] bridge_slave_1: entered allmulticast mode [ 192.571097][T10182] bridge_slave_1: entered promiscuous mode [ 192.710337][T10357] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1100'. [ 192.753429][T10357] netlink: 'syz.4.1100': attribute type 10 has an invalid length. [ 192.769293][ T55] Bluetooth: hci3: command tx timeout [ 192.782310][T10357] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1100'. [ 192.794749][T10357] dummy0: entered promiscuous mode [ 192.801133][T10357] batman_adv: batadv0: Interface deactivated: dummy0 [ 192.808107][T10357] batman_adv: batadv0: Removing interface: dummy0 [ 192.816684][T10357] bridge0: port 4(dummy0) entered blocking state [ 192.835845][T10357] bridge0: port 4(dummy0) entered disabled state [ 192.855233][T10357] dummy0: entered allmulticast mode [ 192.900256][T10182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.956728][T10182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.962985][T10364] x_tables: duplicate underflow at hook 1 [ 193.098670][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 193.225490][T10182] team0: Port device team_slave_0 added [ 193.243823][T10382] sctp: [Deprecated]: syz.4.1108 (pid 10382) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.243823][T10382] Use struct sctp_sack_info instead [ 193.304591][T10182] team0: Port device team_slave_1 added [ 193.505895][T10182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.549123][T10182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.550040][T10402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1113'. [ 193.596153][T10182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.620305][T10404] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1113'. [ 193.652955][T10394] bond4: entered promiscuous mode [ 193.658184][T10394] bond4: entered allmulticast mode [ 193.669021][T10394] 8021q: adding VLAN 0 to HW filter on device bond4 [ 193.718180][T10397] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1112'. [ 193.731827][T10182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.739609][T10182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.767790][T10182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.966131][T10182] hsr_slave_0: entered promiscuous mode [ 193.996357][T10182] hsr_slave_1: entered promiscuous mode [ 194.036111][T10182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.078644][T10182] Cannot create hsr debugfs directory [ 194.128691][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 194.214261][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.305681][T10424] veth0: entered promiscuous mode [ 194.413823][T10424] veth0: left promiscuous mode [ 194.849397][ T55] Bluetooth: hci3: command tx timeout [ 195.168838][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 196.047300][T10513] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1136'. [ 196.104659][T10513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1136'. [ 196.208738][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 196.415157][T10182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 196.464188][T10534] netlink: 'syz.2.1141': attribute type 20 has an invalid length. [ 196.497361][T10182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 196.595245][T10182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 196.712898][T10182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 196.868523][T10549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1144'. [ 196.913422][T10549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1144'. [ 196.929803][ T55] Bluetooth: hci3: command tx timeout [ 197.039383][ T24] hid-generic 0005:699A:5505.0001: unknown main item tag 0x0 [ 197.076217][ T24] hid-generic 0005:699A:5505.0001: unknown main item tag 0x0 [ 197.138341][ T24] hid-generic 0005:699A:5505.0001: unknown main item tag 0x0 [ 197.200757][ T24] hid-generic 0005:699A:5505.0001: unknown main item tag 0x0 [ 197.248671][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 197.250483][ T24] hid-generic 0005:699A:5505.0001: unknown main item tag 0x0 [ 197.313503][ T24] hid-generic 0005:699A:5505.0001: unknown main item tag 0x0 [ 197.354702][ T24] hid-generic 0005:699A:5505.0001: unknown main item tag 0x1 [ 197.380100][T10182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.396467][ T24] hid-generic 0005:699A:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz1] on aa:aa:aa:aa:aa:aa [ 197.446322][T10182] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.483680][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.490960][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.543577][ T9315] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.550806][ T9315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.239012][T10591] netlink: 'syz.2.1153': attribute type 4 has an invalid length. [ 198.256024][T10598] ªªªªªª: renamed from vlan0 [ 198.288681][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 199.343322][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 200.075788][T10633] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 200.083904][T10633] team0: Device ipvlan2 is already an upper device of the team interface [ 200.368678][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 200.381504][T10646] netdevsim netdevsim4: Direct firmware load for . [ 200.381504][T10646] failed with error -2 [ 200.397649][T10182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.423057][T10646] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 200.423057][T10646] [ 200.694738][T10182] veth0_vlan: entered promiscuous mode [ 200.742476][T10182] veth1_vlan: entered promiscuous mode [ 200.834919][T10182] veth0_macvtap: entered promiscuous mode [ 200.873073][T10182] veth1_macvtap: entered promiscuous mode [ 200.982511][T10182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.013164][T10182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.073899][T10182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.108058][T10182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.108661][T10678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1175'. [ 201.119803][T10182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.140936][T10684] xt_bpf: check failed: parse error [ 201.148781][T10182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.164556][T10686] netlink: 'syz.4.1176': attribute type 1 has an invalid length. [ 201.176101][T10182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.219677][T10690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1176'. [ 201.391382][T10686] 8021q: adding VLAN 0 to HW filter on device bond3 [ 201.408640][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 201.415898][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 201.415943][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 201.445574][T10703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1180'. [ 201.507788][T10708] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1180'. [ 201.538442][T10182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.565361][T10182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.594567][T10182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.610503][T10182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.624616][T10182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.637852][T10182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.705649][T10182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.778294][T10182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.813902][T10182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.832083][T10182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.844621][T10182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.995967][T10726] netlink: 'syz.2.1183': attribute type 1 has an invalid length. [ 202.026467][T10727] netlink: 'syz.1.1184': attribute type 1 has an invalid length. [ 202.098920][T10727] netlink: 'syz.1.1184': attribute type 4 has an invalid length. [ 202.121690][T10727] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1184'. [ 202.313216][ T9315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.321627][ T9315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.445980][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.458702][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 202.499258][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.619740][T10748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1189'. [ 202.651212][T10748] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1189'. [ 202.685598][T10751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.977227][T10761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1190'. [ 203.039826][T10765] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1191'. [ 203.242097][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.409622][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.488647][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 203.534263][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.641211][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.834714][ T13] bridge_slave_1: left allmulticast mode [ 203.855600][ T13] bridge_slave_1: left promiscuous mode [ 203.868139][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.886624][ T13] bridge_slave_0: left allmulticast mode [ 203.896818][ T13] bridge_slave_0: left promiscuous mode [ 203.903628][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.258243][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.272599][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.282898][ T13] bond0 (unregistering): Released all slaves [ 204.528745][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 205.001789][T10822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1202'. [ 205.090720][T10829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1201'. [ 205.115090][T10820] pimreg: entered allmulticast mode [ 205.171197][T10830] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1201'. [ 205.209487][T10824] pimreg: left allmulticast mode [ 205.293209][T10834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1204'. [ 205.310699][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 205.329133][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 205.337801][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 205.361308][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 205.381432][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 205.426952][T10840] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1204'. [ 205.515562][T10838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.563743][ T13] hsr_slave_0: left promiscuous mode [ 205.569195][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 205.617471][ T13] hsr_slave_1: left promiscuous mode [ 205.641133][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.666039][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.697588][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.718804][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.843735][ T13] veth1_macvtap: left promiscuous mode [ 205.867825][ T13] veth0_macvtap: left promiscuous mode [ 205.896477][ T13] veth1_vlan: left promiscuous mode [ 205.917008][ T13] veth0_vlan: left promiscuous mode [ 206.608648][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 206.824256][ T13] team0 (unregistering): Port device team_slave_1 removed [ 206.882973][ T13] team0 (unregistering): Port device team_slave_0 removed [ 207.248833][T10829] __nla_validate_parse: 2 callbacks suppressed [ 207.248854][T10829] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1201'. [ 207.409318][ T5849] Bluetooth: hci3: command tx timeout [ 207.544761][T10917] netlink: 'syz.2.1215': attribute type 18 has an invalid length. [ 207.658724][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 207.714457][T10922] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1217'. [ 207.971724][T10933] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1220'. [ 208.214006][T10835] chnl_net:caif_netlink_parms(): no params data found [ 208.690211][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 208.766259][T10835] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.783167][T10835] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.818833][T10835] bridge_slave_0: entered allmulticast mode [ 208.846171][T10835] bridge_slave_0: entered promiscuous mode [ 208.863928][ T9315] tipc: Subscription rejected, illegal request [ 208.872914][T10835] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.907194][T10835] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.935024][T10835] bridge_slave_1: entered allmulticast mode [ 208.968393][T10835] bridge_slave_1: entered promiscuous mode [ 209.006110][T10992] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1231'. [ 209.131680][T10835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.199843][T10835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.444443][T10835] team0: Port device team_slave_0 added [ 209.477737][T10835] team0: Port device team_slave_1 added [ 209.489672][ T5849] Bluetooth: hci3: command tx timeout [ 209.656904][T11020] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1235'. [ 209.728659][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 209.964514][T11034] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1238'. [ 210.107569][T10835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.121468][T10835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.197573][T10835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.219045][T10835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.226314][T10835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.293999][T10835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.306685][T11028] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1238'. [ 210.330373][ T5849] block nbd2: Receive control failed (result -32) [ 210.655938][T10835] hsr_slave_0: entered promiscuous mode [ 210.673146][T10835] hsr_slave_1: entered promiscuous mode [ 210.683433][T10835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.695227][T10835] Cannot create hsr debugfs directory [ 210.778712][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 210.930480][T11066] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1247'. [ 210.973833][T11066] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1247'. [ 211.051318][T11071] netlink: 'syz.4.1248': attribute type 30 has an invalid length. [ 211.484562][T11088] 8021q: adding VLAN 0 to HW filter on device bond3 [ 211.499954][T11088] bond0: (slave bond3): Enslaving as an active interface with an up link [ 211.573824][ T5849] Bluetooth: hci3: command tx timeout [ 211.596758][T11091] can: request_module (can-proto-3) failed. [ 211.773029][T11098] netdevsim netdevsim1: Direct firmware load for +. failed with error -2 [ 211.808738][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 211.828724][T11098] netdevsim netdevsim1: Falling back to sysfs fallback for: +. [ 212.253802][T11115] lo: entered allmulticast mode [ 212.269720][T11079] lo: left allmulticast mode [ 212.840221][T11153] openvswitch: netlink: Missing valid actions attribute. [ 212.847336][T11153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.856390][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 213.075506][T10835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 213.112525][T11170] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1270'. [ 213.144851][T11170] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1270'. [ 213.166641][T10835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 213.224758][T10835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 213.276297][T10835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 213.650494][ T5849] Bluetooth: hci3: command tx timeout [ 213.670398][T11197] pim6reg527: entered allmulticast mode [ 213.695967][T11204] tipc: New replicast peer: 255.255.255.255 [ 213.722510][T11204] tipc: Enabled bearer , priority 10 [ 213.748401][T10835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.789320][T10835] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.822054][ T1055] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.829304][ T1055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.881679][ T9315] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.888931][ T9315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.898778][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 214.179845][T11222] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1283'. [ 214.400589][T11233] veth0: entered promiscuous mode [ 214.418159][T11231] veth0: left promiscuous mode [ 214.620635][T11241] bond0: (slave bridge0): Releasing backup interface [ 214.662307][T11247] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1289'. [ 214.845621][T10835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.928787][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 215.078661][T10835] veth0_vlan: entered promiscuous mode [ 215.125223][T10835] veth1_vlan: entered promiscuous mode [ 215.197544][T11271] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1294'. [ 215.462179][T10835] veth0_macvtap: entered promiscuous mode [ 215.491039][T11275] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1295'. [ 215.497767][T10835] veth1_macvtap: entered promiscuous mode [ 215.558240][T10835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.592351][T11277] xt_nfacct: accounting object `syz1' does not exists [ 215.599130][T10835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.618857][T10835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.638046][T10835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.649508][T10835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.667075][T10835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.705728][T10835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.763206][T10835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.787915][T10835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.827618][T10835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.851856][T10835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.867343][T10835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.908692][T10835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.924623][T10835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.978748][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 215.983944][T10835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.046853][T10835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.085733][T10835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.096415][T10835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.110932][T11299] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1303'. [ 216.330478][T11315] openvswitch: netlink: IP tunnel TTL not specified. [ 216.348010][T11315] x_tables: ip_tables: ah match: only valid for protocol 51 [ 216.588670][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.596538][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.740489][ T2994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.794233][ T2994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.008733][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 217.528024][ T9315] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.655508][T11365] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1316'. [ 217.718058][T11365] nbd: socks must be embedded in a SOCK_ITEM attr [ 217.740782][T11366] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1316'. [ 217.771600][ T7949] block nbd64: NBD_DISCONNECT [ 217.791961][T11366] nbd: device at index 64 is going down [ 217.804118][ T9315] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.037004][ T9315] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.048831][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 218.155091][ T9315] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.300051][ T9315] bridge_slave_1: left allmulticast mode [ 218.305753][ T9315] bridge_slave_1: left promiscuous mode [ 218.312484][ T9315] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.323482][ T9315] bridge_slave_0: left allmulticast mode [ 218.329500][ T9315] bridge_slave_0: left promiscuous mode [ 218.336041][ T9315] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.635501][ T9315] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.647867][ T9315] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.698211][ T9315] bond0 (unregistering): Released all slaves [ 218.739380][T11382] SET target dimension over the limit! [ 219.098624][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 219.141395][T11399] netlink: 'syz.3.1325': attribute type 1 has an invalid length. [ 219.146647][T11398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1324'. [ 219.227995][T11399] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1325'. [ 219.618814][ T9315] hsr_slave_0: left promiscuous mode [ 219.620055][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 219.640170][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 219.648173][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 219.669345][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 219.679267][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 219.679310][ T9315] hsr_slave_1: left promiscuous mode [ 219.754428][ T9315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.763491][ T9315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.842097][ T9315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.860269][ T9315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.896957][ T9315] veth1_macvtap: left promiscuous mode [ 219.928782][ T9315] veth0_macvtap: left promiscuous mode [ 219.934843][ T9315] veth1_vlan: left promiscuous mode [ 219.949197][ T9315] veth0_vlan: left promiscuous mode [ 220.128669][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 220.632717][T11461] netlink: 'syz.4.1337': attribute type 11 has an invalid length. [ 220.642447][T11461] netlink: 'syz.4.1337': attribute type 11 has an invalid length. [ 220.652617][T11461] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1337'. [ 220.666067][T11461] netlink: 'syz.4.1337': attribute type 11 has an invalid length. [ 220.678199][T11461] netlink: 'syz.4.1337': attribute type 11 has an invalid length. [ 220.688991][T11461] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1337'. [ 220.708756][T11461] netlink: 'syz.4.1337': attribute type 11 has an invalid length. [ 220.716712][T11461] netlink: 'syz.4.1337': attribute type 11 has an invalid length. [ 220.732185][T11461] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1337'. [ 220.742686][T11461] netlink: 'syz.4.1337': attribute type 11 has an invalid length. [ 220.751398][T11461] netlink: 'syz.4.1337': attribute type 11 has an invalid length. [ 220.759979][T11461] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1337'. [ 220.769946][T11461] netlink: 'syz.4.1337': attribute type 11 has an invalid length. [ 220.777965][T11461] netlink: 'syz.4.1337': attribute type 11 has an invalid length. [ 220.786436][T11461] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1337'. [ 220.796259][T11461] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1337'. [ 220.805622][T11461] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1337'. [ 220.817522][T11461] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1337'. [ 221.002240][ T9315] team0 (unregistering): Port device team_slave_1 removed [ 221.076886][ T9315] team0 (unregistering): Port device team_slave_0 removed [ 221.178641][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 221.809131][ T5836] Bluetooth: hci3: command tx timeout [ 222.208665][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 222.302400][T11420] chnl_net:caif_netlink_parms(): no params data found [ 222.716031][T11420] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.758872][T11420] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.766176][T11420] bridge_slave_0: entered allmulticast mode [ 222.800614][T11420] bridge_slave_0: entered promiscuous mode [ 222.845793][T11532] sock: sock_timestamping_bind_phc: sock not bind to device [ 222.847258][T11420] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.902602][T11420] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.920844][T11420] bridge_slave_1: entered allmulticast mode [ 222.935038][T11420] bridge_slave_1: entered promiscuous mode [ 223.052686][T11420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.106950][T11420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.248635][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 223.263383][T11420] team0: Port device team_slave_0 added [ 223.284507][T11420] team0: Port device team_slave_1 added [ 223.470131][T11420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.477231][T11420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.512331][T11420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.604291][T11420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.614636][T11420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.712052][T11420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.888951][ T5836] Bluetooth: hci3: command tx timeout [ 224.124642][T11420] hsr_slave_0: entered promiscuous mode [ 224.132400][T11420] hsr_slave_1: entered promiscuous mode [ 224.189506][T11420] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.197115][T11420] Cannot create hsr debugfs directory [ 224.298759][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 225.043339][T11632] __nla_validate_parse: 73 callbacks suppressed [ 225.043363][T11632] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1372'. [ 225.245206][T11634] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1372'. [ 225.319293][T11642] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1374'. [ 225.338744][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 225.342364][T11642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1374'. [ 225.439163][T11652] Cannot find del_set index 3 as target [ 225.441634][T11641] pim6reg: entered allmulticast mode [ 225.480358][T11652] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1376'. [ 225.732441][T11659] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 225.781622][T11658] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1378'. [ 225.819156][T11658] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 225.970546][ T5836] Bluetooth: hci3: command tx timeout [ 226.096634][T11420] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 226.221440][T11420] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 226.295554][T11420] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 226.365439][T11420] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 226.378752][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 226.524133][T11693] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.648796][T11693] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.886816][T11693] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.949386][T11724] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1391'. [ 226.998131][T11693] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.175062][T11420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.283738][T11420] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.355607][ T3422] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.362855][ T3422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.399408][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.406636][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.418723][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 227.544552][T11693] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.622853][T11693] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.654811][T11744] netlink: 'syz.3.1396': attribute type 21 has an invalid length. [ 227.675873][T11744] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1396'. [ 227.767473][T11693] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.832474][T11693] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.919175][T11751] geneve2: entered promiscuous mode [ 227.924457][T11751] geneve2: entered allmulticast mode [ 227.950233][T11759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1399'. [ 228.048891][ T5836] Bluetooth: hci3: command tx timeout [ 228.458647][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 228.608214][T11792] netlink: 1836 bytes leftover after parsing attributes in process `syz.1.1407'. [ 228.635121][T11791] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 228.713966][T11420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.843632][T11420] veth0_vlan: entered promiscuous mode [ 228.893544][T11420] veth1_vlan: entered promiscuous mode [ 229.021914][T11420] veth0_macvtap: entered promiscuous mode [ 229.042812][T11420] veth1_macvtap: entered promiscuous mode [ 229.091339][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.138337][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.168878][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.213768][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.242803][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.266186][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.280204][T11420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.292130][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.318610][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.338604][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.361424][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.380359][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.398624][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.430915][T11420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.486867][T11420] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.495813][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 229.525310][T11420] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.544286][T11420] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.559934][T11420] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.887987][T11827] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 230.067744][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.113433][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.324707][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.340906][T11853] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 230.369320][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.378169][T11852] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 230.425450][T11852] pimreg: entered allmulticast mode [ 230.538719][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 230.557550][T11859] netlink: 'syz.1.1422': attribute type 1 has an invalid length. [ 230.654965][T11859] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 231.144776][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.325693][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.425920][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.495836][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.568709][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 231.669423][ T13] bridge_slave_1: left allmulticast mode [ 231.675123][ T13] bridge_slave_1: left promiscuous mode [ 231.694370][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.710849][ T13] bridge_slave_0: left allmulticast mode [ 231.716553][ T13] bridge_slave_0: left promiscuous mode [ 231.728394][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.274687][T11912] __nla_validate_parse: 2 callbacks suppressed [ 232.274718][T11912] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.1431'. [ 232.578320][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.610019][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 232.655322][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.676804][ T13] bond0 (unregistering): Released all slaves [ 232.761664][T11936] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1437'. [ 232.868252][T11936] delete_channel: no stack [ 233.137909][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 233.147595][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 233.163920][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 233.175549][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 233.183053][ T5848] Bluetooth: hci4: link tx timeout [ 233.189208][ T5848] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 233.198262][ T5848] Bluetooth: hci4: link tx timeout [ 233.204513][ T5848] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.213058][ T5849] Bluetooth: hci4: link tx timeout [ 233.218271][ T5849] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 233.226308][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 233.233447][ T5849] Bluetooth: hci4: link tx timeout [ 233.238869][ T5849] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.247327][ T5849] Bluetooth: hci4: link tx timeout [ 233.252753][ T5849] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 233.260968][ T5849] Bluetooth: hci4: link tx timeout [ 233.266183][ T5849] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.274437][ T5849] Bluetooth: hci4: link tx timeout [ 233.279765][ T5849] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 233.289833][ T5849] Bluetooth: hci4: link tx timeout [ 233.295093][ T5849] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.302992][ T5849] Bluetooth: hci4: link tx timeout [ 233.308207][ T5849] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 233.316027][ T5849] Bluetooth: hci4: link tx timeout [ 233.321335][ T5849] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.641678][ T13] hsr_slave_0: left promiscuous mode [ 233.648649][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 233.677810][ T13] hsr_slave_1: left promiscuous mode [ 233.693866][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.706712][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.720182][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.727787][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.771710][ T13] veth1_macvtap: left promiscuous mode [ 233.804461][ T13] veth0_macvtap: left promiscuous mode [ 233.818746][ T13] veth1_vlan: left promiscuous mode [ 233.834302][ T13] veth0_vlan: left promiscuous mode [ 234.478121][ T13] team0 (unregistering): Port device team_slave_1 removed [ 234.554756][ T13] team0 (unregistering): Port device team_slave_0 removed [ 234.656270][T12007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1448'. [ 234.688683][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 235.242206][T12022] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1449'. [ 235.257605][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 235.315011][T12024] sctp: [Deprecated]: syz.2.1449 (pid 12024) Use of struct sctp_assoc_value in delayed_ack socket option. [ 235.315011][T12024] Use struct sctp_sack_info instead [ 235.341497][ T5849] Bluetooth: hci3: command tx timeout [ 235.440723][T12029] sctp: [Deprecated]: syz.2.1449 (pid 12029) Use of struct sctp_assoc_value in delayed_ack socket option. [ 235.440723][T12029] Use struct sctp_sack_info instead [ 235.728748][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 235.831145][T12045] tunl0: entered promiscuous mode [ 235.858180][T12045] netlink: 'syz.1.1453': attribute type 3 has an invalid length. [ 235.873038][T12045] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1453'. [ 236.100430][T11950] chnl_net:caif_netlink_parms(): no params data found [ 236.288044][T12072] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1462'. [ 236.402225][T12084] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1461'. [ 236.598259][T11950] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.628449][T11950] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.658367][T11950] bridge_slave_0: entered allmulticast mode [ 236.683818][T11950] bridge_slave_0: entered promiscuous mode [ 236.694906][T11950] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.713248][T11950] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.736544][T11950] bridge_slave_1: entered allmulticast mode [ 236.748164][T12099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1465'. [ 236.768762][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 236.776088][T11950] bridge_slave_1: entered promiscuous mode [ 236.851036][T12104] netlink: 'syz.1.1466': attribute type 21 has an invalid length. [ 236.864695][T12099] vlan0: entered allmulticast mode [ 236.875631][T12099] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 236.982934][T12104] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1466'. [ 237.051333][T11950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.085813][T11950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.285343][T11950] team0: Port device team_slave_0 added [ 237.320900][T11950] team0: Port device team_slave_1 added [ 237.408849][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 237.415130][ T5848] Bluetooth: hci3: command tx timeout [ 237.572214][T11950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.598488][T11950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.646916][T11950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.669159][T11950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.685321][T11950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.716707][T11950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.765877][T12134] nbd: must specify an index to disconnect [ 237.808648][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 237.955075][T11950] hsr_slave_0: entered promiscuous mode [ 237.964879][T11950] hsr_slave_1: entered promiscuous mode [ 238.013153][T11950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.021979][T11950] Cannot create hsr debugfs directory [ 238.569324][T12168] set match dimension is over the limit! [ 238.848634][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 238.900618][T12187] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1482'. [ 239.206077][T12205] openvswitch: netlink: IPv4 tun info is not correct [ 239.237346][T12205] netlink: 'syz.2.1486': attribute type 1 has an invalid length. [ 239.435842][T12209] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 239.447621][T12209] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 239.462090][T12209] bond5: (slave wireguard0): making interface the new active one [ 239.470523][T12209] bond5: (slave wireguard0): Enslaving as an active interface with an up link [ 239.488895][ T55] Bluetooth: hci3: command tx timeout [ 239.495357][T12212] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1488'. [ 239.888634][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 240.074926][T11950] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 240.088792][T12239] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1494'. [ 240.140989][T12245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1494'. [ 240.154181][T11950] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 240.199576][T12251] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1494'. [ 240.243799][T12245] bridge_slave_1: left allmulticast mode [ 240.267628][T12245] bridge_slave_1: left promiscuous mode [ 240.283481][T12245] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.316020][T12245] bridge_slave_0: left allmulticast mode [ 240.324817][T12245] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.433780][T11950] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 240.467633][T11950] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 240.853469][T11950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.927095][T11950] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.928783][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 240.959042][T12280] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1502'. [ 240.988584][ T1055] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.995826][ T1055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.048690][T12286] 8021q: VLANs not supported on lo [ 241.055344][T12287] 8021q: VLANs not supported on lo [ 241.062571][T12280] bond0: entered allmulticast mode [ 241.075585][ T1055] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.082877][ T1055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.564787][T12304] netlink: 'syz.4.1508': attribute type 4 has an invalid length. [ 241.569068][ T55] Bluetooth: hci3: command tx timeout [ 241.943191][T11950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.968720][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 242.094047][T11950] veth0_vlan: entered promiscuous mode [ 242.128377][T11950] veth1_vlan: entered promiscuous mode [ 242.231535][T12346] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1518'. [ 242.233812][T12348] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1519'. [ 242.308464][T12346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1518'. [ 242.337889][T11950] veth0_macvtap: entered promiscuous mode [ 242.374837][T11950] veth1_macvtap: entered promiscuous mode [ 242.490797][T11950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.519215][T11950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.548817][T11950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.571534][T11950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.607342][T11950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.626517][T11950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.649003][T11950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.742769][T11950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.785692][T11950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.805191][T11950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.816700][T11950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.843159][T11950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.868713][T11950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.887291][T11950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.008709][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 243.129028][T11950] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.149426][T11950] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.177162][T11950] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.196209][T11950] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.565354][T12419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.616462][T12419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.720232][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.778187][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.048673][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 244.491059][T12478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1542'. [ 244.539775][T12419] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.665886][T12471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.718192][T12471] batadv_slave_1: entered promiscuous mode [ 244.827741][T12419] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.046713][T12419] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.088740][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 245.184096][T12419] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.363901][T12419] bridge_slave_1: left allmulticast mode [ 245.370973][T12419] bridge_slave_1: left promiscuous mode [ 245.377770][T12419] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.403492][T12419] bridge_slave_0: left allmulticast mode [ 245.410038][T12419] bridge_slave_0: left promiscuous mode [ 245.415834][T12419] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.828300][T12419] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.847643][T12419] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.859159][T12419] bond0 (unregistering): Released all slaves [ 246.016316][T12531] netlink: 'syz.3.1547': attribute type 1 has an invalid length. [ 246.128639][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 246.257704][T12540] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 246.366430][T12550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1552'. [ 246.565615][T12558] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1555'. [ 246.620069][T12560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1554'. [ 246.629174][T12560] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 246.637381][T12560] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.859017][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 246.898177][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 246.910213][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 246.918228][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 246.925362][T12566] netlink: 'syz.3.1556': attribute type 1 has an invalid length. [ 246.945688][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 247.168638][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 247.233338][T12419] hsr_slave_0: left promiscuous mode [ 247.258336][T12598] ipt_ECN: cannot use operation on non-tcp rule [ 247.272710][T12419] hsr_slave_1: left promiscuous mode [ 247.279447][T12419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.293029][T12419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.344586][T12419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.363966][T12419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.416550][T12419] veth1_macvtap: left promiscuous mode [ 247.422393][T12419] veth0_macvtap: left promiscuous mode [ 247.435729][T12419] veth1_vlan: left promiscuous mode [ 247.445636][T12419] veth0_vlan: left promiscuous mode [ 247.998435][T12419] team0 (unregistering): Port device team_slave_1 removed [ 248.041192][T12419] team0 (unregistering): Port device team_slave_0 removed [ 248.211488][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 248.414510][T12594] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 248.426526][T12594] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 248.463568][T12618] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 248.805499][T12636] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1568'. [ 249.013522][ T5849] Bluetooth: hci3: command tx timeout [ 249.110979][T12653] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 249.157804][T12657] netlink: 'syz.1.1575': attribute type 21 has an invalid length. [ 249.185058][T12657] netlink: 'syz.1.1575': attribute type 11 has an invalid length. [ 249.198802][T12661] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1577'. [ 249.213062][T12663] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1575'. [ 249.221575][T12580] chnl_net:caif_netlink_parms(): no params data found [ 249.248982][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 249.263903][T12666] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1576'. [ 249.395461][T12672] netlink: 161716 bytes leftover after parsing attributes in process `syz.2.1579'. [ 249.675716][T12693] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 249.846235][T12696] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 249.888782][T12580] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.895964][T12580] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.958228][T12580] bridge_slave_0: entered allmulticast mode [ 250.018241][T12580] bridge_slave_0: entered promiscuous mode [ 250.028093][T12712] tls_set_device_offload: netdev not found [ 250.070539][T12580] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.108981][T12580] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.126518][T12580] bridge_slave_1: entered allmulticast mode [ 250.135848][T12580] bridge_slave_1: entered promiscuous mode [ 250.219242][T12716] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1588'. [ 250.288777][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 250.339358][T12721] netlink: 'syz.1.1591': attribute type 3 has an invalid length. [ 250.376222][T12580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.396370][T12721] trusted_key: syz.1.1591 sent an empty control message without MSG_MORE. [ 250.467245][T12580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.655276][T12580] team0: Port device team_slave_0 added [ 250.677380][T12580] team0: Port device team_slave_1 added [ 250.876465][T12580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.905342][T12580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.968375][T12580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.010535][T12580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.017543][T12580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.098627][ T5849] Bluetooth: hci3: command tx timeout [ 251.104183][T12580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.328796][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 251.451730][T12580] hsr_slave_0: entered promiscuous mode [ 251.472119][T12580] hsr_slave_1: entered promiscuous mode [ 251.487684][T12580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.548695][T12580] Cannot create hsr debugfs directory [ 251.634622][T12796] netlink: 'syz.3.1610': attribute type 1 has an invalid length. [ 252.278387][T12824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1613'. [ 252.318218][T12822] x_tables: duplicate underflow at hook 3 [ 252.368715][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 252.525648][T12833] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1617'. [ 252.547019][T12833] unsupported nlmsg_type 40 [ 252.867499][T12833] syzkaller1: entered promiscuous mode [ 252.880147][T12833] syzkaller1: entered allmulticast mode [ 253.169311][ T5849] Bluetooth: hci3: command tx timeout [ 253.185257][T12580] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 253.226906][T12580] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 253.255243][T12580] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 253.273148][T12864] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1622'. [ 253.314180][T12580] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 253.408680][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 253.646594][T12580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.711841][T12580] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.739446][T12883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1626'. [ 253.751779][T12882] netlink: 'syz.2.1628': attribute type 21 has an invalid length. [ 253.779053][T12413] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.786270][T12413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.810971][T12413] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.818204][T12413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.836915][T12882] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1628'. [ 254.241038][T12580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.268322][T12908] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 254.385882][T12580] veth0_vlan: entered promiscuous mode [ 254.419071][T12580] veth1_vlan: entered promiscuous mode [ 254.448733][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 254.566827][T12580] veth0_macvtap: entered promiscuous mode [ 254.595389][T12580] veth1_macvtap: entered promiscuous mode [ 254.697695][T12580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.738646][T12580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.768813][T12580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.808521][T12580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.868649][T12580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.927558][T12580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.971336][T12580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.006325][T12931] pimreg: entered allmulticast mode [ 255.081225][T12580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.109639][T12580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.129584][T12580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.175064][T12580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.187620][T12580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.235705][T12580] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.258631][ T55] Bluetooth: hci3: command tx timeout [ 255.264524][T12580] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.302041][T12580] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.318737][T12580] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.488679][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 255.586147][T12413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.618221][T12413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.739327][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.755550][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.528668][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 256.569414][T13007] netlink: 13 bytes leftover after parsing attributes in process `syz.4.1657'. [ 256.700808][T13013] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1657'. [ 257.299910][T13028] netlink: 'syz.1.1659': attribute type 1 has an invalid length. [ 257.335540][ T55] Bluetooth: hci3: command 0x0405 tx timeout [ 257.441907][T13049] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1659'. [ 257.568834][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 257.604622][T13049] 8021q: adding VLAN 0 to HW filter on device bond4 [ 257.621333][T13053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1664'. [ 257.656651][T13053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1664'. [ 257.758339][T13053] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.767809][T13053] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.777035][T13053] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.785876][T13053] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.936719][T13074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1667'. [ 258.138392][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.226531][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.317130][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.378230][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.512659][ T62] bridge_slave_1: left allmulticast mode [ 258.518363][ T62] bridge_slave_1: left promiscuous mode [ 258.524614][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.536034][ T62] bridge_slave_0: left allmulticast mode [ 258.541930][ T62] bridge_slave_0: left promiscuous mode [ 258.547654][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.608802][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 258.843631][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.856770][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.870941][ T62] bond0 (unregistering): Released all slaves [ 259.190514][ T62] hsr_slave_0: left promiscuous mode [ 259.196590][ T62] hsr_slave_1: left promiscuous mode [ 259.203343][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.213404][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.222789][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.231787][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.257043][ T62] veth1_macvtap: left promiscuous mode [ 259.262832][ T62] veth0_macvtap: left promiscuous mode [ 259.268510][ T62] veth1_vlan: left promiscuous mode [ 259.274580][ T62] veth0_vlan: left promiscuous mode [ 259.428751][T13097] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1671'. [ 259.648684][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 259.656972][T13106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1668'. [ 260.149318][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 260.161258][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 260.169925][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 260.190221][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 260.207203][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 260.344661][ T62] team0 (unregistering): Port device team_slave_1 removed [ 260.386979][ T62] team0 (unregistering): Port device team_slave_0 removed [ 260.688753][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 261.191327][T13139] netlink: 'syz.3.1678': attribute type 10 has an invalid length. [ 261.285499][T13139] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 261.424952][T13145] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1679'. [ 261.644811][T13126] chnl_net:caif_netlink_parms(): no params data found [ 261.728788][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 261.932707][T13177] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1687'. [ 261.960661][T13126] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.987771][T13126] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.018520][T13126] bridge_slave_0: entered allmulticast mode [ 262.040523][T13126] bridge_slave_0: entered promiscuous mode [ 262.044256][T13181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1688'. [ 262.062913][T13126] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.090607][T13126] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.108528][T13181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1688'. [ 262.118243][T13126] bridge_slave_1: entered allmulticast mode [ 262.150531][T13181] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 262.172435][T13181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.173292][T13126] bridge_slave_1: entered promiscuous mode [ 262.295726][ T55] Bluetooth: hci3: command tx timeout [ 262.297092][T13189] netlink: 284 bytes leftover after parsing attributes in process `syz.1.1690'. [ 262.374575][T13126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.384829][T13191] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1690'. [ 262.417337][T13126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.452363][T13200] openvswitch: netlink: Missing key (keys=40, expected=100) [ 262.604678][T13206] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 2, id = 0 [ 262.618205][T13126] team0: Port device team_slave_0 added [ 262.677832][T13126] team0: Port device team_slave_1 added [ 262.768638][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 262.802904][T13126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.819793][T13126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.894714][T13126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.970697][T13126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.985546][T13126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.018408][T13126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.300321][T13239] netlink: 'syz.2.1702': attribute type 39 has an invalid length. [ 263.320719][T13126] hsr_slave_0: entered promiscuous mode [ 263.327482][T13126] hsr_slave_1: entered promiscuous mode [ 263.370946][T13244] netlink: 'syz.1.1699': attribute type 4 has an invalid length. [ 263.371173][T13126] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.428663][T13126] Cannot create hsr debugfs directory [ 263.455807][T13234] netlink: 'syz.1.1699': attribute type 4 has an invalid length. [ 263.507075][T13242] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1699'. [ 263.638256][T13244] No such timeout policy "syz0" [ 263.808730][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 263.945348][T13268] xt_nat: multiple ranges no longer supported [ 263.991331][T13268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1708'. [ 264.014355][T13271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1710'. [ 264.038789][T13271] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1710'. [ 264.064305][T13271] netlink: 'syz.4.1710': attribute type 14 has an invalid length. [ 264.368718][ T55] Bluetooth: hci3: command tx timeout [ 264.486376][T13296] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 264.669127][T13308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1717'. [ 264.731098][T13310] nla_validate_range_unsigned: 56 callbacks suppressed [ 264.731118][T13310] netlink: 'syz.4.1718': attribute type 11 has an invalid length. [ 264.772603][T13314] netlink: 'syz.4.1718': attribute type 11 has an invalid length. [ 264.848778][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 265.441450][T13336] dvmrp0: left allmulticast mode [ 265.468882][T13336] pimreg: left allmulticast mode [ 265.888850][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 266.448735][ T55] Bluetooth: hci3: command tx timeout [ 266.928642][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 266.952403][T13390] __nla_validate_parse: 3 callbacks suppressed [ 266.952424][T13390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1733'. [ 267.556293][T13126] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 267.683708][T13126] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 267.945451][T13437] openvswitch: netlink: Actions may not be safe on all matching packets [ 267.972862][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 268.417445][T13126] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 268.526144][T13126] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 268.533181][ T55] Bluetooth: hci3: command tx timeout [ 268.657819][T13456] netlink: 'syz.3.1745': attribute type 10 has an invalid length. [ 268.761029][T13460] bond0: (slave ip6tnl2): The slave device specified does not support setting the MAC address [ 268.790427][T13460] bond0: (slave ip6tnl2): Error -95 calling set_mac_address [ 269.008728][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 269.116357][T13473] tipc: Bearer : already 2 bearers with priority 10 [ 269.157098][T13473] tipc: Bearer : trying with adjusted priority [ 269.170617][T13473] tipc: Enabled bearer , priority 9 [ 269.371773][T13126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.422059][T13126] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.486601][ T2911] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.493877][ T2911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.512046][T13495] block nbd1: NBD_DISCONNECT [ 269.516729][T13495] block nbd1: Send disconnect failed -32 [ 269.545663][T13495] block nbd1: shutting down sockets [ 269.570904][ T2911] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.578244][ T2911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.640005][T13495] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1754'. [ 270.048624][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 270.458601][ T5883] IPVS: starting estimator thread 0... [ 270.482255][T13537] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1764'. [ 270.493543][T13537] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1764'. [ 270.502860][T13537] NCSI netlink: No device for ifindex 0 [ 270.570537][T13540] IPVS: using max 32 ests per chain, 76800 per kthread [ 270.635097][T13126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.745348][T13550] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1767'. [ 270.832741][T13126] veth0_vlan: entered promiscuous mode [ 270.911905][T13560] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1770'. [ 270.930389][T13126] veth1_vlan: entered promiscuous mode [ 270.973793][T13561] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1770'. [ 271.013890][T13567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1772'. [ 271.060146][T13126] veth0_macvtap: entered promiscuous mode [ 271.088669][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 271.130727][T13126] veth1_macvtap: entered promiscuous mode [ 271.198946][T13126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.232009][T13126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.278921][T13126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.295219][T13126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.321553][T13126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.342576][T13126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.364679][T13126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.395033][T13580] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1775'. [ 271.429082][T13580] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1775'. [ 271.481547][T13126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.518702][T13126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.575297][T13126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.608800][T13126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.650586][T13126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.684804][T13126] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.708010][T13126] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.743188][T13126] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.778497][T13126] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.067516][T12419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.096245][T12419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.128648][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 272.227151][T13608] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 272.307553][T12420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.325921][T12420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.352409][T13618] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1781'. [ 272.420689][T13618] tipc: Enabled bearer , priority 0 [ 272.613970][T13618] syzkaller0: entered promiscuous mode [ 272.648766][T13618] syzkaller0: entered allmulticast mode [ 272.667469][T13618] tipc: Resetting bearer [ 272.782871][T13630] xt_CT: No such helper "pptp" [ 272.834737][T13614] tipc: Resetting bearer [ 273.023596][T13650] netlink: 'syz.4.1786': attribute type 1 has an invalid length. [ 273.034323][T13650] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1786'. [ 273.171999][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 273.429742][ T5887] tipc: Node number set to 16385 [ 274.210880][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 274.302628][T13614] tipc: Disabling bearer [ 274.621216][T13665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1792'. [ 274.673482][T13666] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1792'. [ 274.683946][T13666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1792'. [ 274.841467][T13668] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1793'. [ 274.909936][T12419] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.187921][T12419] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.248709][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 275.274323][T12419] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.346261][T12419] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.593013][T12419] bridge_slave_1: left allmulticast mode [ 275.604292][T12419] bridge_slave_1: left promiscuous mode [ 275.610850][T12419] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.623011][T12419] bridge_slave_0: left allmulticast mode [ 275.628860][T12419] bridge_slave_0: left promiscuous mode [ 275.634680][T12419] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.950420][T12419] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.961317][T12419] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.975352][T12419] bond0 (unregistering): Released all slaves [ 276.288680][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 276.357378][T12419] hsr_slave_0: left promiscuous mode [ 276.392931][T12419] hsr_slave_1: left promiscuous mode [ 276.414360][T12419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.462290][T12419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.537494][T12419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.580803][T12419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.647985][T13735] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1799'. [ 276.667106][T12419] veth1_macvtap: left promiscuous mode [ 276.704475][T12419] veth0_macvtap: left promiscuous mode [ 276.725475][T12419] veth1_vlan: left promiscuous mode [ 276.746589][T12419] veth0_vlan: left promiscuous mode [ 276.873692][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 276.891296][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 276.900973][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 276.912147][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 276.924508][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 277.328669][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 277.351690][T12419] team0 (unregistering): Port device team_slave_1 removed [ 277.391012][T12419] team0 (unregistering): Port device team_slave_0 removed [ 278.206630][T13756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1806'. [ 278.363485][T13771] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1807'. [ 278.368640][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 278.418015][T13773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1809'. [ 278.443349][T13773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1809'. [ 278.456035][T13756] bridge_slave_1 (unregistering): left allmulticast mode [ 278.468637][T13773] netlink: 'syz.3.1809': attribute type 14 has an invalid length. [ 278.488062][T13756] bridge_slave_1 (unregistering): left promiscuous mode [ 278.496096][T13776] netlink: 'syz.1.1810': attribute type 1 has an invalid length. [ 278.504580][T13756] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.725493][T13776] 8021q: adding VLAN 0 to HW filter on device bond5 [ 278.764756][T13778] bond5: (slave ip6gretap2): making interface the new active one [ 278.793966][T13778] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 278.825514][T13778] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 278.836752][T13778] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link [ 278.910936][ T5887] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 279.009819][ T55] Bluetooth: hci3: command tx timeout [ 279.366837][T12419] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 279.408794][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 279.555606][T13742] chnl_net:caif_netlink_parms(): no params data found [ 279.728887][ T5887] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 279.809903][T13836] bridge_slave_0: default FDB implementation only supports local addresses [ 279.828773][T12423] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 279.873709][T13846] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1823'. [ 280.163246][T13856] bond6: entered promiscuous mode [ 280.184850][T13856] bond6: entered allmulticast mode [ 280.209698][T13856] 8021q: adding VLAN 0 to HW filter on device bond6 [ 280.228470][T13742] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.263433][T13742] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.287871][T13742] bridge_slave_0: entered allmulticast mode [ 280.327069][T13742] bridge_slave_0: entered promiscuous mode [ 280.376549][ T2908] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 280.416250][ T2908] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 280.448731][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 280.463757][T13742] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.486983][T13742] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.512134][T13742] bridge_slave_1: entered allmulticast mode [ 280.541911][T13742] bridge_slave_1: entered promiscuous mode [ 280.714965][T13742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.761021][T13742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.981028][T12423] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 281.005648][T13893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1834'. [ 281.063344][T13742] team0: Port device team_slave_0 added [ 281.088673][ T55] Bluetooth: hci3: command tx timeout [ 281.174867][ T5887] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 281.285444][T13742] team0: Port device team_slave_1 added [ 281.488735][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 281.515656][T13742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.557123][T13742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.665041][T13742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.731553][T13742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.753987][T13742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.858643][T13742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.032352][T13954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1848'. [ 282.206207][T13965] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1850'. [ 282.208131][T13742] hsr_slave_0: entered promiscuous mode [ 282.223768][T13742] hsr_slave_1: entered promiscuous mode [ 282.236772][T13742] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.247988][T13742] Cannot create hsr debugfs directory [ 282.289052][T13954] bond0: entered promiscuous mode [ 282.298760][T13954] bond_slave_0: entered promiscuous mode [ 282.317212][T13954] bond_slave_1: entered promiscuous mode [ 282.337461][T13954] bond0: entered allmulticast mode [ 282.354603][T13954] bond_slave_0: entered allmulticast mode [ 282.373323][T13954] bond_slave_1: entered allmulticast mode [ 282.383034][T13959] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 282.478660][T13964] C: renamed from lo (while UP) [ 282.528638][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 282.692983][T13977] netlink: 'syz.1.1853': attribute type 1 has an invalid length. [ 282.807602][T13989] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1855'. [ 283.031649][T13989] bond0 (unregistering): (slave bond3): Releasing backup interface [ 283.087661][T13989] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 283.136229][T13989] bond0 (unregistering): Released all slaves [ 283.170925][ T55] Bluetooth: hci3: command tx timeout [ 283.556836][T14022] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1861'. [ 283.568640][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 283.587566][T14022] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1861'. [ 283.791444][T14031] netlink: 'syz.1.1862': attribute type 64 has an invalid length. [ 283.815576][T14031] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1862'. [ 283.843732][T14036] netlink: 'syz.1.1862': attribute type 64 has an invalid length. [ 283.864756][T14036] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1862'. [ 284.016346][T14039] netlink: 'syz.3.1864': attribute type 8 has an invalid length. [ 284.086681][T14043] netlink: 'syz.3.1864': attribute type 10 has an invalid length. [ 284.253773][T14051] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 284.343443][T14057] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1869'. [ 284.353782][ T2908] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 284.353799][ T2908] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 284.457266][T13742] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 284.498838][T13742] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 284.587293][T14066] mac80211_hwsim hwsim6 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 284.608789][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 284.617080][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 284.626010][T13742] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 284.649120][T13742] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 284.804863][T14077] netlink: 'syz.1.1876': attribute type 32 has an invalid length. [ 284.847703][T14077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1876'. [ 284.942319][T14077] (unnamed net_device) (uninitialized): option coupled_control: invalid value (119) [ 285.048216][T14093] unknown channel width for channel at 909000KHz? [ 285.100333][T13742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.196767][T13742] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.249069][ T55] Bluetooth: hci3: command tx timeout [ 285.319120][ T2911] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.326355][ T2911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.374699][ T2911] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.381926][ T2911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.488359][T13742] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 285.499890][T14121] xt_cgroup: xt_cgroup: no path or classid specified [ 285.501312][T12420] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 285.528749][T14123] netlink: 'syz.2.1887': attribute type 2 has an invalid length. [ 285.553013][T13742] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 285.609154][T14122] netlink: 'syz.4.1888': attribute type 4 has an invalid length. [ 285.648750][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 285.671305][T14122] netlink: 'syz.4.1888': attribute type 4 has an invalid length. [ 286.080924][T13742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.195220][T14157] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1896'. [ 286.222208][T14157] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1896'. [ 286.246090][T13742] veth0_vlan: entered promiscuous mode [ 286.256453][T14161] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 286.267772][T14160] lo speed is unknown, defaulting to 1000 [ 286.273208][T13742] veth1_vlan: entered promiscuous mode [ 286.293153][T14162] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1897'. [ 286.309805][T14162] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 286.339234][T14160] lo speed is unknown, defaulting to 1000 [ 286.348142][T14160] lo speed is unknown, defaulting to 1000 [ 286.376690][T14160] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 286.382640][T13742] veth0_macvtap: entered promiscuous mode [ 286.431008][T13742] veth1_macvtap: entered promiscuous mode [ 286.454258][T14160] infiniband syzB: RDMA CMA: cma_listen_on_dev, error -98 [ 286.472448][T14167] netlink: 'syz.2.1898': attribute type 11 has an invalid length. [ 286.487481][T13742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.525797][T13742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.556623][T13742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.585270][T13742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.596024][T13742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.606764][T13742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.623353][T13742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.648568][T14160] lo speed is unknown, defaulting to 1000 [ 286.670529][ T2911] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 286.688855][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 286.708398][T14171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1899'. [ 286.712331][T13742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.748304][T13742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.778604][T13742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.798590][T13742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.820323][T13742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.834386][T14160] lo speed is unknown, defaulting to 1000 [ 286.847320][T14160] lo speed is unknown, defaulting to 1000 [ 286.853692][T12420] wlan0: Trigger new scan to find an IBSS to join [ 286.854850][T13742] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.873138][T12420] ------------[ cut here ]------------ [ 286.879329][T12420] WARNING: CPU: 1 PID: 12420 at net/mac80211/scan.c:1213 ieee80211_request_ibss_scan+0x82e/0x8b0 [ 286.880547][T13742] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.890550][T12420] Modules linked in: [ 286.903695][T12420] CPU: 1 UID: 0 PID: 12420 Comm: kworker/u8:26 Not tainted 6.15.0-rc3-syzkaller-00109-gf73f05c6f711 #0 PREEMPT(full) [ 286.916822][T12420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 286.920730][T13742] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.927423][T12420] Workqueue: events_unbound cfg80211_wiphy_work [ 286.942758][T12420] RIP: 0010:ieee80211_request_ibss_scan+0x82e/0x8b0 [ 286.950346][T12420] Code: e8 87 c5 f7 f6 eb 05 e8 80 c5 f7 f6 b8 ea ff ff ff e9 fb f8 ff ff e8 71 c5 f7 f6 90 0f 0b 90 e9 bb f8 ff ff e8 63 c5 f7 f6 90 <0f> 0b 90 eb dd 48 c7 c1 50 ed 7e 8f 80 e1 07 80 c1 03 38 c1 0f 8c [ 286.970559][T12420] RSP: 0018:ffffc9000b5378a0 EFLAGS: 00010293 [ 286.977102][T12420] RAX: ffffffff8ac7f81d RBX: 0000000000000000 RCX: ffff8880282a3c00 [ 286.985456][T12420] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 286.993877][T12420] RBP: 0000000000000001 R08: 0000000000000000 R09: 1ffffffff1efd7ce [ 287.002426][T12420] R10: dffffc0000000000 R11: fffffbfff1efd7cf R12: ffff888027e0b268 [ 287.011019][T12420] R13: ffff888027e08e80 R14: dffffc0000000000 R15: 0000000000000c80 [ 287.019361][T12420] FS: 0000000000000000(0000) GS:ffff8881261cf000(0000) knlGS:0000000000000000 [ 287.020523][T13742] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.028295][T12420] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.028314][T12420] CR2: 00007fcd98b16f98 CR3: 000000006b43c000 CR4: 00000000003526f0 [ 287.028335][T12420] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.028350][T12420] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.028365][T12420] Call Trace: [ 287.028375][T12420] [ 287.028401][T12420] ieee80211_ibss_work+0xde7/0x1060 [ 287.082032][T12420] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 287.088176][T12420] ? ieee80211_iface_work+0xf39/0xfe0 [ 287.094059][T12420] ? rcu_is_watching+0x15/0xb0 [ 287.099640][T12420] cfg80211_wiphy_work+0x2dc/0x460 [ 287.105436][T12420] ? process_scheduled_works+0x9ec/0x17a0 [ 287.111514][T12420] process_scheduled_works+0xadb/0x17a0 [ 287.117140][T12420] ? __pfx_process_scheduled_works+0x10/0x10 [ 287.123234][T12420] worker_thread+0x8a0/0xda0 [ 287.127899][T12420] kthread+0x70e/0x8a0 [ 287.132048][T12420] ? __pfx_worker_thread+0x10/0x10 [ 287.137186][T12420] ? __pfx_kthread+0x10/0x10 [ 287.141853][T12420] ? __pfx_kthread+0x10/0x10 [ 287.146479][T12420] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.151747][T12420] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.156987][T12420] ? __pfx_kthread+0x10/0x10 [ 287.161682][T12420] ret_from_fork+0x4b/0x80 [ 287.166129][T12420] ? __pfx_kthread+0x10/0x10 [ 287.170944][T12420] ret_from_fork_asm+0x1a/0x30 [ 287.175752][T12420] [ 287.179117][T12420] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 287.186420][T12420] CPU: 1 UID: 0 PID: 12420 Comm: kworker/u8:26 Not tainted 6.15.0-rc3-syzkaller-00109-gf73f05c6f711 #0 PREEMPT(full) [ 287.198776][T12420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 287.208855][T12420] Workqueue: events_unbound cfg80211_wiphy_work [ 287.215141][T12420] Call Trace: [ 287.218431][T12420] [ 287.221369][T12420] dump_stack_lvl+0x99/0x250 [ 287.225998][T12420] ? __asan_memcpy+0x40/0x70 [ 287.230602][T12420] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.235819][T12420] ? __pfx__printk+0x10/0x10 [ 287.240430][T12420] panic+0x2db/0x790 [ 287.244347][T12420] ? __pfx_panic+0x10/0x10 [ 287.248779][T12420] ? show_trace_log_lvl+0x4fb/0x550 [ 287.254003][T12420] ? ret_from_fork_asm+0x1a/0x30 [ 287.258951][T12420] __warn+0x31b/0x4b0 [ 287.262953][T12420] ? ieee80211_request_ibss_scan+0x82e/0x8b0 [ 287.268948][T12420] ? ieee80211_request_ibss_scan+0x82e/0x8b0 [ 287.274965][T12420] report_bug+0x2be/0x4f0 [ 287.279343][T12420] ? ieee80211_request_ibss_scan+0x82e/0x8b0 [ 287.285350][T12420] ? ieee80211_request_ibss_scan+0x82e/0x8b0 [ 287.291339][T12420] ? ieee80211_request_ibss_scan+0x830/0x8b0 [ 287.297322][T12420] handle_bug+0x84/0x160 [ 287.301569][T12420] exc_invalid_op+0x1a/0x50 [ 287.306078][T12420] asm_exc_invalid_op+0x1a/0x20 [ 287.310931][T12420] RIP: 0010:ieee80211_request_ibss_scan+0x82e/0x8b0 [ 287.317535][T12420] Code: e8 87 c5 f7 f6 eb 05 e8 80 c5 f7 f6 b8 ea ff ff ff e9 fb f8 ff ff e8 71 c5 f7 f6 90 0f 0b 90 e9 bb f8 ff ff e8 63 c5 f7 f6 90 <0f> 0b 90 eb dd 48 c7 c1 50 ed 7e 8f 80 e1 07 80 c1 03 38 c1 0f 8c [ 287.337147][T12420] RSP: 0018:ffffc9000b5378a0 EFLAGS: 00010293 [ 287.343225][T12420] RAX: ffffffff8ac7f81d RBX: 0000000000000000 RCX: ffff8880282a3c00 [ 287.351199][T12420] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 287.359170][T12420] RBP: 0000000000000001 R08: 0000000000000000 R09: 1ffffffff1efd7ce [ 287.367142][T12420] R10: dffffc0000000000 R11: fffffbfff1efd7cf R12: ffff888027e0b268 [ 287.375116][T12420] R13: ffff888027e08e80 R14: dffffc0000000000 R15: 0000000000000c80 [ 287.383202][T12420] ? ieee80211_request_ibss_scan+0x82d/0x8b0 [ 287.389218][T12420] ieee80211_ibss_work+0xde7/0x1060 [ 287.394435][T12420] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 287.400100][T12420] ? ieee80211_iface_work+0xf39/0xfe0 [ 287.405471][T12420] ? rcu_is_watching+0x15/0xb0 [ 287.410336][T12420] cfg80211_wiphy_work+0x2dc/0x460 [ 287.415473][T12420] ? process_scheduled_works+0x9ec/0x17a0 [ 287.421290][T12420] process_scheduled_works+0xadb/0x17a0 [ 287.426882][T12420] ? __pfx_process_scheduled_works+0x10/0x10 [ 287.432894][T12420] worker_thread+0x8a0/0xda0 [ 287.437509][T12420] kthread+0x70e/0x8a0 [ 287.441586][T12420] ? __pfx_worker_thread+0x10/0x10 [ 287.446698][T12420] ? __pfx_kthread+0x10/0x10 [ 287.451379][T12420] ? __pfx_kthread+0x10/0x10 [ 287.455965][T12420] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.461173][T12420] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.466377][T12420] ? __pfx_kthread+0x10/0x10 [ 287.470967][T12420] ret_from_fork+0x4b/0x80 [ 287.475385][T12420] ? __pfx_kthread+0x10/0x10 [ 287.479977][T12420] ret_from_fork_asm+0x1a/0x30 [ 287.484760][T12420] [ 287.488090][T12420] Kernel Offset: disabled [ 287.492432][T12420] Rebooting in 86400 seconds..