last executing test programs: 1m18.546393197s ago: executing program 4 (id=1807): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000305200000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d616373656300000400028008000500", @ANYRES16=r0, @ANYRES64=r1], 0x44}}, 0x8040) 1m17.573835188s ago: executing program 3 (id=1099): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000dc0)={'filter\x00', 0x7, 0x4, 0x3e0, 0x0, 0x1f8, 0xe8, 0x2f8, 0x2f8, 0xe8, 0x4, 0x0, {[{{@arp={@multicast1, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 'pim6reg\x00', 'nicvf0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @broadcast}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d1b7201e6851dcc361a7eb546f513b69c23cd84d078ce2b4e1b29dcf3fb6"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000003d0007010000000000000000037c000014003780100003007174722834a9197334"], 0x28}}, 0xc000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 1m5.458060983s ago: executing program 4 (id=1807): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000305200000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d616373656300000400028008000500", @ANYRES16=r0, @ANYRES64=r1], 0x44}}, 0x8040) 1m4.142045417s ago: executing program 3 (id=1099): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000dc0)={'filter\x00', 0x7, 0x4, 0x3e0, 0x0, 0x1f8, 0xe8, 0x2f8, 0x2f8, 0xe8, 0x4, 0x0, {[{{@arp={@multicast1, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 'pim6reg\x00', 'nicvf0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @broadcast}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d1b7201e6851dcc361a7eb546f513b69c23cd84d078ce2b4e1b29dcf3fb6"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000003d0007010000000000000000037c000014003780100003007174722834a9197334"], 0x28}}, 0xc000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 53.171607349s ago: executing program 4 (id=1807): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000305200000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d616373656300000400028008000500", @ANYRES16=r0, @ANYRES64=r1], 0x44}}, 0x8040) 52.085895094s ago: executing program 3 (id=1099): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000dc0)={'filter\x00', 0x7, 0x4, 0x3e0, 0x0, 0x1f8, 0xe8, 0x2f8, 0x2f8, 0xe8, 0x4, 0x0, {[{{@arp={@multicast1, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 'pim6reg\x00', 'nicvf0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @broadcast}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d1b7201e6851dcc361a7eb546f513b69c23cd84d078ce2b4e1b29dcf3fb6"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000003d0007010000000000000000037c000014003780100003007174722834a9197334"], 0x28}}, 0xc000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 36.284602272s ago: executing program 4 (id=1807): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000305200000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d616373656300000400028008000500", @ANYRES16=r0, @ANYRES64=r1], 0x44}}, 0x8040) 35.595997315s ago: executing program 3 (id=1099): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000dc0)={'filter\x00', 0x7, 0x4, 0x3e0, 0x0, 0x1f8, 0xe8, 0x2f8, 0x2f8, 0xe8, 0x4, 0x0, {[{{@arp={@multicast1, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 'pim6reg\x00', 'nicvf0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @broadcast}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d1b7201e6851dcc361a7eb546f513b69c23cd84d078ce2b4e1b29dcf3fb6"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000003d0007010000000000000000037c000014003780100003007174722834a9197334"], 0x28}}, 0xc000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 22.936201925s ago: executing program 3 (id=1099): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000dc0)={'filter\x00', 0x7, 0x4, 0x3e0, 0x0, 0x1f8, 0xe8, 0x2f8, 0x2f8, 0xe8, 0x4, 0x0, {[{{@arp={@multicast1, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 'pim6reg\x00', 'nicvf0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @broadcast}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d1b7201e6851dcc361a7eb546f513b69c23cd84d078ce2b4e1b29dcf3fb6"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000003d0007010000000000000000037c000014003780100003007174722834a9197334"], 0x28}}, 0xc000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 21.018449644s ago: executing program 4 (id=1807): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000305200000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d616373656300000400028008000500", @ANYRES16=r0, @ANYRES64=r1], 0x44}}, 0x8040) 10.99343132s ago: executing program 3 (id=1099): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000dc0)={'filter\x00', 0x7, 0x4, 0x3e0, 0x0, 0x1f8, 0xe8, 0x2f8, 0x2f8, 0xe8, 0x4, 0x0, {[{{@arp={@multicast1, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 'pim6reg\x00', 'nicvf0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @broadcast}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d1b7201e6851dcc361a7eb546f513b69c23cd84d078ce2b4e1b29dcf3fb6"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000003d0007010000000000000000037c000014003780100003007174722834a9197334"], 0x28}}, 0xc000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 9.088502112s ago: executing program 4 (id=1807): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000305200000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d616373656300000400028008000500", @ANYRES16=r0, @ANYRES64=r1], 0x44}}, 0x8040) 2.337086962s ago: executing program 0 (id=2975): r0 = socket(0x10, 0x803, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x0) ppoll(&(0x7f0000001100)=[{r1, 0x7202}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) (async) ppoll(&(0x7f0000001100)=[{r1, 0x7202}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r2, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x4048001) r3 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000014002101000000000000000002000000", @ANYRES32=r6, @ANYBLOB="b7e5800000a1cdb93890b2371c0d7c1942000000"], 0x20}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000014002101000000000000000002000000", @ANYRES32=r6, @ANYBLOB="b7e5800000a1cdb93890b2371c0d7c1942000000"], 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}}, 0x18}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}}, 0x18}}, 0x0) 2.031603419s ago: executing program 1 (id=2977): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000339393bae63e8d959642c9de73beec2dd6ba7db19a47f2c645ecab913e240abddecd5e31a69f23330c41d1102f9216f807bd62b63bada98ca1522dafab9f33a5ee7ed1c83f932ab5b921209b675f3cde619321f5fd6459389b2233d709fdae8a3331d3ee16770cf5b1b0d67ae4de20703d0e5c792b24d0cbe99b87f9a4ac1bb77887d479deb88a3286cf5fbdadc571529fc0dcce855c02cfbf71366ffc605058636b5533fb1a7144645d6a3d67c49687b6b60d1c623a8273a6061ca7e611c60c8c6", @ANYRES16=0x0, @ANYBLOB="796129bd7000000000007e0000000c0099006d91000015000000"], 0x20}}, 0x4000054) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x88) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455630ecb10f753530ada6598a1ff4805370a5cebf05e199368871b2751c242633419d13a6b05a390d21ab1d44be1254385b3d882c646f9762bf3480e05e98c9cc655adb7caa279e66709794e3b93cda0b9a14794e6d020cc68ea70e71a083e1a2b375591203ce218e8d244cf32f5dd7af0ee1ed032d3b59e4d57136639d68b7577553393a9", 0xf1}, {&(0x7f0000000000)="ef7791000dc7777cb951ca638ea0e1b5d280548c882aa59a68cd17c0e7f23d6d56a03be6caa272b3505e304463179c4d7768d9c3e5c21f3a9963ffde6682e5ecfe30b771e51c8d", 0x47}], 0x2, 0x0, 0x0, 0x2}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/247, 0x138}], 0x1}, 0x7fff}], 0x1, 0x2101, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000080)=0x6, 0x4) sendmmsg$inet(r2, &(0x7f0000000100)=[{{&(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x80) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000600)="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", 0x151) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg$unix(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/19, 0x13}], 0x1}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'bond0\x00', 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000071103e00000000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000339393bae63e8d959642c9de73beec2dd6ba7db19a47f2c645ecab913e240abddecd5e31a69f23330c41d1102f9216f807bd62b63bada98ca1522dafab9f33a5ee7ed1c83f932ab5b921209b675f3cde619321f5fd6459389b2233d709fdae8a3331d3ee16770cf5b1b0d67ae4de20703d0e5c792b24d0cbe99b87f9a4ac1bb77887d479deb88a3286cf5fbdadc571529fc0dcce855c02cfbf71366ffc605058636b5533fb1a7144645d6a3d67c49687b6b60d1c623a8273a6061ca7e611c60c8c6", @ANYRES16=0x0, @ANYBLOB="796129bd7000000000007e0000000c0099006d91000015000000"], 0x20}}, 0x4000054) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) socket$inet6(0xa, 0x80002, 0x88) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5) (async) accept$alg(r3, 0x0, 0x0) (async) sendmmsg$alg(r4, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455630ecb10f753530ada6598a1ff4805370a5cebf05e199368871b2751c242633419d13a6b05a390d21ab1d44be1254385b3d882c646f9762bf3480e05e98c9cc655adb7caa279e66709794e3b93cda0b9a14794e6d020cc68ea70e71a083e1a2b375591203ce218e8d244cf32f5dd7af0ee1ed032d3b59e4d57136639d68b7577553393a9", 0xf1}, {&(0x7f0000000000)="ef7791000dc7777cb951ca638ea0e1b5d280548c882aa59a68cd17c0e7f23d6d56a03be6caa272b3505e304463179c4d7768d9c3e5c21f3a9963ffde6682e5ecfe30b771e51c8d", 0x47}], 0x2, 0x0, 0x0, 0x2}], 0x1, 0x0) (async) recvmmsg(r4, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/247, 0x138}], 0x1}, 0x7fff}], 0x1, 0x2101, 0x0) (async) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000080)=0x6, 0x4) (async) sendmmsg$inet(r2, &(0x7f0000000100)=[{{&(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x80) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000600)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c2ca89405fcba52ad52440214a1d14c8a1ea80615b353275adbdcfc3545dfd30cdc2f0456df0b567f0cc2df37138618c1761f72f2907035f9f64596591da5f21a03f0a5339e2606ac9ed15db41b3637eb5b4a239d6439d0d6ef52dfe89cbaa7f082dde096c2acc25f451e468a1b8323555511b978dd266affddb3f21f490e10e39913ed9e93aa0554b7181ff8c71b2368ce518ffc122021ab7c665b8beec44a971326a3b5611b57853c8530535c07110c707dcea96600563abd1b558b123fef4e24ecbf14dd28a541a87b672dfef7b0672a56da7b2dacf6a607c513a3054ddf9c1a38f9144a34948faa027eeeda5ad6e679cd4822cdcf8646b2ce8d08ff54657b0b4b34e227c82eb819121740f4aa6da5825e5da19566361126ed668cc71255566ef0708850d57a50672b7cc9752ffc578231a0f840eb949818cf0", 0x151) (async) accept4(r5, 0x0, 0x0, 0x0) (async) sendmsg$alg(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) (async) recvmsg$unix(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/19, 0x13}], 0x1}, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'bond0\x00', 0x2}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000071103e00000000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) 1.997856087s ago: executing program 0 (id=2979): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0xfc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xe8, 0x1, [@m_police={0x90, 0x1, 0x0, 0x0, {{0xb}, {0xffffffffffffff98}, {0x61, 0x6, "fb97564f8f470910dd75fcd24a81607f5323d13806d7a349d6c55ebc78f02f1a38c9a920041c793cca89ef5c00000000000000002c032f52f86e65b25b12aa602ed4677fe8255909630e02edcba2f47f75b45f0a50ece7857ea7587dd2"}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0xe7b}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d46, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xfc}}, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x52, 0x1, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20091}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote, 0xfffffffd, 0x32}, @in6=@mcast1, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0xe}, 0x0) 1.861104562s ago: executing program 1 (id=2980): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001080)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/4, 0x4, 0x0, &(0x7f0000000080)=""/4096, 0x1000}, &(0x7f00000010c0)=0x40) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000001180)={'broute\x00', 0x0, 0x0, 0x0, [0x3, 0x6ab4, 0x8df, 0x2, 0x8001, 0x8], 0x2, &(0x7f0000001100)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}]}, 0x98) writev(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000001240)="2c798ebabf7d8470c132b0e94a0092d0eef9f968237b1f27dc057601aa041d195b623fc83aabd849d342e1a57c88280ad4f11ead8492a8c798bdfa82cdcf693ab826217aeea743dd97cc7f428062ac521e3ee569135654a5333dee71cb9fb6edca879c950a6eb1d2af80a85c6617ca4e2cfefa0466086498fb2b66e35815f52119c520d2001edde455cc707ba43ffc3f456ddba59b50b958edfed586b8f1fb205d9b29a838d918a36edea8fd5c96ca", 0xaf}, {&(0x7f0000001300)="36c47f6db596873026556a8b36717cf2d657e65cec043578892d4b500d0dc1194bf147752188c654ca1c51152e83b1cdd4a64b1f5e4f", 0x36}, {&(0x7f0000001340)="9c08089430e9ae25425ca72d144cc93ab92b90becfe72b8b185c1367ce48bff17550023509366fdf779c5c1ddf0eb6df76663afb446ae11c89", 0x39}, {&(0x7f0000001380)="7cc09ea96e59dc43ae6dc3fe1c59d99f8941f4292008af52edea519273f308f884d091bdf9913c0714bba6924ee539ceb55f75ef899742cb5fd68d15b86960fcbab1bdd9e5a750f971e10128337eb1b2d93c85d856e2ca548e77153735d6fc53d19d2cff531b9ae1ef7bd51ffad7135c3655106558617bc7ad9b8afd9750049cccecc7cefd5315a40ce348f75b0149f8e0bd025b58627eb2fb3769285a7670bd036acdea9c92b1905a83158b289c2d5f5d0f8d6880b375140f2b4f0a", 0xbc}, {&(0x7f0000001440)="a856e8800e599a7d0c6671cfd063eaa2f4f441acb679e00f2ebb0b09f124e0dc673c70f2ef7b9bf7ce74d7accd9459542c4ce022bccfd5860729566e88", 0x3d}, {&(0x7f0000001480)}, {&(0x7f00000014c0)="7a60365399b9155b8cd003f8f2f7ed55a0ac20e36e9609afb01dfc0099ff406891aa7d74b8c397a9fcabeeb29fa3ac689504321adfeb348d4a6051cc6aa990e7105f39892912ba59cff6393389", 0x4d}], 0x7) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f00000015c0), &(0x7f0000001600)=0x4) r2 = openat$cgroup_ro(r0, &(0x7f0000001640)='cpuacct.usage_percpu\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000001680)={0x73, @broadcast, 0x4e20, 0x4, 'dh\x00', 0xc, 0x3, 0x31}, 0x2c) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f00000016c0)={'vcan0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000001780)={'broute\x00', 0x0, 0x4, 0x6, [0x8, 0x3, 0xfffffffffffffffa, 0x4, 0x8, 0x4], 0x1, &(0x7f0000001700)=[{}], &(0x7f0000001740)=""/6}, &(0x7f0000001800)=0x78) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000019c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001840)=""/180, 0xb4, 0x0, &(0x7f0000001900)=""/145, 0x91}, &(0x7f0000001a00)=0x40) clock_gettime(0x0, &(0x7f0000001a40)={0x0, 0x0}) nanosleep(&(0x7f0000001a80)={r4, r5+60000000}, &(0x7f0000001ac0)) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000001b00)={{0x0, @local, 0x4e20, 0x1, 'lblcr\x00', 0x24, 0x2, 0x39}, {@local, 0x4e23, 0x1004, 0x1ff, 0xffff379e, 0xb}}, 0x44) socket$rds(0x15, 0x5, 0x0) getsockopt$inet_buf(r0, 0x0, 0x0, &(0x7f0000001b80)=""/210, &(0x7f0000001c80)=0xd2) connect$pppoe(r2, &(0x7f0000001cc0)={0x18, 0x0, {0x1, @broadcast, 'gretap0\x00'}}, 0x1e) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001d00)={0x1b, 0x0, 0x0, 0x1, 0x0, r1, 0xffffffff, '\x00', 0x0, r0, 0x1, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) clock_gettime(0x0, &(0x7f0000001dc0)={0x0, 0x0}) ppoll(&(0x7f0000001d80)=[{r6, 0x1000}, {r7, 0x2}], 0x2, &(0x7f0000001e00)={r8, r9+60000000}, &(0x7f0000001e40)={[0x3]}, 0x8) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001e80)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f0000001ec0)='blkio.bfq.io_service_time\x00', 0x0, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001f40), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r11, &(0x7f0000002000)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x14, r12, 0x634, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x4048001) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NFT_BATCH(r2, &(0x7f0000004580)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004540)={&(0x7f0000002080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x1f20, 0xc, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1edc, 0x3, 0x0, 0x1, [{0x1558, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1240, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x94, 0x1, "fbc02c6ddc4269c4f0b33a5fa2a11dc6aafe1fea08c9ad6e99e363dd424d92497e1d1af405cde8f839aab3338d70c50df449b2a224f2b005c8bcc7cec2ea29b2bbd120047a1e6d4da218c9784625ed56198a6ac7fbd7b4865325b836290d0c5c44bbb5b58f2ab85f3147c26f05bde1f0fbc72b88e478afca59495c7b987cf93d879da8abadb4ea25d8b3f12576eff779"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "5dc162c231108471eb64529f62852481166c60a5ac6a5075e31f2b0d060208e04cb15a33db70649e40899afbd904a5b82ee7615ebde6238affe2fc270c591e7e57a362af7ab52e1e0baf9c0856c87ae37821fb89a2450ad32f8e5b45b4f32f5043f3439c0b25d0ff98ef4d047ed68ac6c20b00c7af8bd1ca1da0408a323b126301ed14b4f27647a52f73811d0c2881dcee7dc1eccd0649c347b71e4ab23847295d1491ecbe113cb13bef7f1c98cfe0bca1b267765998e5dc8d51a0c41b5b360fa3077bf3f7d20f1d102f8ea586b4633fc9d08113db5aab6d4886761bf6396a31c227c71cfcdc2dc9091246a15f3f613a610ac250df64327f4fc1b2d1875707cf80f31a8b2aa5681691da73e4ad567d98e1d454da189e58554977f03df34a628017d4c5c3860aa05105dfdf587be24571a53d6594927e118165ea88bae5e1ce5326c8cbc43cff33b5d47e00161b11270776904d16e30825f42b00f94fab7bba2be841dec357652f3485eb5f7b4a2f129d9de50b0d14514bbd56b279b8cc7aad3f4d1631b9fed899de26625cf63fc165cbc23335d723f73428962a3aada6f0a030a648c71e6866834300cf54c6f660ed324f35c783113501332beb63ec882198cdd69c844ce9cc25bbaebb5576887034fb447cbc77fb0dd5a3b9afd52f8f2ffce2265770ed949436e93a2981d1083772f44928efa13527e14e0b686e56374cbd50efec9c909400cc8264bd74a19a6c788f9e55f68d746d149eed966f268f8d562232e2746ebf127da3607e756788a3c0229d8e7db4a24cd89206f28e1c1140ecc197aabbdc8b3615e40571213d8676cec625613f429e68c1bfe7dd9cc0e177db85c8d9527e26687a10587ea05cd4d0fdd19749e78a2da7da1253b1f9657d52105f4ef819e77d79f08b47f1ae53bd7132dc26ae74ef9f226398c1238968505d3fbd6e25e3af8d511640d83233907521d31952a2d16a637339b3d15b1509ba25b0312593d1d3a8e2359a2279f0e2c212e75ad9d66334d8bb96435cef4587b19ad336e95930aeee42b304163bcde158100ceb60e7443ef4dd577ea05974340a5061cf09db14aeb372d81d3e8b85072517095f035663f62979dc59d304818ffdd07c1b961948ee60848a25cd7b3bf5dbf3cc20f3b3f650c86b80c62ad69a6ba0f3d4824a64aa7991d016e2a54c93ed5c737b4dcb5afb9a41bdb664a5b742a8948d454fb940ec69e8077f52995bc249165e10bc5a1cb36b1d7fbec48849bc93a6365015a65d0c6d94cdf9dff233097548c3c4b59cb38dac658ffa5576cfac93348bc459a4f172b1eed2d83717c139a5797764b64ebb3cc6b8b2454240d282de0c2f4dbc5a306629cf92a7bf9e30d75f38cdc24e1731a0e524f39f8b4d9c31bc5c705234700a8f610d719abda5b8e585491766966a1e3054a6226b492f50e874d1f841b3332706aca57721584df51f6a94f882b104d15e26e3b4a50408a1770d28bee4dffb88a34dc24f358b14297a090032ccc098539044fc352844d4a3abca24d8d5f27764a18be4ff54bbefaca8a3a313e71eab3906e0a0721e214b14a2ca391ac36b3a68eb8f9a0d401a211959dd150d1de3a5b0cd60d6fca56ce8088152d76d81429fce8b737d9a231e43fdb044376658eea32311afba6d60ffd280501ab634855c5f579018e37b73ffc6970d320a0352eabae334111aaf92bf14b3811b1d55fc2d90a13a622f33c39ec0e02e56ae0a01e50541bb93d1a9a5fa70989655b1492c114630181e5e147fe77dfbefee2e8e4c78e3e5f92e84700a5be02f2036e288d4d4bc4dcebea5bc62437c62e15e95a512935604916a20df2bf3b462feda904429a744d6a40708184fc87df8833a201018bdb65ebc7c095992917a5ab12ca4d469b519c9027f86af393f80a28503da31c336dabba395693c7df51463e0b2f304e3f1fabfe8b95279905cadd01bc8e14379c7c19e5f14097767141fa2a957ad9129b4fded9f2de5612173e724fd5d45a38d74f6961e54defd604df4de6851370be9a3534d9da27fd050054b656ead8d318150b65bf2d2d699df18b70840a2c04f530b2aa64d1c1899022c1ad6fd987a2d125649440c57e1edf74ce77d74d48cff1fa74211af4f61ca89982e790dde1876fec9c5d3dc7ead5969f5b62a8e247af3e7f06a5597e8015ca7211d19d59aad473f2290f8148671ebfea315fe41ee8ee3616cc4bc2d61fdc79ec9248bc137a7539340d8e5bcc9faa8a49c64aeb5dfaa724589c845c0c9eea316384a60dffa430a6ad3d44a1da8a2f1f96990691657fc1be5f65de068480d8a94caea33ce75ab76b6e7c259e5cb6ef87d99fd25de4486c622744f65eb21643e027b3d99aca9897a51c1078e319b630da5f61693ee22351a9605d89721035333b850f99c810c641f2a94dd592d3d159df29b19ee30a8c7519cbbb9a2ea8ddf16b3013111e555afde33f8bcf8062319be06ea349c29d406fb6fb125d5b789f2040b3a4998c2ab3be5eec3ca54c169bdc2ca5b187e93c3129dd25d2156ebc0f92159308dc45c9927ccdea1d49e66b198931bbcd49f35f2efaa74d0c4cb5a43b93489bf844355f0f98fc866ae7f50fe0aa2c20e62bae07380d364d971f1041bdd798f2297549de46ef7eb286fc1744439f8fff6686b96c28318df2620a208c365053476cb71c7acfc0eaf3bfaef4a8827387e482de80e5fb9d41efbbe6660eee4bdc0fa92815ffe549f84d8d30ce1f57bf6cf7dd6efc5507df2306b8a0a0db84b9d4c26999b96c954f95070c17b2d8a40d028cdb4da4f751147102554c51380b7a6fa9f6c35b712eb40185e5918b7f304472ad2a3db6893e7d89230e65b26ec853b31ee0e32fa6e77947066484429958753520019b2e9f9b72488411168f7403a0dc716c1872c20f593ee89b81328c159d8391038cd661de87bd8084721bb7e4b9abf3692d237af1f0100be14d0223c30b180713df918e2ef18360a775eceb2c9933af0876f99f9ea7e9d29ac4e6fb274476e464c267817d755e7557d06aa76a0e11a1c103d054309c33b6f1f342979ae64a84a750d6055905d7b73f82851474fc502a2d4ef1fb5b24d15f7e17a2f5a96885925a947600a709a284c1e93d5d098912f19ddb5e9095be8c504b5a8b2afa94506dc8fb0f292e539efae5129c43b15d59b1201824ffaecc72fd37e39908178343ff8c44a793ed80db467c4453a1b3207c2686c5084f10e39999abe17f789f92b324781fd5530890e9949fe6a487cc940a34c9c9bbe4d19e2b9659a3ea50cde2ca8e105f12ff371924fa82ba3a008d80dd96b211e2215fb1b7394014e45d43c5184f4d3bca63dab8eb32693cb5a15413cecca09ffa453c7dddc015e39c78b7494ef536f1b32ab96bcdcbe7f980e69d3cd78fb0aa9bfa0e3b5f7bcf4e4b84209bc9defbb452ff5ee7d93ff3a7978e3ae38242c8ecafd59e458c329f248275bea11d3645db4639f89172686e8e5950dd326aaf179462cce015cc2970e92d80fc89888978473776d213a0fe6a7be6b18b4debbd24e565defa19475ea9e9cb2eb73931ec8fa0fe109cf0ac2ed39de28743e382ed1792448cedd5de68774a63ab6120284995732a102e43ea424a4cbd043274651cbe317c6aa29da7e5ac52bf5884df10d5827ec10cf952a070d2badbe5cb3d9cb1517bc041a338af1a9c1e297a54f02e07d468ab209ed8e4c59f0283aca0f6e3f9327cd2a1ed11cf5fc6abd61e169933c057cf3f95c78501fed69557a01993caab0da9b3b283f854695d1a85a68420cdeb1c970c7a71bbcbe3fddaf6203dcc9f230c1f3f54ef7ee3ca7cf5db6a8942fa96125a6acec721b633b88c1fbf1ef25025bd4f6ae4d1e2640d3d458970955426df617f25e0324e9b1409eb80978f0e3b498d48ab781305ca92e1bd0381a7c5d2930dfafaced4c1c076d13efe402b17635f2b81ac59456e401a3676938bffd985ed819da2eb96906a9041b4976d347411b624e413cfceaaa435acc577b79882d23e07cd6aaabe41888d08489660a5de8030fda76e6fc97c4fd8547bb2f3691f2d2905f91fadd28e8f2b5effcfdcaad126b4dcecb7bc04387280a71e8b234f641b6c0907dfdb32c6b65f366b2392a220de0d9a03b40123f31b6ba2c0f62592d421dafa20a8eadba8f2d713972b032751c7800cfeb86c3c38f51c08d23849f5561bec5ec6731a0ddaa15d0732973f7e581f9b360caf974ca4e1dc1744f4d6f85de79717606a1440afae5c06be3c16ad7cd3e77a0d79242b91ba5a62457fb13358dd270de0480a6ffc45ce4a793b4e653a08ab7fbdc0991451046fab63b4bcf1485da92a71bba4eab7d6ae989fd770ce5a789d81e45a92f162b9eb897f3593e6bd0d9a0d6c6ae5e36f990ea19386f2f5843ff7137d9c54b405a03276d3675da9e7bb1fe1ebc80b6075ab237636f306d6fc0c44cb4a860d83a0f70665b2ab210cc31abc27f6fcd5fffe7acccd6422bd97b470d99d85728278dabc52b1e5b3a861b2f6507c5b10bd63d463fe167ea6c1532f957346ca624c237ab38ee54d01800355599bf8a82f573510fe841e8c8ee930e94f5e693168502bdd2a67f8dd40bdc8b218776a6592771c5e93c8717ef51e6ab308e540cb22fe0ca5090b769c64b0377b57e07e8677fadfe785a8355875ad7dc28bd9364d35377953b6b2b425d3c4816fd02b05da7c97baca84bcebbb12c3af516e1ae895569d975ec503f422006cc4f529ea0ca7c49ce19c76c3c70a06c49212068ad2b8d47dfbae027acbb5152ec8d8174df21e3c7126848c8161651382750d36e6a19e350d79a08fe1aa19c2e2e05ce98dd27e362c9dee4138bb0d1fdfa51e894fa03bc6bb7094242792451bbb3069e28897082030c40167b49b48566986f1f3e3f7eacaea29b3bcc879d9721fd08058ab6c667844daa296028eb529ac512a0a3678a064338fb7a1a5a2a9afde4d5c455856491c9b26e22c60d31c7ff2de96bfa27b1e76c67a37ba368977a487f28c9e0315e9b5fe96ff7c2c9291af8c01ff0b54ef36e2a423c4f38e8a6d927af399beea9fb95743122aa0bde55b55521ca10b0627b571c94caca6ac01e0921b2196e8857b52a9a73d35aacbc22048bde9a8eca3e775dbe03eabe6d91936bb3a1d7f49046b2ab3446a317c5cf3f6f38a58d17396fbb2a740d22af437e5162214cac2b661586d432fb5405f2871718a814d58fa6b723d01378f57c9cab7f091069ca2a886ac0b21aa2b19a2d5bb1938114f706105f6236ce4366433de8802a5f0413201e5dfcfe62b5fc4d7230f6ce0491becc513f5f263fbe5c1b90bc529d6266f7be6322d658654220a746f09c5574782be25e2ddd8cb8565d334de4686c4d1a5d4e73c0d9bcbdaaade35c0b5303907b797ffe4cd7835d9795a8e61699411a2e16b9af40d0e9e17b52259121b1946d35442e8281bf81973103c92998b36091e142518657bca2c8e17e065182af70efcce2a8c2940ae40b64c3631216826d0703931995b2a6f60abd7b4541c319ee4390ca9587f4190522c9820e42072d7cb84ea38fc7961785a521b66e7dfe307e9d16638edaef6befada7e7a44434a81ee5f867743071346c9e2c4061b90d4bec53328932d8b4f80891d582d846e8ac04800e966ce531432a48368c2e5a543ab951b0d8818a37404cd5fcbefa6714cc25fc0a5f56a97822c1ef1ea370a7408d5097b44f8bb866df42106f8463206b4158097a17536bceb0e099f86dd97d026ace04bd3a9c8ef16c885f59e57a6afaa2740198800336c4b35bd108c1f6d0d1"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xfb, 0x1, "ef1895c2d921306ace7b5c862c3b307b2e27f449678920d039470cb42de79d409e7c2cb83e82898e3644738ded97bc829d825e53f242ed341970eb202e9c085130b684ebe58f1a056280029460673834fc808631b3a7cef27089eaaef34d78ff8d2b261a798b5f2c4f34ec48a78657e4aa0d25cfdca15bb7376be5cfadacb65b05fedb3f97110b73482902b0817f2d753ad299050dcd49353ae49a3f1b26499eb962ded7f57918f9e4c10ab2bed2fec26d018127b3ce057e24ff3caac1fd2dcad318de58f98af0ce3d5ba658aa61c8a706bf64d14296eaf31a2d2351b2236fcb9bfeeb32dcf893ac5643853c5d1d102f27a42458c79173"}]}, @NFTA_SET_ELEM_DATA={0x2e0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xe7, 0x1, "d5403790991ce3599ed8b0ebce2c710c3cbc9058c0ae0e939082f5d1422e4fd4020f334d9ded66f42601d8edd963cede2a5371698cb52f0200b81b2fce46e52a9d136da146c976413ae8617a46544c67129cd04295b78ced82aace679a519a6ad67fd1036d6658f6f84db5b02e96fffbb77f7aab99698f3ad6c5cbfc560e6c7787c4b265160e496558d911bd9ecb9140730780ea89a499bb3aa31cdba6a5a79e761aaa3ef7902778720cc34d6ab7a4190ecb6b078656b169da5456b831bab4d037ee24f36cce58c20c7696c359f41406fb857778ff03decf4c95e041f9ee59918ef44d"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xa4, 0x1, "fc140f4cda39bc10ff319821c7c6685f30c60b57a09292a18f2f53283f72c40d07ffd6305a0af6557245490763391dc42fae1e5e9993f4d2f9714534aa714c2839a1c567a0c7f75c0e42ec1ad1debaaf41d7f24f808cf7d34a07b4ae2fb99a80dc42b556bc7d55ea317a9bad1eefcdadd88d99ecc1964b6b23db939a92beacfdb9f2dbde2d695fc27f1db2b51f64268d6477a661e31b2b66ab5f2cf6960cfff8"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x77, 0x1, "2ce7a9132c4965a748e3e90e3e5ba6c4094ad8ce2507494ad06339180676648e5a76db901ac3bde46b4afe35bae001d40585d0be59bb8165774c3e150a3dd7e902b1e50ccd4e6c693ed562ba6f718a1d326e12845f962a2c10b653101de4963f789a45de81f7f888a66ba2d36e0fa320e9fe16"}]}, @NFTA_SET_ELEM_DATA={0x28, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x8, 0x1, "00492105"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}]}, {0x640, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x314, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa5, 0x1, "577aac473b96f7276c505d8c7eb2efbab7670415070b7d53a2412aa3c4970f14bd1cc8e54185a64c8c8b52810c0744983615987d7e0a26f581846cf59002f0bd6216dcb6321959cc318b9e27f6e722857a683d64d82de0b8e001513cd276a0a6f584d51e00b91e50d3539d80494dae3386ade6b85d7cb3076a8467343a430197866de2f406b8fc0b2344206b9fb2953617042db090d02950bb08dd0341a1a786bc"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xc2, 0x1, "93193975b5485d301dafda0282dce25d1d288f330cd1a22269d7012b254820af28864c36b4871dc9201dd9fd7f340aafef3644aab9dcbc3f43b4b1dcbb52a81dc3aaa0dc78793c7d056d854b258ab5c518a3d4418107516f78d112926867cdc1f34dccfcac171dc455769e1f53850dbfa49c097c88216f6329fcf98cbaf82997a444124edb8009f239337dfc51e00bd2ac68ab1881004710f7ef6d5eed2a97457e562bc2d08380907f9ec74d38af2ca996155b273457291ba29cdb0ef411"}, @NFTA_DATA_VALUE={0x48, 0x1, "15d145b7464fd9bf90e2a7df302515e754e2c4c49ac8b58cf14d891dac5cde752b1d7cf9da29f3c892f8c553d0db793633b2d1f38a4d292b1bddb99760405d72a6863a7b"}, @NFTA_DATA_VALUE={0x34, 0x1, "802bc3a82045f308eb9e5bc07372119799ff25026915d9585d2d75eae40870bd7f3648a604565ca909a23516aedcee3c"}, @NFTA_DATA_VALUE={0x61, 0x1, "03860d47dd6aab98fe41cd105a2883cdbd30593ece4240fcebcc803a9a37a48e60d1daa50df81a60419ced7ba8abab48afb481a22b8ab0e220eb0c7aa299a3c2799445b384959bac21f10f2dc554d5e3782c3c12d03c751fa4d89c08e2"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1000}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY={0x30c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x100, 0x1, "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"}, @NFTA_DATA_VALUE={0x53, 0x1, "76164ce9354511af68743c81c3fc0e8db804e592eb1e46910b4bb42380a67e6fe0c97c977dbfe2a2cee3182b5ec1a86ed1f344b80f108209545f4015efc069f3badbb0293de59baa1d8abb6bf98dc8"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}]}, @NFTA_DATA_VALUE={0xf9, 0x1, "60cb72e7e0ad9eb107ab053513fa25843c5666b79c79dd704f47e9d71e5efd30b669a6f5d423a7af8ef2cb8573c1f0f56b0c5b935d2ce3872d9c06dcb4d315596950f56a2416542465950d83d753182c4816e67d86c30b27b4f32e59029ed6517f7a90999cf54ce0b59a27c5262bd3cc16b771db90b8dae8d6d5284b282b8de13616118de82a48e9c1e3c3326d4ac23fc368be1cf63970f7d916265052cbf504d7402768eb396f58744ab89b8952308d08bc0009a05aa7e88531cca08dd551905dd044fc08fc489b6fee25690948b1812b5920835d3e8e8ff8e1707619cd3376e4353033982e05fd99934a09de2ee121c8822b4190"}]}]}, {0x340, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xf8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf3, 0x1, "44075e0728da699a6da1ce6e7d91e29d82dc5d84f4644a3a089c635bf6935530c5705143a29da49e8160de53b85113009289cf5ed6afd5b8c05c63dc41c70f3dfdf8fb34a3681a731a1f82ffab652527663c7a3daf06635325c7f3c1700ea33296a33d6f995fd67b86f7df20539cb1ac5e67e3640f6f9c1add61a34413026e1d3af65810a03874c1164ded8eb164c76103ff76311f06f5729ae2874402bf764cd5fb1e02e3f85cb75b9e7f19857dbf9649b4b607d5342d5a6a6d6a5cebc9656fda939f5ff896b4d5f4ec1666801d3938b7e3ac71d85589d08694041c7ab9211827ae0f2f69f42fd7215d8ed7d64c88"}]}, @NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @lookup={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xb5d}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_USERDATA={0x83, 0x6, 0x1, 0x0, "2c230c2e6bac77901a5b91f9e49fa52bb83e94cb751fa45ca2924b093d1f28cebfff9a103e76cd705719818414e3cb1e4c05d405ee82e8b43b774e4a4c3018d7c640ab73148db78237f5d983289589fa9185cf05167157daf510dccd560e516f95cb491d7d86aca61529942ca656dea6cfec775824dbc72c8acdc5b20ecf5a"}, @NFTA_SET_ELEM_USERDATA={0xbf, 0x6, 0x1, 0x0, "f612515f5632effe9416175b8c96956ba1fdfa53853d3981145da5f527b57c763521e1dc0181cd4c7d92ab226200cd6e559b87f71b48d3c88539d6185197a6e945904481a217626517fdb4734b90b4ac9a8ec65e9ff3286fff3c277cf7b7c8eff46f3c96390ae18e40b298021ad073355378d0ed8cbba2869670765cce7638765938b161c4eb2f74ac5999c551112c0540c29af98a731bad22d16d49078a2ecd1f4ae689935a5f441c1dbe0307f8186750370ac4bb50f29174aebc"}, @NFTA_SET_ELEM_EXPRESSIONS={0x80, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x48, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}]}}}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @meta={{0x9}, @void}}, @NFTA_SET_ELEM_KEY={0x24, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x204, 0x6, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x38, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_USERDATA={0xa6, 0x7, 0x1, 0x0, "d145ee2580306a0646b5f819ff17d4d4e772e7c0c5f9948c3643909d33009ed20f20c5fef9322093bd6d3988db1a6f6d058c6371de5bd3b78c0d4ce2688547b2509ceef3579d4d50b43596e811d4649f56585d5616d0da35b1c7ea32af0ab2eb20b8d90375a8b64bd636fb91f673af50bc60b594f27a6534f1614141a6bfe8a9bb520b7f781955164f01b0e49f2207cf889c24b3fccf0c1ab0d7038bcf8eed922e18"}, @NFTA_RULE_USERDATA={0x96, 0x7, 0x1, 0x0, "21eaf1e13f4226cde77a4e79e9e31a1e52de54304c52381fee7bee2599673ebb6a0c579c0b9beca6f070a62dd7ebd5c4f95baf7862b77fa022adfa5e30efc4fe6b056460221720325eb27a3851da31e0c6037f1288ba334da40d3269ac12094e8cf638ddf41d8f502401f1f3b6595d9b1a972499afab8d486651e5db989ae2dcf3755d2a0a57d32552bb0bc16ff5908e6248"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}, @NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x224, 0x14, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_OBJ_USERDATA={0x100, 0x8, "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"}, @NFTA_OBJ_USERDATA={0xf5, 0x8, "4975e6ccd5a47da1e983beaea91f729e535aa4584ffbccf9c83fee532a0e02bd04e7e4ed488cb0ecc704d74996f26e9389a4ad82829955e92c35bd6827bfc68d59b11e054b64213cf65ce2de9a55fccf7ad00e9ac127d15ed8b49160a1c95c370143c020aa7594ded0c183042c10b944f66eb3692e5e2dacf9987e1e76b6a092ba390a2393fe6893d70eab9bda61c1d939ce0871281e2a7bd80d8ddbad53670e3d8b640707c34b862e0d2dda20bb805720d25d9217c7ed6abadb4e9048506ed5400f3aa82c5520a0379db32d8a33b911986b3965e137e1ded2962f33eacd82b6a13b78d98fbc7bc45a8f1021d50d6e0d64"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x2498}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000045c0)={'team_slave_1\x00', @random="2766bb0530d0"}) openat$cgroup_ro(r2, &(0x7f0000004600)='memory.stat\x00', 0x0, 0x0) 1.720461187s ago: executing program 0 (id=2982): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000111401000000618e15fbba52cd50313b0800010000f94a781a0a67b8aae219396d594a2f5a7b384189ee4f91f887f2011023bd90bf509df7293098a08b437c76cc5112afc2fd0fec2f2a15f415326befd4e7071ede9a1bba82c9f12f61be8b8cfc419e1707a5c75cee362e984d414532290b935a170dd16f94aded5bee"], 0x18}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) setsockopt$packet_int(r3, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) r5 = socket(0xf, 0x2, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000000)={r5}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000100)={0x3383, 0xfffe, 0x8004, 0x1, 0xfff, 0x8, 0x2, 0xffffff72, r6}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r8, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8840) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e00000000000010000000", @ANYRES32, @ANYBLOB="8100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000005000000030000000900"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r10}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000009008000810000000000", @ANYRES32=r10, @ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='./file0\x00', 0x0, 0x6008}, 0x18) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r11}, 0x10) r12 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000069116e00000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) setsockopt$SO_TIMESTAMPING(r12, 0x1, 0x9, &(0x7f0000000040)=0x4002, 0x4) connect$inet(r12, &(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10) setsockopt$SO_TIMESTAMPING(r12, 0x1, 0x9, &(0x7f0000000100)=0x2844, 0x4) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="421c00000000000024001280090001007866726d000000001400028008000100030000000800020001000000140003007866726d30"], 0x58}}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r1], 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 1.106977082s ago: executing program 2 (id=2988): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB='&\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="f5f7373821f54e7921d41da136b6d768e791844012dba6ed63170b8a56392561714cfb1d406a55fa34be900f1c357731c37689eba2d5492ca65dac48a5737b393a11edb9e3eccf45166e3b8b", @ANYRES64=0x0], 0x10) 1.007545543s ago: executing program 2 (id=2989): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000006840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cffb93b201}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6b, &(0x7f0000000200)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x45, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)={0xb4, r3, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40408c1}, 0x440c0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x17, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000010000000000000000000000630104000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 855.131704ms ago: executing program 2 (id=2990): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x437, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20124}, [@IFLA_PHYS_PORT_ID={0x1d, 0x22, "da22ec3cfb9459eb077f0045f5ad2e7cff32d7f0490bd1a333"}]}, 0x40}}, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xfffffff7}, 0x1c) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r3}, 0x10) (async) listen(r2, 0x3) (async) syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbb5bbbbbb86dd600a843500140600fe8000000000000000000000000000bbfe8000008012386a09b608753762253d6557327700000000000b2c00000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x100000, 0x800000000000000, 0x0, 0x0, 0x9, 0x8000000000000001}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}}, 0xb8}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}}, 0x0) (async) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4000, 0xfffffffd, @loopback, 0x6}, 0x6e) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000100001002bbd7000fcdbdf2500000000", @ANYRES32=r6, @ANYBLOB="0000000004000000180012800b00010067656e65766500000800028004000e00"], 0x38}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0xff}]}}}]}, 0x3c}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6_vti0\x00', r6, 0x4, 0xc, 0x9, 0x9, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x8, 0x5, 0xd}}) (async) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) (async) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x4}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r10, 0x5}, 0x8) 851.098261ms ago: executing program 1 (id=2991): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) bind$qrtr(r1, &(0x7f0000000000)={0x2a, 0x1, 0x2}, 0xc) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000a40)=ANY=[@ANYBLOB="030000018000000000000021e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000760000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014c5da4de4d92"], 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="d96d5c9899e45e3801532368b45fdcc3d3cc2f3a8d97a1daf17c6250d68f3c5f21cd8b49327b5ce1e596ce4d878da1936486c7be1aee79d19d44708933e34f1e07e20baff97446fd8cab51e538ce3a01d0f094cf914f9425b48aeeb61503407b07c37d3162c8bf76903baf97635fc1035c8a7e9f32b28a06cb2e1eee7de86c2264c61a840681d1eb7898f41e1ede9009c5977367994fe0ca35c805a6ab8e0f4a708f760ef6eaa8bc75"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000080)=""/84, &(0x7f0000000040)=0x54) 778.155807ms ago: executing program 0 (id=2992): r0 = socket(0x10, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x18, 0x14, 0x21, 0x0, 0x0, {0x23}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x400}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x3e, 0x0, 0x0, 0x10, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 747.307888ms ago: executing program 1 (id=2993): r0 = socket(0x2a, 0x2, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000100, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/net\x00') ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x5}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xffffffffffffff63, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x70}}, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = accept4$ax25(r0, &(0x7f0000000380)={{0x3, @default}, [@default, @remote, @remote, @remote, @null, @default, @netrom, @netrom]}, &(0x7f00000004c0)=0x48, 0x80800) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r8}, @typed={0x8, 0x9f, 0x0, 0x0, @pid=r7}, @nested={0x4, 0x1}]}, 0x24}], 0x1}, 0x0) ioctl$SIOCAX25GETUID(r4, 0x89e0, &(0x7f0000000500)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r8}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x6da, 0x0, 0x4}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r9, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd8, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x91}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1ff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfff0}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4084}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001d00070f"], 0x1c}}, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'gre0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x700, 0x700, 0x8, 0xffffff89, {{0x8, 0x4, 0x3, 0x18, 0x20, 0x65, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @local, {[@timestamp_prespec={0x44, 0xc, 0xa3, 0x3, 0xd, [{@loopback, 0x100000}]}]}}}}}) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@abs={0x1}, 0x6e) write$bt_hci(r10, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000208"], 0xe) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000240)=0xfffffffffffffffe) 668.009992ms ago: executing program 2 (id=2994): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000080)=@ethtool_dump={0x3f, 0x8000, 0x8, 0xf7, "ccbf079e4736e38a953e4d1489d99e572944a24ba3ba5462a46d01b898dd11335669c0328cdda246d48e3a3b37b83677529c5540101e044fa8a349becd79d8d57e7e8dad7f11d2448ac7182e0733f3017cfe3adc673236638350123fb0ddbdeecdd872985e54bb8284c98046932260fd90aa1b2480e42ed8aa18be8316171e69550c8c20d533e13f96e9861ab0e245c289d6528672bdc7f62b247257cf814d2843cb8819768d0f6b1573ec111de1fd146cbcce3ff4c905c406d863b7bdb6741842b309af56e250cb6aa02ca1c5155abcf99a1dad4e95a28e57b25d98b172b70bdff476387286056a6a058f17745c2ffe27d62eaeec481c"}}) 611.286377ms ago: executing program 1 (id=2995): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000001180)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x48, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@fragment={0x11, 0x0, 0xff, 0x0, 0x0, 0x4, 0x67}, @dstopts={0x32, 0x0, '\x00', [@pad1, @padn]}]}}}}}}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x3c, 0x10, 0x609, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x3c, 0x10, 0x609, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) socket(0x10, 0x803, 0x8) (async) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) r8 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r11, 0x0, 0x2, 0x0) splice(r10, 0x0, r9, 0x0, 0x114, 0xe) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x400a4}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x400a4}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r12], 0x5c}}, 0x40) 600.282625ms ago: executing program 0 (id=2996): r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) listen(r1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x8000000000000003) accept$ax25(r1, 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90324fc60100c028010000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req={0x3, 0x2, 0x9ab2, 0x80000001}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000380)={0x0, 0x1f99bc1a, 0x80000000, 0x11, 0x81, 0x4, 0x400, 0xd174, {0x0, @in6={{0xa, 0x4e20, 0x1, @private0, 0x4}}, 0x7, 0x6, 0x0, 0x4, 0x36da}}, &(0x7f0000000280)=0xb0) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={r4, 0x6}, &(0x7f0000000440)=0x8) poll(&(0x7f00000016c0)=[{0xffffffffffffffff, 0x4004}, {r0, 0x440}], 0x2, 0xffffffff) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000480)='cgroup.freeze\x00', 0x275a, 0x0) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x7fff, 0x0) sendfile(r6, r7, 0x0, 0x0) syz_emit_ethernet(0x30, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb7f0a000340110800450c002200e3cf15500190e420d172bbac1414aa0800907821ff0200c135f0b1926b"], 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_ENTRIES(r8, 0x0, 0x81, &(0x7f0000000180)={'nat\x00', 0x0, 0x3, 0x6c, [0x4, 0x6, 0x7, 0x9, 0x200, 0x400], 0x2, &(0x7f00000000c0)=[{}, {}], &(0x7f0000000100)=""/108}, &(0x7f0000000200)=0x78) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r9) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) recvmmsg(r11, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="a183000000000000000005"], 0x1c}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01012dbd7000f90f002507000000080001000120000008000300", @ANYRES32=r9], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0xa8c4) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r9, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='|\x00\x00&', @ANYRES16=0x0, @ANYBLOB="080028bd7000fcdbdf250200000008000400e000000214000200ff01000000000000000000000000000114000200fc000000000000000000000000000001080005006401010208000500ac1414aa1400060065727370616e30000000000000000000140006006970365f767469300000000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000004}, 0x8000) 520.115051ms ago: executing program 2 (id=2997): syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x68, 0x0, 0x0, 0x88, 0x0, @loopback}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 425.428912ms ago: executing program 2 (id=2998): syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'pim6reg\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028040000100240100006d000000000000000000000000000000000500030005000000100004006c6f656462616c616e636500"/68], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 113.927266ms ago: executing program 1 (id=2999): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000106ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010007080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffe5d, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x4040000) socket$inet(0x2, 0xa, 0x8) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x4000000, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0xecc}], 0x1}}], 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 0 (id=3000): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@deltaction={0x78, 0x31, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa8}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8010}, 0x4000880) r0 = socket(0x5, 0x800, 0x95) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000001c0), 0x2) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) r1 = accept4$ax25(r0, &(0x7f00000002c0)={{0x3, @null}, [@netrom, @bcast, @netrom, @null, @netrom, @default, @remote, @bcast]}, &(0x7f0000000340)=0x48, 0x80000) (async) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000380)={'nat\x00', 0x0, 0x0, 0x0, [0xfffffffffffffff8, 0x1000, 0x6, 0x1, 0x6, 0x7]}, &(0x7f0000000400)=0x78) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x10, 0x3f6, 0x800, 0x70bd2b, 0x25dfdbfb, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8c0}, 0x40004) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), r0) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r3, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44004}, 0x4000) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x420001, 0x0) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f00000006c0)=0x30, 0x4) (async, rerun: 64) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000700)) (async, rerun: 64) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000740)={@dev, @empty}, &(0x7f0000000780)=0xc) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x84, r7, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x3c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x24000010}, 0x1) (async) bind$inet6(r0, &(0x7f0000000980)={0xa, 0x4e22, 0x3, @mcast1, 0x3}, 0x1c) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x44814) ioctl$AUTOFS_IOC_CATATONIC(r5, 0x9362, 0x0) (async, rerun: 64) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r0) (rerun: 64) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, r9, 0x500, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xa, 0x57}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x90) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r0) sendmsg$NL80211_CMD_LEAVE_OCB(r10, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r11, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40085}, 0x20000000) kernel console output (not intermixed with test programs): 63154][T14603] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.070403][T14603] bridge_slave_0: entered allmulticast mode [ 328.095107][T14603] bridge_slave_0: entered promiscuous mode [ 328.116300][T14603] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.132079][T14603] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.143201][T14603] bridge_slave_1: entered allmulticast mode [ 328.154584][T14603] bridge_slave_1: entered promiscuous mode [ 328.173745][T14649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.187594][T14649] batadv_slave_0: entered promiscuous mode [ 328.345723][T14603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.364716][T14655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2352'. [ 328.377902][T14655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2352'. [ 328.390120][T14655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2352'. [ 328.455163][T14603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.474389][ T5834] Bluetooth: hci4: command tx timeout [ 328.589589][T14603] team0: Port device team_slave_0 added [ 328.606799][T14603] team0: Port device team_slave_1 added [ 328.663831][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.816271][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.851577][T14603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.859142][T14603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.891220][T14603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.928174][T14681] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2360'. [ 328.992162][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.040837][T14603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.055367][T14603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.089125][T14603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.162406][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.411592][T14603] hsr_slave_0: entered promiscuous mode [ 329.419837][T14603] hsr_slave_1: entered promiscuous mode [ 329.508998][T14623] chnl_net:caif_netlink_parms(): no params data found [ 329.593407][ T5834] Bluetooth: hci3: command tx timeout [ 329.735554][T14717] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2374'. [ 329.817797][T14623] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.826308][T14623] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.833823][T14623] bridge_slave_0: entered allmulticast mode [ 329.840826][T14623] bridge_slave_0: entered promiscuous mode [ 329.855393][ T36] bridge_slave_1: left allmulticast mode [ 329.861053][ T36] bridge_slave_1: left promiscuous mode [ 329.867435][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.876996][ T36] bridge_slave_0: left allmulticast mode [ 329.883425][ T36] bridge_slave_0: left promiscuous mode [ 329.889162][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.208634][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.219598][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.230446][ T36] bond0 (unregistering): Released all slaves [ 330.246327][T14623] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.253923][T14623] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.261081][T14623] bridge_slave_1: entered allmulticast mode [ 330.269182][T14623] bridge_slave_1: entered promiscuous mode [ 330.428561][T14623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.542831][ T5834] Bluetooth: hci4: command tx timeout [ 330.567744][T14623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.736461][T14623] team0: Port device team_slave_0 added [ 330.912164][T14623] team0: Port device team_slave_1 added [ 330.997773][T14623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.017212][T14623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.050348][T14623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.100341][T14623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.108180][T14623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.168835][T14623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.353064][T14760] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2393'. [ 331.464241][ T36] hsr_slave_0: left promiscuous mode [ 331.479653][ T36] hsr_slave_1: left promiscuous mode [ 331.491849][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.509556][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.523412][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.531614][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.558546][ T36] veth1_macvtap: left promiscuous mode [ 331.567227][ T36] veth0_macvtap: left promiscuous mode [ 331.574544][ T36] veth1_vlan: left promiscuous mode [ 331.579833][ T36] veth0_vlan: left promiscuous mode [ 331.664371][ T5834] Bluetooth: hci3: command tx timeout [ 332.043047][ T36] team0 (unregistering): Port device team_slave_1 removed [ 332.087997][ T36] team0 (unregistering): Port device team_slave_0 removed [ 332.451069][T14623] hsr_slave_0: entered promiscuous mode [ 332.458541][T14623] hsr_slave_1: entered promiscuous mode [ 332.466334][T14623] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.476640][T14623] Cannot create hsr debugfs directory [ 332.510870][T14769] validate_nla: 29 callbacks suppressed [ 332.510888][T14769] netlink: 'syz.1.2395': attribute type 3 has an invalid length. [ 332.552603][T14772] netlink: 'syz.0.2397': attribute type 3 has an invalid length. [ 332.573324][T14772] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2397'. [ 332.609182][T14774] veth0: entered promiscuous mode [ 332.623319][ T5834] Bluetooth: hci4: command tx timeout [ 332.714860][T14774] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2398'. [ 332.735026][T14774] nbd: illegal input index -8454144 [ 332.895561][T14783] veth0: left promiscuous mode [ 332.907995][T14603] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 332.957480][T14603] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 333.010272][T14603] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 333.014184][T14796] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2405'. [ 333.098410][T14603] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 333.114943][T14796] netlink: 'syz.1.2405': attribute type 10 has an invalid length. [ 333.170722][T14808] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2405'. [ 333.410508][T14820] netlink: 'syz.1.2409': attribute type 1 has an invalid length. [ 333.420639][T14820] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2409'. [ 333.537407][T14603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.641452][T14603] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.678458][T13360] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.685684][T13360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.689050][T14831] syz.2.2414: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 333.714054][ T1345] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.725987][ T1345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.753229][ T5834] Bluetooth: hci3: command tx timeout [ 333.765751][T14831] CPU: 1 UID: 0 PID: 14831 Comm: syz.2.2414 Not tainted 6.15.0-syzkaller-12425-g82cbd06f327f #0 PREEMPT(full) [ 333.765776][T14831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 333.765786][T14831] Call Trace: [ 333.765793][T14831] [ 333.765800][T14831] dump_stack_lvl+0x189/0x250 [ 333.765831][T14831] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.765855][T14831] ? __pfx__printk+0x10/0x10 [ 333.765873][T14831] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 333.765892][T14831] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 333.765912][T14831] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 333.765933][T14831] warn_alloc+0x214/0x310 [ 333.765959][T14831] ? __pfx_warn_alloc+0x10/0x10 [ 333.765987][T14831] ? __get_vm_area_node+0x28f/0x300 [ 333.766007][T14831] ? packet_set_ring+0x6f4/0x2380 [ 333.766029][T14831] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 333.766089][T14831] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 333.766110][T14831] ? alloc_pages_mpol+0x3cd/0x4a0 [ 333.766130][T14831] ? packet_set_ring+0x6f4/0x2380 [ 333.766147][T14831] vzalloc_noprof+0xb2/0xf0 [ 333.766166][T14831] ? packet_set_ring+0x6f4/0x2380 [ 333.766186][T14831] packet_set_ring+0x6f4/0x2380 [ 333.766226][T14831] ? __pfx_packet_set_ring+0x10/0x10 [ 333.766262][T14831] ? _copy_from_user+0x94/0xb0 [ 333.766285][T14831] packet_setsockopt+0xc5a/0x12c0 [ 333.766307][T14831] ? __pfx_packet_setsockopt+0x10/0x10 [ 333.766323][T14831] ? futex_wake+0x4b2/0x560 [ 333.766357][T14831] ? aa_sk_perm+0x81e/0x950 [ 333.766382][T14831] ? __pfx_aa_sk_perm+0x10/0x10 [ 333.766399][T14831] ? __lock_acquire+0xab9/0xd20 [ 333.766426][T14831] ? aa_sock_opt_perm+0x74/0x110 [ 333.766449][T14831] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 333.766469][T14831] ? __pfx_packet_setsockopt+0x10/0x10 [ 333.766489][T14831] do_sock_setsockopt+0x25a/0x3e0 [ 333.766511][T14831] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 333.766531][T14831] ? __fget_files+0x2a/0x420 [ 333.766557][T14831] __x64_sys_setsockopt+0x18b/0x220 [ 333.766580][T14831] do_syscall_64+0xfa/0x3b0 [ 333.766601][T14831] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.766621][T14831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.766636][T14831] ? clear_bhb_loop+0x60/0xb0 [ 333.766656][T14831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.766672][T14831] RIP: 0033:0x7f359c38e929 [ 333.766687][T14831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.766702][T14831] RSP: 002b:00007f359d14a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 333.766720][T14831] RAX: ffffffffffffffda RBX: 00007f359c5b5fa0 RCX: 00007f359c38e929 [ 333.766732][T14831] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000006 [ 333.766743][T14831] RBP: 00007f359c410b39 R08: 000000000000001c R09: 0000000000000000 [ 333.766753][T14831] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 333.766764][T14831] R13: 0000000000000000 R14: 00007f359c5b5fa0 R15: 00007ffc6298e278 [ 333.766792][T14831] [ 333.766800][T14831] Mem-Info: [ 333.783934][T14623] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 333.792704][T14831] active_anon:4495 inactive_anon:0 isolated_anon:0 [ 333.792704][T14831] active_file:1219 inactive_file:39944 isolated_file:0 [ 333.792704][T14831] unevictable:768 dirty:48 writeback:0 [ 333.792704][T14831] slab_reclaimable:11849 slab_unreclaimable:113028 [ 333.792704][T14831] mapped:28884 shmem:1374 pagetables:1031 [ 333.792704][T14831] sec_pagetables:0 bounce:0 [ 333.792704][T14831] kernel_misc_reclaimable:0 [ 333.792704][T14831] free:1317447 free_pcp:14362 free_cma:0 [ 334.122082][T14831] Node 0 active_anon:17980kB inactive_anon:0kB active_file:4876kB inactive_file:159576kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115536kB dirty:192kB writeback:0kB shmem:3960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13384kB pagetables:3972kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 334.159341][T14623] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 334.169215][T14831] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 334.212363][T14603] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 334.231014][T14603] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 334.242841][T14831] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 334.279111][T14623] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 334.287638][T14831] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 334.309732][T14831] Node 0 DMA32 free:1355452kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17936kB inactive_anon:0kB active_file:4876kB inactive_file:157732kB unevictable:1536kB writepending:188kB present:3129332kB managed:2561080kB mlocked:0kB bounce:0kB free_pcp:38608kB local_pcp:16552kB free_cma:0kB [ 334.346032][T14623] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 334.370711][T14831] lowmem_reserve[]: 0 0 1 1 1 [ 334.395404][T14831] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1844kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 334.431252][T14831] lowmem_reserve[]: 0 0 0 0 0 [ 334.461197][T14831] Node 1 Normal free:3898972kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17964kB local_pcp:8928kB free_cma:0kB [ 334.534267][T14851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2417'. [ 334.551906][T14831] lowmem_reserve[]: 0 0 0 0 0 [ 334.557153][T14831] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 334.581536][T14831] Node 0 DMA32: 41*4kB (U) 529*8kB (UM) 268*16kB (UM) 112*32kB (UME) 70*64kB (UME) 47*128kB (UM) 81*256kB (UM) 76*512kB (UM) 41*1024kB (UME) 3*2048kB (UM) 299*4096kB (UM) = 1355244kB [ 334.631837][T14851] vcan1: entered promiscuous mode [ 334.653079][T14831] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 334.700913][T14831] Node 1 Normal: 181*4kB (UE) 47*8kB (UME) 45*16kB (UME) 80*32kB (UME) 25*64kB (UME) 10*128kB (UME) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (UE) 948*4096kB (M) = 3898972kB [ 334.727293][ T5834] Bluetooth: hci4: command tx timeout [ 334.763663][T14859] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2419'. [ 334.774254][T14831] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 334.784533][T14831] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 334.794404][T14831] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 334.805146][T14831] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 334.811218][T14623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.815655][T14831] 42533 total pagecache pages [ 334.827270][T14831] 0 pages in swap cache [ 334.837424][T14831] Free swap = 124996kB [ 334.841604][T14831] Total swap = 124996kB [ 334.858719][T14831] 2097051 pages RAM [ 334.868827][T14831] 0 pages HighMem/MovableOnly [ 334.871583][T14603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.880517][T14831] 424675 pages reserved [ 334.908716][T14831] 0 pages cma reserved [ 334.913938][T14623] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.940204][ T8742] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.947404][ T8742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.021335][ T8742] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.028530][ T8742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.085467][T14867] netlink: 'syz.1.2421': attribute type 1 has an invalid length. [ 335.165031][T14873] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2421'. [ 335.294613][T14623] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 335.759099][T14603] veth0_vlan: entered promiscuous mode [ 335.814958][T14603] veth1_vlan: entered promiscuous mode [ 335.918118][T14603] veth0_macvtap: entered promiscuous mode [ 335.979238][T14623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.999357][T14603] veth1_macvtap: entered promiscuous mode [ 336.097504][T14603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.158774][T14603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.218662][T14603] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.243228][T14603] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.262142][T14603] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.279357][T14603] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.308783][T14623] veth0_vlan: entered promiscuous mode [ 336.329913][T14924] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2434'. [ 336.401155][T14623] veth1_vlan: entered promiscuous mode [ 336.531123][T14623] veth0_macvtap: entered promiscuous mode [ 336.545883][T14623] veth1_macvtap: entered promiscuous mode [ 336.591592][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.622189][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.632349][T14932] sctp: [Deprecated]: syz.0.2437 (pid 14932) Use of struct sctp_assoc_value in delayed_ack socket option. [ 336.632349][T14932] Use struct sctp_sack_info instead [ 336.655896][T14623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.693855][T14623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.752286][T14623] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.761471][T14623] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.770408][T14623] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.779535][T14623] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.790979][T14939] bond0: Device is already in use. [ 336.814106][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.836230][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.031538][ T8742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.058758][ T8742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.097422][ T1345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.124019][ T1345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.331505][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.856937][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.019098][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.230815][T14970] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2447'. [ 338.429956][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.450699][ T5153] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 338.460806][ T5153] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 338.470928][ T5153] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 338.481678][ T5153] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 338.490090][ T5153] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 338.588245][ T36] bridge_slave_1: left allmulticast mode [ 338.599389][ T36] bridge_slave_1: left promiscuous mode [ 338.607758][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.622084][ T36] bridge_slave_0: left allmulticast mode [ 338.631231][ T36] bridge_slave_0: left promiscuous mode [ 338.645448][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.985829][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.996579][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.006779][ T36] bond0 (unregistering): Released all slaves [ 339.239801][T14974] chnl_net:caif_netlink_parms(): no params data found [ 339.322006][T14983] netlink: 'syz.0.2449': attribute type 2 has an invalid length. [ 339.383055][T14983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2449'. [ 339.547233][T14991] netlink: 'syz.1.2450': attribute type 9 has an invalid length. [ 339.705615][T14999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2454'. [ 339.762939][ T36] hsr_slave_0: left promiscuous mode [ 339.771451][ T36] hsr_slave_1: left promiscuous mode [ 339.788286][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.796120][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.814479][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.831456][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.876983][ T36] veth1_macvtap: left promiscuous mode [ 339.892582][ T36] veth0_macvtap: left promiscuous mode [ 339.902975][ T36] veth1_vlan: left promiscuous mode [ 339.909207][ T36] veth0_vlan: left promiscuous mode [ 339.968877][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 339.978496][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 339.990280][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 339.999194][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 340.009232][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 340.370855][ T36] team0 (unregistering): Port device team_slave_1 removed [ 340.416966][ T36] team0 (unregistering): Port device team_slave_0 removed [ 340.553969][ T5834] Bluetooth: hci3: command tx timeout [ 340.958602][T14974] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.966683][T14974] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.976765][T14974] bridge_slave_0: entered allmulticast mode [ 340.998612][T14974] bridge_slave_0: entered promiscuous mode [ 341.007977][T15013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2458'. [ 341.011662][T14974] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.040413][T15013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2458'. [ 341.050010][T14974] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.057760][T14974] bridge_slave_1: entered allmulticast mode [ 341.071079][T15013] netlink: 'syz.0.2458': attribute type 15 has an invalid length. [ 341.074843][T14974] bridge_slave_1: entered promiscuous mode [ 341.117259][T15018] netlink: 'syz.2.2459': attribute type 2 has an invalid length. [ 341.232119][T14974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.257240][T14974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.328247][T15027] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2462'. [ 341.439503][T14974] team0: Port device team_slave_0 added [ 341.475640][T14974] team0: Port device team_slave_1 added [ 341.609963][T14974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.657654][T14974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.705579][T14974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.745833][T14974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.770267][T14974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.823519][T14974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.918495][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.936521][T15038] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2464'. [ 341.947318][T15048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2467'. [ 342.063586][ T5834] Bluetooth: hci4: command tx timeout [ 342.071657][T15047] batadv_slave_1: entered promiscuous mode [ 342.224031][T14974] hsr_slave_0: entered promiscuous mode [ 342.240984][T14974] hsr_slave_1: entered promiscuous mode [ 342.362183][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.376066][T15070] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2472'. [ 342.408146][T15048] batadv_slave_1: left promiscuous mode [ 342.441358][T15070] gretap0: entered promiscuous mode [ 342.513585][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.627444][ T5834] Bluetooth: hci3: command tx timeout [ 342.657466][T15085] tls_set_device_offload: netdev not found [ 342.667707][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.817396][T15090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2478'. [ 342.826478][T15090] bridge_slave_0: default FDB implementation only supports local addresses [ 342.846614][T15094] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.855873][T15094] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.863095][T15094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.178124][ T36] bridge_slave_1: left allmulticast mode [ 343.194909][ T36] bridge_slave_1: left promiscuous mode [ 343.200685][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.231619][ T36] bridge_slave_0: left allmulticast mode [ 343.237675][ T36] bridge_slave_0: left promiscuous mode [ 343.247202][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.265236][T15115] __nla_validate_parse: 1 callbacks suppressed [ 343.265252][T15115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2483'. [ 343.454372][T15124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2483'. [ 343.513192][T15126] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2483'. [ 343.523930][T15127] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2485'. [ 343.582275][T15128] netlink: 'syz.0.2483': attribute type 21 has an invalid length. [ 343.600923][T15128] IPv6: NLM_F_CREATE should be specified when creating new route [ 343.609027][T15128] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 343.616265][T15128] IPv6: NLM_F_CREATE should be set when creating new route [ 343.623527][T15128] IPv6: NLM_F_CREATE should be set when creating new route [ 343.630754][T15128] IPv6: NLM_F_CREATE should be set when creating new route [ 343.688833][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.705325][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.716375][ T36] bond0 (unregistering): Released all slaves [ 343.840706][T15007] chnl_net:caif_netlink_parms(): no params data found [ 343.943075][T15136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2487'. [ 344.025766][T15136] gre0: left promiscuous mode [ 344.153668][ T5834] Bluetooth: hci4: command tx timeout [ 344.298666][T15158] Cannot find set identified by id 752 to match [ 344.432983][T15152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2492'. [ 344.433753][T15164] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2495'. [ 344.703322][ T5834] Bluetooth: hci3: command tx timeout [ 344.837912][ T36] hsr_slave_0: left promiscuous mode [ 344.844127][ T36] hsr_slave_1: left promiscuous mode [ 344.849146][T15177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2497'. [ 344.850155][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.867097][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.875119][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.882934][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.929193][ T36] veth1_macvtap: left promiscuous mode [ 344.941571][ T36] veth0_macvtap: left promiscuous mode [ 344.956555][ T36] veth1_vlan: left promiscuous mode [ 344.967305][ T36] veth0_vlan: left promiscuous mode [ 345.437113][ T36] team0 (unregistering): Port device team_slave_1 removed [ 345.489084][ T36] team0 (unregistering): Port device team_slave_0 removed [ 345.901623][T15007] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.909519][T15007] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.933250][T15007] bridge_slave_0: entered allmulticast mode [ 345.940874][T15007] bridge_slave_0: entered promiscuous mode [ 345.971000][T15007] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.998408][T15007] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.012832][T15007] bridge_slave_1: entered allmulticast mode [ 346.025093][T15007] bridge_slave_1: entered promiscuous mode [ 346.108907][T15195] netlink: 'syz.1.2502': attribute type 21 has an invalid length. [ 346.229866][T15007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.239004][ T5834] Bluetooth: hci4: command tx timeout [ 346.280698][T15194] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2501'. [ 346.294241][T15007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.323785][T15198] syzkaller0: entered promiscuous mode [ 346.336573][T15198] syzkaller0: entered allmulticast mode [ 346.346180][T14974] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 346.349305][T15198] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 346.371530][T15198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.446226][T14974] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 346.480264][T14974] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 346.521135][T15007] team0: Port device team_slave_0 added [ 346.531362][T15007] team0: Port device team_slave_1 added [ 346.546431][T14974] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 346.629755][T15007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.637157][T15007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.664119][T15007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.681635][T15007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.689628][T15007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.716460][T15007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.717232][T15220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2508'. [ 346.783320][ T5834] Bluetooth: hci3: command tx timeout [ 346.870192][T15007] hsr_slave_0: entered promiscuous mode [ 346.877699][T15007] hsr_slave_1: entered promiscuous mode [ 346.884224][T15007] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.891793][T15007] Cannot create hsr debugfs directory [ 347.058565][T15231] nbd: must specify at least one socket [ 347.080236][T14974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.176860][T14974] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.237717][ T8744] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.244930][ T8744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.327388][ T8744] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.334588][ T8744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.633386][T15253] netlink: 'syz.1.2519': attribute type 1 has an invalid length. [ 347.650911][T15257] x_tables: duplicate underflow at hook 3 [ 347.859266][T15265] syzkaller0: entered allmulticast mode [ 347.945938][T15007] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 348.005537][T15007] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 348.119381][T15007] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 348.222049][T15007] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 348.259053][T15287] IPVS: set_ctl: invalid protocol: 58 100.1.1.2:20000 [ 348.297936][T14974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.305408][ T5834] Bluetooth: hci4: command tx timeout [ 348.420214][T15306] __nla_validate_parse: 36 callbacks suppressed [ 348.420230][T15306] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2531'. [ 348.527363][T15007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.607365][T15007] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.640329][ T8744] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.647542][ T8744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.694381][ T8742] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.701583][ T8742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.738383][T15317] lo: left promiscuous mode [ 348.747225][T15317] tunl0: left promiscuous mode [ 348.764613][T15317] gretap0: left promiscuous mode [ 348.774835][T15317] erspan0: left promiscuous mode [ 348.781105][T15317] ip_vti0: left promiscuous mode [ 348.810652][T15317] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 348.939810][T14974] veth0_vlan: entered promiscuous mode [ 348.951510][T15007] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 348.963633][T15007] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 349.022780][T14974] veth1_vlan: entered promiscuous mode [ 349.166726][T14974] veth0_macvtap: entered promiscuous mode [ 349.201743][T14974] veth1_macvtap: entered promiscuous mode [ 349.269444][T14974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.310410][T14974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.337298][T14974] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.372835][T14974] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.391750][T14974] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.401435][T14974] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.443664][T15342] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2539'. [ 349.453081][T15342] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2539'. [ 349.473885][T15342] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2539'. [ 349.511551][T15007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.693769][ T8742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.707736][ T8742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.755616][T15007] veth0_vlan: entered promiscuous mode [ 349.799061][T15007] veth1_vlan: entered promiscuous mode [ 349.807831][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.851793][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.906605][T15007] veth0_macvtap: entered promiscuous mode [ 349.961109][T15007] veth1_macvtap: entered promiscuous mode [ 350.002030][T15007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.025636][T15007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.039037][T15007] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.049067][T15007] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.058356][T15007] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.090708][T15007] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.325673][T15378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2550'. [ 350.340948][T15379] netlink: 'syz.0.2551': attribute type 1 has an invalid length. [ 350.360050][T15379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2551'. [ 350.378898][ T1345] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.524763][ T1345] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.579464][ T1345] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.601759][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.623402][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.678618][ T1345] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.713758][ T8744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.721604][ T8744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.912626][ T1345] bridge_slave_1: left allmulticast mode [ 350.918318][ T1345] bridge_slave_1: left promiscuous mode [ 350.924504][ T1345] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.933416][ T1345] bridge_slave_0: left allmulticast mode [ 350.939055][ T1345] bridge_slave_0: left promiscuous mode [ 350.945929][ T1345] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.241210][ T1345] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.252103][ T1345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.262068][ T1345] bond0 (unregistering): Released all slaves [ 351.794883][T15391] batadv_slave_1: entered allmulticast mode [ 351.848571][T15388] batadv_slave_1: left allmulticast mode [ 352.078932][ T1345] hsr_slave_0: left promiscuous mode [ 352.099550][ T1345] hsr_slave_1: left promiscuous mode [ 352.114121][ T1345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.121616][ T1345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.153733][ T1345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.161153][ T1345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.208312][ T1345] veth1_macvtap: left promiscuous mode [ 352.220207][ T1345] veth0_macvtap: left promiscuous mode [ 352.227576][ T1345] veth1_vlan: left promiscuous mode [ 352.233913][ T1345] veth0_vlan: left promiscuous mode [ 352.260747][ T5153] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 352.271762][ T5153] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 352.284000][ T5153] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 352.292808][ T5153] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 352.301448][ T5153] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 352.648122][ T1345] team0 (unregistering): Port device team_slave_1 removed [ 352.681637][ T1345] team0 (unregistering): Port device team_slave_0 removed [ 353.578210][T15416] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2559'. [ 353.668777][ T1345] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.724256][T15400] chnl_net:caif_netlink_parms(): no params data found [ 353.735477][ T8744] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 353.735648][T15416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2559'. [ 353.802556][T15416] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2559'. [ 353.850906][ T1345] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.911193][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 353.920628][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 353.928745][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 353.940512][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 353.948754][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 354.019908][ T1345] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.075055][T15438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2564'. [ 354.187498][ T1345] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.255396][T15438] bridge_slave_0: left allmulticast mode [ 354.261080][T15438] bridge_slave_0: left promiscuous mode [ 354.267733][T15438] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.281618][T15438] bond0: (slave veth0_to_bond): Releasing active interface [ 354.301664][T15438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.311851][T15438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.319540][T15438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.343514][T15438] bond4: (slave veth7): Releasing backup interface [ 354.383829][ T5153] Bluetooth: hci3: command tx timeout [ 354.415275][T15400] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.424189][T15400] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.431385][T15400] bridge_slave_0: entered allmulticast mode [ 354.452294][T15400] bridge_slave_0: entered promiscuous mode [ 354.501725][T15400] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.532737][T15400] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.560059][T15400] bridge_slave_1: entered allmulticast mode [ 354.578927][T15400] bridge_slave_1: entered promiscuous mode [ 354.750522][T15400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.889290][T15400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.011438][T15400] team0: Port device team_slave_0 added [ 355.030428][ T1345] bridge_slave_1: left allmulticast mode [ 355.037066][ T1345] bridge_slave_1: left promiscuous mode [ 355.050345][ T1345] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.070537][ T1345] bridge_slave_0: left allmulticast mode [ 355.080027][ T1345] bridge_slave_0: left promiscuous mode [ 355.094088][T15473] netlink: 'syz.2.2575': attribute type 1 has an invalid length. [ 355.119236][ T1345] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.122510][T15473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2575'. [ 355.457195][T15486] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2580'. [ 355.565346][ T1345] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.578525][ T1345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.589779][ T1345] bond0 (unregistering): Released all slaves [ 355.617712][T15400] team0: Port device team_slave_1 added [ 355.677950][T15485] netlink: 'syz.2.2580': attribute type 1 has an invalid length. [ 355.739748][T15400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.758744][T15400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.786468][T15400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.807981][T15496] netlink: 'syz.0.2583': attribute type 21 has an invalid length. [ 355.820888][T15496] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2583'. [ 355.827249][T15500] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2585'. [ 355.867805][T15400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.878141][T15400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.904631][T15400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.916390][T15496] netlink: 'syz.0.2583': attribute type 4 has an invalid length. [ 355.924590][T15496] netlink: 'syz.0.2583': attribute type 5 has an invalid length. [ 355.926694][T15499] netlink: 'syz.1.2582': attribute type 1 has an invalid length. [ 355.932382][T15496] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2583'. [ 355.988667][ T5153] Bluetooth: hci4: command tx timeout [ 356.047352][T15504] netlink: 'syz.0.2587': attribute type 13 has an invalid length. [ 356.121873][T15400] hsr_slave_0: entered promiscuous mode [ 356.135361][T15400] hsr_slave_1: entered promiscuous mode [ 356.155407][T15504] macvtap0: entered allmulticast mode [ 356.161241][T15504] macvtap0: refused to change device tx_queue_len [ 356.310690][T15517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2589'. [ 356.463025][ T5153] Bluetooth: hci3: command tx timeout [ 356.552035][ T1345] hsr_slave_0: left promiscuous mode [ 356.562261][ T1345] hsr_slave_1: left promiscuous mode [ 356.577472][ T1345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.585814][ T1345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.594542][ T1345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.602261][ T1345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.624918][ T1345] veth1_macvtap: left promiscuous mode [ 356.630436][ T1345] veth0_macvtap: left promiscuous mode [ 356.637058][ T1345] veth1_vlan: left promiscuous mode [ 356.642393][ T1345] veth0_vlan: left promiscuous mode [ 357.032846][ T1345] team0 (unregistering): Port device team_slave_1 removed [ 357.075076][ T1345] team0 (unregistering): Port device team_slave_0 removed [ 357.633294][T15430] chnl_net:caif_netlink_parms(): no params data found [ 357.711115][T15535] vlan3: entered allmulticast mode [ 357.719516][T15535] team_slave_0: entered allmulticast mode [ 357.941225][T15546] macvtap1: entered promiscuous mode [ 357.954332][T15546] vlan0: entered promiscuous mode [ 357.959684][T15546] macvtap1: entered allmulticast mode [ 357.967296][T15546] vlan0: entered allmulticast mode [ 357.974749][T15546] veth0_vlan: entered allmulticast mode [ 358.038831][T15546] vlan0: left allmulticast mode [ 358.051206][T15546] veth0_vlan: left allmulticast mode [ 358.057682][T15546] vlan0: left promiscuous mode [ 358.062802][ T5153] Bluetooth: hci4: command tx timeout [ 358.182244][T15430] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.190821][T15430] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.213708][T15430] bridge_slave_0: entered allmulticast mode [ 358.221406][T15430] bridge_slave_0: entered promiscuous mode [ 358.262779][T15430] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.275759][T15430] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.284435][T15430] bridge_slave_1: entered allmulticast mode [ 358.292098][T15430] bridge_slave_1: entered promiscuous mode [ 358.318104][T15556] netlink: 'syz.1.2601': attribute type 10 has an invalid length. [ 358.319077][T15557] netlink: 'syz.1.2601': attribute type 10 has an invalid length. [ 358.365661][T15430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.378481][T15559] syzkaller0: entered promiscuous mode [ 358.385703][T15559] syzkaller0: entered allmulticast mode [ 358.396934][T15430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.507368][T15430] team0: Port device team_slave_0 added [ 358.516770][T15430] team0: Port device team_slave_1 added [ 358.543297][ T5153] Bluetooth: hci3: command tx timeout [ 358.598638][T15564] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 358.660939][T15430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.670852][T15430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.698899][T15430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.718458][T15430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.758728][T15430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.832507][T15430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.858261][T15574] netlink: 'syz.2.2606': attribute type 11 has an invalid length. [ 358.876638][T15574] __nla_validate_parse: 2 callbacks suppressed [ 358.876655][T15574] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2606'. [ 358.950640][T15579] netlink: 'syz.1.2607': attribute type 83 has an invalid length. [ 358.974356][T15430] hsr_slave_0: entered promiscuous mode [ 358.980966][T15430] hsr_slave_1: entered promiscuous mode [ 358.992835][T15430] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 359.000432][T15430] Cannot create hsr debugfs directory [ 359.219154][T15400] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 359.249859][T15400] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 359.275995][T15400] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 359.280720][T15590] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2611'. [ 359.299569][T15590] openvswitch: netlink: Flow key attr not present in new flow. [ 359.310147][T15400] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 359.438579][T15400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.490752][T15400] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.522499][ T8744] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.529725][ T8744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.556137][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.563289][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.912967][T15430] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 360.060793][T15613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2618'. [ 360.132110][T15430] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 360.143699][ T5153] Bluetooth: hci4: command tx timeout [ 360.181409][T15616] vlan3: entered allmulticast mode [ 360.248507][T15430] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 360.270944][T15430] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 360.365920][T15400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.658876][ T5153] Bluetooth: hci3: command tx timeout [ 360.701938][T15430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.745843][T15651] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2622'. [ 360.751115][T15430] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.786750][ T8742] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.793962][ T8742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.846498][ T8742] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.853729][ T8742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.987081][T15657] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 361.035008][T15657] tipc: Failed to obtain node identity [ 361.043027][T15657] tipc: Enabling of bearer rejected, failed to enable media [ 361.076979][T15430] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 361.097512][T15662] netlink: 'syz.2.2626': attribute type 1 has an invalid length. [ 361.106393][T15662] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 361.113640][T15662] IPv6: NLM_F_CREATE should be set when creating new route [ 361.242653][T15672] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2628'. [ 361.453406][T15400] veth0_vlan: entered promiscuous mode [ 361.474918][T15400] veth1_vlan: entered promiscuous mode [ 361.486223][T15684] xt_TPROXY: Can be used only with -p tcp or -p udp [ 361.554106][T15400] veth0_macvtap: entered promiscuous mode [ 361.580432][T15400] veth1_macvtap: entered promiscuous mode [ 361.645435][T15400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.711452][T15400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.731339][T15430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.745950][T15400] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.773242][T15400] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.781972][T15400] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.817598][T15400] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.841989][T15699] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 361.956224][T15703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2637'. [ 362.040412][T15430] veth0_vlan: entered promiscuous mode [ 362.051014][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.071943][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.097379][T15430] veth1_vlan: entered promiscuous mode [ 362.149239][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.158133][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.229591][T15430] veth0_macvtap: entered promiscuous mode [ 362.235814][ T5153] Bluetooth: hci4: command tx timeout [ 362.250139][T15430] veth1_macvtap: entered promiscuous mode [ 362.275336][T15430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.289694][T15430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.300979][T15430] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.311846][T15430] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.325135][T15430] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.334551][T15430] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.519111][T15715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2641'. [ 362.527843][ T8744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.539305][T15715] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 362.554439][ T8744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.572769][T15715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.668198][ T1105] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.765870][ T1345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.789156][ T1345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.807609][ T1105] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.899803][ T1105] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.980709][ T1105] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.022978][ T5153] Bluetooth: hci0: command tx timeout [ 363.221600][ T1105] bridge_slave_1: left allmulticast mode [ 363.227858][ T1105] bridge_slave_1: left promiscuous mode [ 363.233595][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.248108][ T1105] bridge_slave_0: left allmulticast mode [ 363.254742][ T1105] bridge_slave_0: left promiscuous mode [ 363.260417][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.674353][T15725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2643'. [ 363.847148][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.876013][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.894805][ T1105] bond0 (unregistering): Released all slaves [ 364.016112][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 364.029692][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 364.037957][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 364.046235][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 364.055163][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 364.444187][ T1105] hsr_slave_0: left promiscuous mode [ 364.449963][ T1105] hsr_slave_1: left promiscuous mode [ 364.455837][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.469310][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.477512][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.485337][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.505766][ T1105] veth1_macvtap: left promiscuous mode [ 364.511263][ T1105] veth0_macvtap: left promiscuous mode [ 364.517426][ T1105] veth1_vlan: left promiscuous mode [ 364.522866][ T1105] veth0_vlan: left promiscuous mode [ 364.896723][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 365.005207][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 365.012995][T15739] set match dimension is over the limit! [ 365.446839][ T5153] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 365.460680][ T5153] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 365.470870][ T5153] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 365.479444][ T5153] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 365.491611][ T5153] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 365.900611][T15730] chnl_net:caif_netlink_parms(): no params data found [ 365.963473][T15760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2651'. [ 366.091717][T15767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2653'. [ 366.143035][ T5153] Bluetooth: hci3: command tx timeout [ 366.154893][T15770] netlink: 252 bytes leftover after parsing attributes in process `syz.0.2654'. [ 366.364238][T15730] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.379484][T15730] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.388864][T15730] bridge_slave_0: entered allmulticast mode [ 366.396710][T15730] bridge_slave_0: entered promiscuous mode [ 366.415340][T15730] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.424900][T15730] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.434016][T15730] bridge_slave_1: entered allmulticast mode [ 366.441727][T15730] bridge_slave_1: entered promiscuous mode [ 366.478046][T15782] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2657'. [ 366.504204][T15782] xt_cluster: node mask cannot exceed total number of nodes [ 366.549399][T15730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.611432][T15790] netlink: 'syz.2.2659': attribute type 8 has an invalid length. [ 366.623572][T15790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2659'. [ 366.721136][T15730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.742249][T15790] bridge0: entered allmulticast mode [ 366.986494][T15755] chnl_net:caif_netlink_parms(): no params data found [ 367.001817][T15730] team0: Port device team_slave_0 added [ 367.005755][T15811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2663'. [ 367.016554][T15811] nbd: nbd0 already in use [ 367.022213][T15808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2663'. [ 367.052530][T15808] nbd: nbd0 already in use [ 367.088006][ T1105] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.120755][T15730] team0: Port device team_slave_1 added [ 367.170617][T15813] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2665'. [ 367.315750][ T1105] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.350518][T15825] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2666'. [ 367.440400][T15730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.449838][T15730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.489035][T15730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.584761][ T5153] Bluetooth: hci4: command tx timeout [ 367.595077][ T1105] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.700743][T15730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.708057][T15730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.764200][T15730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.823819][ T1105] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.929244][T15755] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.950800][T15755] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.976106][T15755] bridge_slave_0: entered allmulticast mode [ 367.987693][T15755] bridge_slave_0: entered promiscuous mode [ 368.047677][T15858] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 368.095611][T15755] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.104474][T15755] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.111714][T15755] bridge_slave_1: entered allmulticast mode [ 368.119706][T15755] bridge_slave_1: entered promiscuous mode [ 368.224573][ T5153] Bluetooth: hci3: command tx timeout [ 368.316172][T15876] netlink: 'syz.2.2679': attribute type 1 has an invalid length. [ 368.331985][T15876] netlink: 'syz.2.2679': attribute type 2 has an invalid length. [ 368.376097][T15755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.441653][T15755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.529964][T15730] hsr_slave_0: entered promiscuous mode [ 368.559846][T15730] hsr_slave_1: entered promiscuous mode [ 368.638402][T15755] team0: Port device team_slave_0 added [ 368.717343][T15755] team0: Port device team_slave_1 added [ 368.739899][T15892] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2683'. [ 368.766262][T15893] netlink: 'syz.1.2683': attribute type 83 has an invalid length. [ 368.830153][ T1105] bridge_slave_1: left allmulticast mode [ 368.836961][ T1105] bridge_slave_1: left promiscuous mode [ 368.852735][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.867054][ T1105] bridge_slave_0: left allmulticast mode [ 368.876800][ T1105] bridge_slave_0: left promiscuous mode [ 368.889271][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.989872][T15900] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 369.319907][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.331598][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.341987][ T1105] bond0 (unregistering): Released all slaves [ 369.359090][T15755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.379782][T15755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.420465][T15755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.440566][T15755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.451543][T15755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.478764][T15755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.663719][ T5153] Bluetooth: hci4: command tx timeout [ 369.716586][T15915] netlink: 'syz.1.2690': attribute type 1 has an invalid length. [ 369.970091][T15931] netlink: 'syz.1.2695': attribute type 24 has an invalid length. [ 370.058342][T15755] hsr_slave_0: entered promiscuous mode [ 370.067924][T15755] hsr_slave_1: entered promiscuous mode [ 370.078226][T15755] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 370.088102][T15755] Cannot create hsr debugfs directory [ 370.285584][T15942] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 370.304410][ T5153] Bluetooth: hci3: command tx timeout [ 370.571661][ T1105] hsr_slave_0: left promiscuous mode [ 370.580115][ T1105] hsr_slave_1: left promiscuous mode [ 370.591220][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.604084][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.613257][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.620669][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.646704][ T1105] veth1_macvtap: left promiscuous mode [ 370.652277][ T1105] veth0_macvtap: left promiscuous mode [ 370.660192][ T1105] veth1_vlan: left promiscuous mode [ 370.665809][ T1105] veth0_vlan: left promiscuous mode [ 371.128778][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 371.169389][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 371.628641][T15952] syzkaller0: entered promiscuous mode [ 371.634344][T15952] syzkaller0: entered allmulticast mode [ 371.712142][T15960] __nla_validate_parse: 1 callbacks suppressed [ 371.712163][T15960] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2704'. [ 371.752790][ T5153] Bluetooth: hci4: command tx timeout [ 372.392818][ T5153] Bluetooth: hci3: command tx timeout [ 373.441251][T15976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2708'. [ 373.628635][T15974] team0 (unregistering): Port device team_slave_0 removed [ 373.638031][T15974] team0 (unregistering): Port device team_slave_1 removed [ 373.670808][T15974] team0 (unregistering): Port device bond0 removed [ 373.681877][T15974] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.691618][T15974] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.701787][T15974] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.711663][T15974] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.737096][T15974] team0 (unregistering): Port device geneve0 removed [ 373.825326][ T5153] Bluetooth: hci4: command tx timeout [ 373.897753][T15730] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 373.953235][T15985] xt_ecn: cannot match TCP bits for non-tcp packets [ 373.967196][T15730] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 373.997266][T15730] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 374.044518][T15730] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 374.077424][T15988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2711'. [ 374.112402][T15996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2711'. [ 374.152974][T15996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2711'. [ 374.169612][T15988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2711'. [ 374.371612][T15730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.471332][T15730] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.489214][T13360] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.496390][T13360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.530494][T16004] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 374.549531][T16004] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 374.584217][ T8752] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.591384][ T8752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.626445][T16015] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2715'. [ 374.667116][T16004] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 374.698782][T16004] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 374.735193][T16018] sctp: [Deprecated]: syz.1.2716 (pid 16018) Use of struct sctp_assoc_value in delayed_ack socket option. [ 374.735193][T16018] Use struct sctp_sack_info instead [ 374.762323][T15755] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 374.780123][T16004] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 374.790863][T16004] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 374.809392][T15755] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 374.826467][T15755] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 374.840524][T15755] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 374.863766][T16004] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 374.877008][T16004] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 374.905103][T16020] netlink: 'syz.1.2717': attribute type 1 has an invalid length. [ 375.054874][T16004] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 375.072029][T16004] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 375.109049][T16004] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 375.120881][T16004] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 375.145736][T16004] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 375.157760][T16004] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 375.207713][T16004] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 375.222211][T16004] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 375.241436][T16034] tipc: Started in network mode [ 375.248503][T16034] tipc: Node identity 4a4aeb395de7, cluster identity 4711 [ 375.271854][T16034] tipc: Enabled bearer , priority 0 [ 375.380606][T16034] tipc: Disabling bearer [ 375.420101][T15730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.450202][T15755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.532284][T16046] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2722'. [ 375.553185][T15755] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.577921][ T8752] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.585093][ T8752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.687332][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.694580][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.044232][T16070] nbd: must specify at least one socket [ 376.270472][T15730] veth0_vlan: entered promiscuous mode [ 376.358235][T16084] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2729'. [ 376.410365][T16080] syzkaller0: entered promiscuous mode [ 376.427307][T16080] syzkaller0: entered allmulticast mode [ 376.486951][T16089] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2732'. [ 376.492083][T16091] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 376.516782][T15730] veth1_vlan: entered promiscuous mode [ 377.914070][T16087] tap0: tun_chr_ioctl cmd 1074025678 [ 377.919470][T16087] tap0: group set to 0 [ 377.957568][T15730] veth0_macvtap: entered promiscuous mode [ 377.978785][T15755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.015983][T15730] veth1_macvtap: entered promiscuous mode [ 378.088508][T15730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.126991][T15730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.151214][T15755] veth0_vlan: entered promiscuous mode [ 378.157466][T16106] delete_channel: no stack [ 378.158461][T16105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2736'. [ 378.180408][T15730] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.195255][T15730] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.205183][T15730] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.214253][T15730] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.237559][T16105] bridge_slave_1: left allmulticast mode [ 378.249727][T16105] bridge_slave_1: left promiscuous mode [ 378.258197][T16105] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.291871][T16105] bridge_slave_0: left promiscuous mode [ 378.298894][T16105] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.402007][T16115] can: request_module (can-proto-4) failed. [ 378.417877][T16113] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2739'. [ 378.423833][T15755] veth1_vlan: entered promiscuous mode [ 378.527774][T16117] netlink: 'syz.1.2740': attribute type 1 has an invalid length. [ 378.558381][T16117] netlink: 'syz.1.2740': attribute type 1 has an invalid length. [ 378.578681][T15755] veth0_macvtap: entered promiscuous mode [ 378.607371][T15755] veth1_macvtap: entered promiscuous mode [ 378.681980][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.694006][T15755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.701593][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.712963][T15755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.746924][T15755] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.761203][T15755] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.774210][T15755] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.793730][T15755] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.857146][T16131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2743'. [ 378.989111][T16134] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2744'. [ 379.004674][ T8752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.013550][ T8752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.107312][T13360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.138803][T13360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.258503][T16143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2747'. [ 379.379817][ T8752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.397276][ T8752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.433546][T16153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2747'. [ 379.680133][ T1105] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.764875][ T1105] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.911153][ T1105] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.013736][ T1105] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.202316][T16157] dvmrp0: left allmulticast mode [ 380.283149][ T1105] bridge_slave_1: left allmulticast mode [ 380.288925][ T1105] bridge_slave_1: left promiscuous mode [ 380.301642][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.322769][ T1105] bridge_slave_0: left allmulticast mode [ 380.332596][ T1105] bridge_slave_0: left promiscuous mode [ 380.338407][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.489250][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 380.500189][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 380.520689][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 380.530062][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 380.540022][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 380.775767][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.788160][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.799384][ T1105] bond0 (unregistering): Released all slaves [ 381.312264][ T1105] hsr_slave_0: left promiscuous mode [ 381.318767][ T1105] hsr_slave_1: left promiscuous mode [ 381.330988][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.339937][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.349155][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.356734][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.376272][ T1105] veth1_macvtap: left promiscuous mode [ 381.382543][ T1105] veth0_macvtap: left promiscuous mode [ 381.388189][ T1105] veth1_vlan: left promiscuous mode [ 381.393920][ T1105] veth0_vlan: left promiscuous mode [ 381.559824][T16170] netlink: 'syz.2.2753': attribute type 2 has an invalid length. [ 381.567913][T16170] netlink: 'syz.2.2753': attribute type 1 has an invalid length. [ 381.599952][T16173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2751'. [ 382.042361][ T5153] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 382.062125][ T5153] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 382.075462][ T5153] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 382.090557][ T5153] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 382.111454][ T5153] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 382.175896][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 382.215452][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 382.642814][ T5153] Bluetooth: hci3: command tx timeout [ 382.738414][T16164] chnl_net:caif_netlink_parms(): no params data found [ 382.764112][T16194] netlink: 'syz.1.2756': attribute type 58 has an invalid length. [ 382.779234][T16194] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2756'. [ 382.892309][T16197] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 383.061970][T16164] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.083219][T16208] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD [ 383.115001][T16164] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.140117][T16164] bridge_slave_0: entered allmulticast mode [ 383.159603][T16164] bridge_slave_0: entered promiscuous mode [ 383.199610][T16164] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.227399][T16164] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.239068][T16164] bridge_slave_1: entered allmulticast mode [ 383.250572][T16164] bridge_slave_1: entered promiscuous mode [ 383.263334][T16214] netlink: 'syz.1.2762': attribute type 4 has an invalid length. [ 383.302930][T16214] netlink: 'syz.1.2762': attribute type 4 has an invalid length. [ 383.408692][ T1105] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.466248][T16164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.560962][ T1105] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.589991][T16164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.663826][ T1105] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.721042][T16164] team0: Port device team_slave_0 added [ 383.741960][T16225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2765'. [ 383.751706][T16225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2765'. [ 383.774830][ T1105] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.804259][T16164] team0: Port device team_slave_1 added [ 383.894388][T16164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.901433][T16164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.929330][T16164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.985914][T16164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.994305][T16164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.021513][T16164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.095506][T16227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2766'. [ 384.153008][ T5153] Bluetooth: hci4: command tx timeout [ 384.198576][T16234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2767'. [ 384.232802][T16234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2767'. [ 384.248832][T16234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2767'. [ 384.404578][T16164] hsr_slave_0: entered promiscuous mode [ 384.411070][T16164] hsr_slave_1: entered promiscuous mode [ 384.417884][T16190] chnl_net:caif_netlink_parms(): no params data found [ 384.451394][T16246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2770'. [ 384.481104][T16246] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2770'. [ 384.512111][T16246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2770'. [ 384.522005][T16246] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2770'. [ 384.579148][T16252] sctp: [Deprecated]: syz.2.2771 (pid 16252) Use of int in max_burst socket option. [ 384.579148][T16252] Use struct sctp_assoc_value instead [ 384.605659][T16253] pim6reg: entered allmulticast mode [ 384.698416][ T1105] bridge_slave_1: left allmulticast mode [ 384.713623][ T5153] Bluetooth: hci3: command tx timeout [ 384.727361][ T1105] bridge_slave_1: left promiscuous mode [ 384.736837][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.749958][ T1105] bridge_slave_0: left allmulticast mode [ 384.759129][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 384.767004][ T1105] bridge_slave_0: left promiscuous mode [ 384.775368][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.119630][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.130402][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.140593][ T1105] bond0 (unregistering): Released all slaves [ 385.157165][T16253] pim6reg: left allmulticast mode [ 385.420995][T16190] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.435828][T16190] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.461915][T16190] bridge_slave_0: entered allmulticast mode [ 385.479864][T16190] bridge_slave_0: entered promiscuous mode [ 385.503555][T16190] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.510688][T16190] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.521905][T16190] bridge_slave_1: entered allmulticast mode [ 385.529608][T16190] bridge_slave_1: entered promiscuous mode [ 385.678666][T16190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.777865][T16190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.025247][T16190] team0: Port device team_slave_0 added [ 386.060994][ T1105] hsr_slave_0: left promiscuous mode [ 386.069557][ T1105] hsr_slave_1: left promiscuous mode [ 386.078227][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.086155][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.095294][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.102846][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.125927][ T1105] veth1_macvtap: left promiscuous mode [ 386.131432][ T1105] veth0_macvtap: left promiscuous mode [ 386.137097][ T1105] veth1_vlan: left promiscuous mode [ 386.142352][ T1105] veth0_vlan: left promiscuous mode [ 386.222678][ T5153] Bluetooth: hci4: command tx timeout [ 386.794409][ T5153] Bluetooth: hci3: command tx timeout [ 386.809834][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 386.862371][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 387.290863][T16190] team0: Port device team_slave_1 added [ 387.409443][T16190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.422168][T16190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.478324][T16190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.556098][T16190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.599680][T16190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.603380][T16327] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 387.636080][T16190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.919455][T16190] hsr_slave_0: entered promiscuous mode [ 387.934341][T16190] hsr_slave_1: entered promiscuous mode [ 387.945310][T16190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 387.956538][T16190] Cannot create hsr debugfs directory [ 388.247357][T16164] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 388.272015][T16164] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 388.302903][ T5153] Bluetooth: hci4: command tx timeout [ 388.311573][T16164] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 388.333630][T16164] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 388.360780][T16353] SET target dimension over the limit! [ 388.420085][T16353] netlink: 'syz.1.2796': attribute type 29 has an invalid length. [ 388.595249][T16164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.642207][T16164] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.675313][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.682545][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.744584][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.751755][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.840104][T16375] __nla_validate_parse: 7 callbacks suppressed [ 388.840121][T16375] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2801'. [ 388.870719][ T5153] Bluetooth: hci3: command tx timeout [ 389.015806][T16379] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2803'. [ 389.135320][T16190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 389.176080][T16190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 389.281422][T16190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 389.339027][T16190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 389.361712][T16395] netlink: 'syz.1.2805': attribute type 1 has an invalid length. [ 389.440158][T16395] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 389.625186][T16415] x_tables: duplicate underflow at hook 3 [ 389.751220][T16190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.816012][T16190] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.831145][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.838314][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.870380][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.877576][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.906577][T16427] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2809'. [ 389.926084][T16425] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2811'. [ 389.994497][T16164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.383384][ T5153] Bluetooth: hci4: command tx timeout [ 390.652052][T16190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.695089][T16460] syzkaller1: entered promiscuous mode [ 390.701476][T16460] syzkaller1: entered allmulticast mode [ 390.713103][T16464] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 390.998378][T16190] veth0_vlan: entered promiscuous mode [ 391.026459][T16164] veth0_vlan: entered promiscuous mode [ 391.069129][T16164] veth1_vlan: entered promiscuous mode [ 391.104534][T16190] veth1_vlan: entered promiscuous mode [ 391.208366][T16190] veth0_macvtap: entered promiscuous mode [ 391.247602][T16190] veth1_macvtap: entered promiscuous mode [ 391.289771][T16164] veth0_macvtap: entered promiscuous mode [ 391.320589][T16164] veth1_macvtap: entered promiscuous mode [ 391.342882][T16190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.367389][T16190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.397836][T16190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.417711][T16190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.448239][T16190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.468051][T16190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.517816][T16496] x_tables: duplicate underflow at hook 2 [ 391.518342][T16164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.550880][T16164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.587777][T16164] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.597056][T16164] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.606636][T16164] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.628691][T16164] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.830575][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.862506][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.925214][ T8744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.953028][ T8744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.007471][ T8757] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.031206][ T8757] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.222297][T16515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2833'. [ 392.247639][ T8744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.255957][ T8744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.406195][T16525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2837'. [ 392.767372][T16544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2841'. [ 392.878067][ T8742] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.056880][ T8742] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.152779][ T8742] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.239413][ T8742] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.394209][ T8742] bridge_slave_1: left allmulticast mode [ 393.399909][ T8742] bridge_slave_1: left promiscuous mode [ 393.405681][ T8742] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.416180][ T8742] bridge_slave_0: left allmulticast mode [ 393.421870][ T8742] bridge_slave_0: left promiscuous mode [ 393.431171][ T8742] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.766063][ T8742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.778798][ T8742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.789337][ T8742] bond0 (unregistering): Released all slaves [ 394.106558][ T8742] hsr_slave_0: left promiscuous mode [ 394.112829][ T8742] hsr_slave_1: left promiscuous mode [ 394.118890][ T8742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.131881][ T8742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.140671][ T8742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.149009][ T8742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.169051][ T8742] veth1_macvtap: left promiscuous mode [ 394.174900][ T8742] veth0_macvtap: left promiscuous mode [ 394.180721][ T8742] veth1_vlan: left promiscuous mode [ 394.186274][ T8742] veth0_vlan: left promiscuous mode [ 394.580412][ T8742] team0 (unregistering): Port device team_slave_1 removed [ 394.618627][ T8742] team0 (unregistering): Port device team_slave_0 removed [ 394.794072][T16552] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 395.079483][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 395.095208][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 395.109890][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 395.124793][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 395.147622][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 395.601988][T16558] chnl_net:caif_netlink_parms(): no params data found [ 395.648165][ T8742] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.719716][ T8742] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.746313][T16558] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.757593][T16558] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.764883][T16558] bridge_slave_0: entered allmulticast mode [ 395.771802][T16558] bridge_slave_0: entered promiscuous mode [ 395.781270][T16558] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.789048][T16558] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.796605][T16558] bridge_slave_1: entered allmulticast mode [ 395.809078][T16558] bridge_slave_1: entered promiscuous mode [ 395.927141][ T8742] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.977844][T16574] delete_channel: no stack [ 396.009807][T16558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.009977][T16573] tls_set_device_offload_rx: netdev not found [ 396.073516][T16573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2847'. [ 396.074198][ T8742] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.142090][T16558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.248654][T16558] team0: Port device team_slave_0 added [ 396.308430][T16558] team0: Port device team_slave_1 added [ 396.337823][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 396.348062][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 396.356139][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 396.365644][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 396.378762][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 396.428946][T16583] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2851'. [ 396.443242][T16558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.450194][T16558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.481140][T16588] netlink: 'syz.0.2851': attribute type 1 has an invalid length. [ 396.497055][T16558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.546354][ T8742] bridge_slave_1: left allmulticast mode [ 396.562481][ T8742] bridge_slave_1: left promiscuous mode [ 396.568178][ T8742] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.578329][ T8742] bridge_slave_0: left allmulticast mode [ 396.584576][ T8742] bridge_slave_0: left promiscuous mode [ 396.591575][ T8742] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.789437][T16597] netlink: 'syz.1.2853': attribute type 1 has an invalid length. [ 397.138015][ T8742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.155621][ T8742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.169266][ T8742] bond0 (unregistering): Released all slaves [ 397.181517][T16558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.188588][ T5834] Bluetooth: hci3: command tx timeout [ 397.197968][T16558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.224466][T16558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.280997][T16605] syzkaller0: entered promiscuous mode [ 397.310193][T16605] syzkaller0: entered allmulticast mode [ 397.539685][T16558] hsr_slave_0: entered promiscuous mode [ 397.560429][T16558] hsr_slave_1: entered promiscuous mode [ 397.569044][T16558] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 397.576835][T16558] Cannot create hsr debugfs directory [ 397.586314][T16622] syzkaller1: entered promiscuous mode [ 397.591807][T16622] syzkaller1: entered allmulticast mode [ 398.465254][ T5834] Bluetooth: hci4: command tx timeout [ 398.535120][ T8742] hsr_slave_0: left promiscuous mode [ 398.541886][ T8742] hsr_slave_1: left promiscuous mode [ 398.548428][ T8742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.567738][T16666] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2867'. [ 398.577888][T16666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2867'. [ 398.589288][T16666] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2867'. [ 398.589759][ T8742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.631434][ T8742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.647388][ T8742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.694932][ T8742] veth1_macvtap: left promiscuous mode [ 398.700504][ T8742] veth0_macvtap: left promiscuous mode [ 398.708865][ T8742] veth1_vlan: left promiscuous mode [ 398.716325][ T8742] veth0_vlan: left promiscuous mode [ 398.737512][T16675] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2870'. [ 399.127143][ T8742] team0 (unregistering): Port device team_slave_1 removed [ 399.165804][ T8742] team0 (unregistering): Port device team_slave_0 removed [ 399.273256][ T5834] Bluetooth: hci3: command tx timeout [ 399.988752][T16584] chnl_net:caif_netlink_parms(): no params data found [ 400.180494][T16584] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.188795][T16584] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.209630][T16584] bridge_slave_0: entered allmulticast mode [ 400.234959][T16584] bridge_slave_0: entered promiscuous mode [ 400.325566][T16584] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.332836][T16584] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.340021][T16584] bridge_slave_1: entered allmulticast mode [ 400.347290][T16584] bridge_slave_1: entered promiscuous mode [ 400.393489][T16584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.411979][T16584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.470254][T16584] team0: Port device team_slave_0 added [ 400.477273][T16558] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 400.490206][T16584] team0: Port device team_slave_1 added [ 400.509528][T16558] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 400.540020][T16558] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 400.550879][T16558] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 400.552578][ T5834] Bluetooth: hci4: command tx timeout [ 400.567653][T16584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.588017][T16584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.615916][T16584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.650852][T16584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.660114][T16584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.690291][T16584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.804292][T16584] hsr_slave_0: entered promiscuous mode [ 400.811746][T16584] hsr_slave_1: entered promiscuous mode [ 400.883888][T16692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2874'. [ 400.894263][T16703] ip6gre3: entered allmulticast mode [ 400.918873][T16703] x_tables: duplicate underflow at hook 1 [ 401.017997][T16708] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2877'. [ 401.101169][T16710] netlink: 'syz.2.2878': attribute type 1 has an invalid length. [ 401.109996][T16558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.237020][T16714] veth9: entered promiscuous mode [ 401.258622][T16714] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2878'. [ 401.346393][ T5834] Bluetooth: hci3: command tx timeout [ 401.399165][T16558] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.417401][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.424611][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.441231][T16724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2882'. [ 401.459325][T16724] netlink: 'syz.1.2882': attribute type 2 has an invalid length. [ 401.475884][T16724] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2882'. [ 401.495995][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.503178][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.778259][T16749] netlink: 'syz.1.2888': attribute type 1 has an invalid length. [ 401.951485][T16749] 8021q: adding VLAN 0 to HW filter on device bond5 [ 402.214286][T16769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2891'. [ 402.250811][T16584] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 402.280999][T16584] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 402.351593][T16584] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 402.404084][T16584] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 402.507342][T16781] netlink: 'syz.0.2894': attribute type 29 has an invalid length. [ 402.528379][T16558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.624295][ T5834] Bluetooth: hci4: command tx timeout [ 402.715305][T16799] xt_socket: unknown flags 0x50 [ 402.771205][T16558] veth0_vlan: entered promiscuous mode [ 402.830537][T16558] veth1_vlan: entered promiscuous mode [ 402.864151][T16806] netlink: 'syz.1.2901': attribute type 1 has an invalid length. [ 402.933862][T16806] 8021q: adding VLAN 0 to HW filter on device bond6 [ 402.968378][T16811] bond6: (slave gretap1): making interface the new active one [ 402.979814][T16811] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 403.027129][T16584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.090564][T16558] veth0_macvtap: entered promiscuous mode [ 403.126534][T16558] veth1_macvtap: entered promiscuous mode [ 403.209208][T16558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.230514][T16830] sctp: [Deprecated]: syz.1.2908 (pid 16830) Use of int in maxseg socket option. [ 403.230514][T16830] Use struct sctp_assoc_value instead [ 403.272145][T16558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.309868][T16584] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.311156][T16830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2908'. [ 403.374365][T16558] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.389423][T16558] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.407336][T16558] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.418728][T16838] netlink: 'syz.0.2909': attribute type 1 has an invalid length. [ 403.427532][ T5834] Bluetooth: hci3: command tx timeout [ 403.434021][T16838] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2909'. [ 403.443581][T16558] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.465044][T16837] netlink: 'syz.0.2909': attribute type 1 has an invalid length. [ 403.483269][T16837] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2909'. [ 403.513770][T16830] 8021q: adding VLAN 0 to HW filter on device bond7 [ 403.541058][T16832] bond7: entered promiscuous mode [ 403.555951][ T8757] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.563137][ T8757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.587747][T16847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2911'. [ 403.638271][ T8757] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.645473][ T8757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.679822][T16847] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2911'. [ 403.954914][ T8742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.964754][T16864] tipc: Started in network mode [ 403.969654][T16864] tipc: Node identity 00000000e2ffffffffffffff00000001, cluster identity 4711 [ 403.979895][ T8742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.009791][T16864] tipc: Enabling of bearer rejected, failed to enable media [ 404.141282][ T8752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.193565][ T8752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.425676][T16584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.705185][ T5834] Bluetooth: hci4: command tx timeout [ 404.910115][ T59] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.081601][ T59] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.177941][T16584] veth0_vlan: entered promiscuous mode [ 405.189863][T16584] veth1_vlan: entered promiscuous mode [ 405.217238][T16584] veth0_macvtap: entered promiscuous mode [ 405.229505][T16584] veth1_macvtap: entered promiscuous mode [ 405.247473][T16584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.279132][ T59] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.299800][T16584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.314665][T16584] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.325667][T16584] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.334517][T16584] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.344864][T16584] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.387477][ T59] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.450902][ T8757] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.468312][ T8757] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.511722][T13360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.534847][T13360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.548962][ T59] bridge_slave_1: left allmulticast mode [ 405.559724][ T59] bridge_slave_1: left promiscuous mode [ 405.566154][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.589387][ T59] bridge_slave_0: left allmulticast mode [ 405.596734][ T59] bridge_slave_0: left promiscuous mode [ 405.606180][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.926313][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.936824][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.950279][ T59] bond0 (unregistering): Released all slaves [ 406.335843][ T59] hsr_slave_0: left promiscuous mode [ 406.341688][ T59] hsr_slave_1: left promiscuous mode [ 406.349329][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.356887][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.378685][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.386637][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.410862][ T59] veth1_macvtap: left promiscuous mode [ 406.443028][ T59] veth0_macvtap: left promiscuous mode [ 406.448613][ T59] veth1_vlan: left promiscuous mode [ 406.462653][ T59] veth0_vlan: left promiscuous mode [ 407.036970][ T5153] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 407.051514][ T5153] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 407.065969][ T5153] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 407.086996][ T5153] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 407.107341][ T5153] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 407.231903][ T59] team0 (unregistering): Port device team_slave_1 removed [ 407.272285][ T59] team0 (unregistering): Port device team_slave_0 removed [ 407.956778][T16944] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2932'. [ 407.979006][ T7881] hid-generic 0005:04F3:FFF9.0001: item fetching failed at offset 0/1 [ 407.997524][ T7881] hid-generic 0005:04F3:FFF9.0001: probe with driver hid-generic failed with error -22 [ 408.082565][T16944] C: entered promiscuous mode [ 408.089644][T16944] netlink: 'syz.0.2932': attribute type 2 has an invalid length. [ 408.100741][T16944] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 408.376659][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.557478][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.756701][ T5153] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 408.766484][ T5153] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 408.770351][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.774413][ T5153] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 408.793874][ T5153] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 408.801530][ T5153] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 408.816061][T16981] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2942'. [ 408.837453][T16981] netlink: 'syz.2.2942': attribute type 1 has an invalid length. [ 408.849492][T16981] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 408.936582][T16978] netlink: 'syz.1.2941': attribute type 10 has an invalid length. [ 408.951637][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.061122][T16934] chnl_net:caif_netlink_parms(): no params data found [ 409.124156][T16994] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2945'. [ 409.185330][ T5153] Bluetooth: hci3: command tx timeout [ 409.265694][T17005] netlink: 'syz.0.2947': attribute type 1 has an invalid length. [ 409.481866][T17007] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 409.582214][T16934] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.591330][T16934] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.598796][T16934] bridge_slave_0: entered allmulticast mode [ 409.606687][T16934] bridge_slave_0: entered promiscuous mode [ 409.646159][T16934] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.654067][T16934] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.661208][T16934] bridge_slave_1: entered allmulticast mode [ 409.669211][T16934] bridge_slave_1: entered promiscuous mode [ 409.676386][T17024] team0: Device is already in use. [ 409.696207][ T59] bridge_slave_1: left allmulticast mode [ 409.701868][ T59] bridge_slave_1: left promiscuous mode [ 409.707813][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.727084][ T59] bridge_slave_0: left allmulticast mode [ 409.733826][ T59] bridge_slave_0: left promiscuous mode [ 409.752739][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.282798][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.294305][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.304316][ T59] bond0 (unregistering): Released all slaves [ 410.322622][T17046] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2958'. [ 410.384856][T16934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.401945][T16934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.518192][T16934] team0: Port device team_slave_0 added [ 410.529680][T16934] team0: Port device team_slave_1 added [ 410.689367][T16934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.700787][T16934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.731930][T16934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.783839][T16934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.804579][T16934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.839341][T16934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.863286][ T5153] Bluetooth: hci4: command tx timeout [ 410.877882][T16976] chnl_net:caif_netlink_parms(): no params data found [ 411.025457][T17060] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2961'. [ 411.262771][ T5153] Bluetooth: hci3: command tx timeout [ 411.360310][ T59] hsr_slave_0: left promiscuous mode [ 411.375780][ T59] hsr_slave_1: left promiscuous mode [ 411.381890][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.420762][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.445611][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.462572][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.497942][ T59] veth1_macvtap: left promiscuous mode [ 411.503760][ T59] veth0_macvtap: left promiscuous mode [ 411.509572][ T59] veth1_vlan: left promiscuous mode [ 411.515193][ T59] veth0_vlan: left promiscuous mode [ 411.917350][ T59] team0 (unregistering): Port device team_slave_1 removed [ 411.957142][ T59] team0 (unregistering): Port device team_slave_0 removed [ 412.333031][T16934] hsr_slave_0: entered promiscuous mode [ 412.339658][T16934] hsr_slave_1: entered promiscuous mode [ 412.500467][T17084] sctp: [Deprecated]: syz.0.2967 (pid 17084) Use of struct sctp_assoc_value in delayed_ack socket option. [ 412.500467][T17084] Use struct sctp_sack_info instead [ 412.533984][T17084] sctp: [Deprecated]: syz.0.2967 (pid 17084) Use of int in maxseg socket option. [ 412.533984][T17084] Use struct sctp_assoc_value instead [ 412.554301][T16976] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.561548][T16976] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.573220][T16976] bridge_slave_0: entered allmulticast mode [ 412.580387][T16976] bridge_slave_0: entered promiscuous mode [ 412.659226][T16976] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.673389][T16976] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.680625][T16976] bridge_slave_1: entered allmulticast mode [ 412.712342][T16976] bridge_slave_1: entered promiscuous mode [ 412.836614][T17097] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2971'. [ 412.903375][T16976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.944070][ T5153] Bluetooth: hci4: command tx timeout [ 412.961720][T16976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.340020][T16976] team0: Port device team_slave_0 added [ 413.342647][ T5153] Bluetooth: hci3: command tx timeout [ 413.385674][T16976] team0: Port device team_slave_1 added [ 413.473405][T16976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.480397][T16976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.507285][T16976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.527876][T17115] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2975'. [ 413.565456][T16976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.572973][T16976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.600368][T16976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.810207][T17132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2978'. [ 413.837663][T17132] nbd: nbd0 already in use [ 413.859171][T17134] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2979'. [ 413.883265][T17134] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2979'. [ 413.905652][T16976] hsr_slave_0: entered promiscuous mode [ 413.905786][T17135] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2979'. [ 413.912253][T16976] hsr_slave_1: entered promiscuous mode [ 413.937854][T16976] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 413.946459][T16976] Cannot create hsr debugfs directory [ 413.988467][T17139] netlink: 'syz.2.2981': attribute type 13 has an invalid length. [ 414.048108][T17142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2982'. [ 414.252125][T16934] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 414.275163][T17151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2985'. [ 414.279070][T16934] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 414.310618][T16934] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 414.312667][T17151] netlink: 'syz.2.2985': attribute type 83 has an invalid length. [ 414.327871][T16934] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 414.355015][T17151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2985'. [ 414.541492][T17164] netlink: 'syz.2.2987': attribute type 1 has an invalid length. [ 414.555461][T17164] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2987'. [ 414.565121][T16934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.603410][T16934] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.632036][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.639249][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.656306][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.663522][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.770876][T16934] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 414.832310][T16976] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 414.886668][T16976] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 414.915787][T16976] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 414.962884][T16976] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 415.028458][ T5153] Bluetooth: hci4: command tx timeout [ 415.237891][T17198] netlink: 'syz.0.2996': attribute type 2 has an invalid length. [ 415.252853][T17194] netlink: 'syz.1.2995': attribute type 1 has an invalid length. [ 415.262020][T16934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.262649][T17198] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2996'. [ 415.280457][T16976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.293245][T17197] netlink: 'syz.1.2995': attribute type 1 has an invalid length. [ 415.302045][T17198] nbd: must specify a device to reconfigure [ 415.351382][T17194] 8021q: adding VLAN 0 to HW filter on device bond8 [ 415.375338][T17202] bridge_slave_0: left allmulticast mode [ 415.381020][T17202] bridge_slave_0: left promiscuous mode [ 415.387310][T17202] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.396479][T17202] bridge_slave_1: left allmulticast mode [ 415.402216][T17202] bridge_slave_1: left promiscuous mode [ 415.408947][T17202] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.419007][T17202] bond0: (slave 1!€ÿ): Releasing backup interface [ 415.425714][ T5153] Bluetooth: hci3: command tx timeout [ 415.442312][T17202] bond0: (slave bond_slave_1): Releasing backup interface [ 415.463612][T17202] team_slave_0: left promiscuous mode [ 415.482043][T17202] team0: Port device team_slave_0 removed [ 415.493208][T17202] team_slave_1: left promiscuous mode [ 415.518403][T17202] team0: Port device team_slave_1 removed [ 415.526112][T17202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.534020][T17202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.542137][T17202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.550214][T17202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.571175][T17205] macvtap1: entered promiscuous mode [ 415.577206][T17205] macvtap1: entered allmulticast mode [ 415.638411][T17208] dvmrp0: entered allmulticast mode [ 415.760193][T16976] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.789270][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.796481][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.808866][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 415.820021][ T59] ------------[ cut here ]------------ [ 415.842990][ T59] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1223:5 [ 415.862928][ T59] index 11 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 415.882131][ T59] CPU: 0 UID: 0 PID: 59 Comm: kworker/u8:4 Not tainted 6.15.0-syzkaller-12425-g82cbd06f327f #0 PREEMPT(full) [ 415.882155][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 415.882167][ T59] Workqueue: events_unbound cfg80211_wiphy_work [ 415.882200][ T59] Call Trace: [ 415.882207][ T59] [ 415.882216][ T59] dump_stack_lvl+0x189/0x250 [ 415.882242][ T59] ? lockdep_hardirqs_on+0x9c/0x150 [ 415.882264][ T59] ? __pfx_dump_stack_lvl+0x10/0x10 [ 415.882288][ T59] ? __pfx__printk+0x10/0x10 [ 415.882321][ T59] ubsan_epilogue+0xa/0x40 [ 415.882336][ T59] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 415.882369][ T59] ieee80211_request_ibss_scan+0x600/0x8b0 [ 415.882409][ T59] ieee80211_ibss_work+0xd85/0x1060 [ 415.882428][ T59] ? lockdep_hardirqs_on+0x9c/0x150 [ 415.882449][ T59] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 415.882468][ T59] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 415.882486][ T59] ? kcov_remote_stop+0x17e/0x6d0 [ 415.882507][ T59] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 415.882534][ T59] ? skb_dequeue+0x10e/0x150 [ 415.882553][ T59] ? ieee80211_iface_work+0xcd4/0xfe0 [ 415.882578][ T59] ? ieee80211_iface_work+0xf39/0xfe0 [ 415.882610][ T59] cfg80211_wiphy_work+0x2df/0x460 [ 415.882635][ T59] ? process_scheduled_works+0x9ef/0x17b0 [ 415.882668][ T59] process_scheduled_works+0xae1/0x17b0 [ 415.882724][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 415.882763][ T59] worker_thread+0x8a0/0xda0 [ 415.882782][ T59] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 415.882810][ T59] ? __kthread_parkme+0x7b/0x200 [ 415.882838][ T59] kthread+0x70e/0x8a0 [ 415.882861][ T59] ? __pfx_worker_thread+0x10/0x10 [ 415.882875][ T59] ? __pfx_kthread+0x10/0x10 [ 415.882895][ T59] ? _raw_spin_unlock_irq+0x23/0x50 [ 415.882914][ T59] ? lockdep_hardirqs_on+0x9c/0x150 [ 415.882931][ T59] ? __pfx_kthread+0x10/0x10 [ 415.882951][ T59] ret_from_fork+0x3f9/0x770 [ 415.882976][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 415.883004][ T59] ? __switch_to_asm+0x39/0x70 [ 415.883019][ T59] ? __switch_to_asm+0x33/0x70 [ 415.883033][ T59] ? __pfx_kthread+0x10/0x10 [ 415.883052][ T59] ret_from_fork_asm+0x1a/0x30 [ 415.883086][ T59] [ 415.918147][T16934] veth0_vlan: entered promiscuous mode [ 416.055337][ T59] ---[ end trace ]--- [ 416.112520][ T59] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 416.119733][ T59] CPU: 1 UID: 0 PID: 59 Comm: kworker/u8:4 Not tainted 6.15.0-syzkaller-12425-g82cbd06f327f #0 PREEMPT(full) [ 416.131370][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 416.141439][ T59] Workqueue: events_unbound cfg80211_wiphy_work [ 416.147712][ T59] Call Trace: [ 416.150994][ T59] [ 416.153936][ T59] dump_stack_lvl+0x99/0x250 [ 416.158547][ T59] ? __asan_memcpy+0x40/0x70 [ 416.163155][ T59] ? __pfx_dump_stack_lvl+0x10/0x10 [ 416.168375][ T59] ? __pfx__printk+0x10/0x10 [ 416.173001][ T59] panic+0x2db/0x790 [ 416.176920][ T59] ? __pfx_panic+0x10/0x10 [ 416.181353][ T59] ? _printk+0xcf/0x120 [ 416.185525][ T59] ? lockdep_hardirqs_on+0x9c/0x150 [ 416.190743][ T59] ? __pfx__printk+0x10/0x10 [ 416.195354][ T59] check_panic_on_warn+0x89/0xb0 [ 416.200316][ T59] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 416.206062][ T59] ieee80211_request_ibss_scan+0x600/0x8b0 [ 416.211896][ T59] ieee80211_ibss_work+0xd85/0x1060 [ 416.217110][ T59] ? lockdep_hardirqs_on+0x9c/0x150 [ 416.222324][ T59] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 416.228231][ T59] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 416.234569][ T59] ? kcov_remote_stop+0x17e/0x6d0 [ 416.239604][ T59] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 416.245254][ T59] ? skb_dequeue+0x10e/0x150 [ 416.249857][ T59] ? ieee80211_iface_work+0xcd4/0xfe0 [ 416.255245][ T59] ? ieee80211_iface_work+0xf39/0xfe0 [ 416.260645][ T59] cfg80211_wiphy_work+0x2df/0x460 [ 416.265778][ T59] ? process_scheduled_works+0x9ef/0x17b0 [ 416.271520][ T59] process_scheduled_works+0xae1/0x17b0 [ 416.277117][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 416.283139][ T59] worker_thread+0x8a0/0xda0 [ 416.287750][ T59] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 416.294103][ T59] ? __kthread_parkme+0x7b/0x200 [ 416.299065][ T59] kthread+0x70e/0x8a0 [ 416.303151][ T59] ? __pfx_worker_thread+0x10/0x10 [ 416.308273][ T59] ? __pfx_kthread+0x10/0x10 [ 416.312878][ T59] ? _raw_spin_unlock_irq+0x23/0x50 [ 416.318093][ T59] ? lockdep_hardirqs_on+0x9c/0x150 [ 416.323310][ T59] ? __pfx_kthread+0x10/0x10 [ 416.327919][ T59] ret_from_fork+0x3f9/0x770 [ 416.332530][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 416.337665][ T59] ? __switch_to_asm+0x39/0x70 [ 416.342440][ T59] ? __switch_to_asm+0x33/0x70 [ 416.347213][ T59] ? __pfx_kthread+0x10/0x10 [ 416.351818][ T59] ret_from_fork_asm+0x1a/0x30 [ 416.356612][ T59] [ 416.359883][ T59] Kernel Offset: disabled [ 416.364238][ T59] Rebooting in 86400 seconds..