last executing test programs: 1m20.85639492s ago: executing program 2 (id=566): r0 = socket$inet6(0x10, 0x1, 0x40000102) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) write(r0, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x8, 0x3, 0x380, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'team0\x00', 'wg1\x00'}, 0x0, 0x1f0, 0x218, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'vcan0\x00', {0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0xfe5}}}, @common=@ah={{0x30}, {[0x9, 0xcef1], 0x1}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) r3 = socket(0x2, 0x800, 0x4d) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) 1m19.78870868s ago: executing program 4 (id=94): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000300)="ebe3a0e9796ffd160000000000000052128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048bd60b576b88565aa62c6bc3a21c63cbf114ab114f0e394806dcb9e598be1", 0x6b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x80) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0xffffff8b}], 0x2}, 0x0) 1m8.194652558s ago: executing program 2 (id=566): r0 = socket$inet6(0x10, 0x1, 0x40000102) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) write(r0, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x8, 0x3, 0x380, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'team0\x00', 'wg1\x00'}, 0x0, 0x1f0, 0x218, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'vcan0\x00', {0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0xfe5}}}, @common=@ah={{0x30}, {[0x9, 0xcef1], 0x1}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) r3 = socket(0x2, 0x800, 0x4d) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) 1m4.746047939s ago: executing program 4 (id=94): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000300)="ebe3a0e9796ffd160000000000000052128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048bd60b576b88565aa62c6bc3a21c63cbf114ab114f0e394806dcb9e598be1", 0x6b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x80) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0xffffff8b}], 0x2}, 0x0) 54.194118251s ago: executing program 2 (id=566): r0 = socket$inet6(0x10, 0x1, 0x40000102) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) write(r0, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x8, 0x3, 0x380, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'team0\x00', 'wg1\x00'}, 0x0, 0x1f0, 0x218, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'vcan0\x00', {0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0xfe5}}}, @common=@ah={{0x30}, {[0x9, 0xcef1], 0x1}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) r3 = socket(0x2, 0x800, 0x4d) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) 52.863682925s ago: executing program 4 (id=94): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000300)="ebe3a0e9796ffd160000000000000052128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048bd60b576b88565aa62c6bc3a21c63cbf114ab114f0e394806dcb9e598be1", 0x6b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x80) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0xffffff8b}], 0x2}, 0x0) 39.1772551s ago: executing program 2 (id=566): r0 = socket$inet6(0x10, 0x1, 0x40000102) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) write(r0, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x8, 0x3, 0x380, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'team0\x00', 'wg1\x00'}, 0x0, 0x1f0, 0x218, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'vcan0\x00', {0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0xfe5}}}, @common=@ah={{0x30}, {[0x9, 0xcef1], 0x1}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) r3 = socket(0x2, 0x800, 0x4d) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) 38.616034799s ago: executing program 4 (id=94): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000300)="ebe3a0e9796ffd160000000000000052128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048bd60b576b88565aa62c6bc3a21c63cbf114ab114f0e394806dcb9e598be1", 0x6b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x80) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0xffffff8b}], 0x2}, 0x0) 25.920452053s ago: executing program 2 (id=566): r0 = socket$inet6(0x10, 0x1, 0x40000102) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) write(r0, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x8, 0x3, 0x380, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'team0\x00', 'wg1\x00'}, 0x0, 0x1f0, 0x218, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'vcan0\x00', {0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0xfe5}}}, @common=@ah={{0x30}, {[0x9, 0xcef1], 0x1}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) r3 = socket(0x2, 0x800, 0x4d) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) 24.023899808s ago: executing program 4 (id=94): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000300)="ebe3a0e9796ffd160000000000000052128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048bd60b576b88565aa62c6bc3a21c63cbf114ab114f0e394806dcb9e598be1", 0x6b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x80) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0xffffff8b}], 0x2}, 0x0) 12.609572356s ago: executing program 2 (id=566): r0 = socket$inet6(0x10, 0x1, 0x40000102) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) write(r0, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x8, 0x3, 0x380, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'team0\x00', 'wg1\x00'}, 0x0, 0x1f0, 0x218, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'vcan0\x00', {0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0xfe5}}}, @common=@ah={{0x30}, {[0x9, 0xcef1], 0x1}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) r3 = socket(0x2, 0x800, 0x4d) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) 10.855800666s ago: executing program 4 (id=94): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000300)="ebe3a0e9796ffd160000000000000052128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048bd60b576b88565aa62c6bc3a21c63cbf114ab114f0e394806dcb9e598be1", 0x6b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x80) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0xffffff8b}], 0x2}, 0x0) 2.767865809s ago: executing program 3 (id=1723): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x21, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@deltaction={0xa8, 0x31, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}]}, @TCA_ACT_TAB={0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x44045}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x2000}, 0x4000000) (async) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) r2 = socket(0x11, 0x3, 0x0) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(r5, 0x29, 0x42, &(0x7f0000000080)=0xffff7b6e, 0x4) getsockopt$inet6_buf(r5, 0x29, 0x6, &(0x7f0000000000)=""/27, &(0x7f0000000240)=0x1b) (async) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000280)={r4, 0x11, 0x6}, 0x10) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@getchain={0x24, 0x11, 0x839, 0x70bd24, 0x0, {0x0, 0x0, 0x0, r4, {0xfff1}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = socket(0x2b, 0x80801, 0x0) bind$phonet(r7, &(0x7f00000000c0)={0x23, 0x3, 0x2, 0x81}, 0x10) (async) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r10 = socket(0x27, 0x80002, 0xfffffffe) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r9, @ANYBLOB="00000000000000001c001a8008000280fe0f0500080000003e"], 0x44}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) 2.44788533s ago: executing program 3 (id=1727): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x0, @private=0xa010101}}, {{0x2, 0x0, @multicast2}}}, 0x108) (async) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x0, @private=0xa010101}}, {{0x2, 0x0, @multicast2}}}, 0x108) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000040)=0x2002044) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x2000004) (async) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x2000004) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) (async) r7 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x440, 0x260, 0x150, 0x150, 0x0, 0xf8010000, 0x370, 0x238, 0x238, 0x370, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'veth0_to_team\x00', 'macvlan1\x00', {}, {}, 0x84}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@eui64={{0x28}}, @common=@inet=@sctp={{0x148}, {[0x4e21], [0x4e24], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, [{}, {0x0, 0x4}], 0x0, 0xd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'pim6reg1\x00', 'gre0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xc, 0xe, 0xfffffffa, 0xfa8, '\x00', 'syz0\x00', {0x100000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) (async) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x440, 0x260, 0x150, 0x150, 0x0, 0xf8010000, 0x370, 0x238, 0x238, 0x370, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'veth0_to_team\x00', 'macvlan1\x00', {}, {}, 0x84}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@eui64={{0x28}}, @common=@inet=@sctp={{0x148}, {[0x4e21], [0x4e24], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, [{}, {0x0, 0x4}], 0x0, 0xd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'pim6reg1\x00', 'gre0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xc, 0xe, 0xfffffffa, 0xfa8, '\x00', 'syz0\x00', {0x100000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="c923e31bc91e7cd8", @ANYRES16=r6, @ANYBLOB="010029bd7000fcdbdf2509000000050007000200000005000800070000000800010000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x48010}, 0x40044) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x3d8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @empty, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x5, 0x5}, {0x1, 0x5, 0x6}, {0x0, 0x2, 0x5}, 0x4, 0x7ff}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}, [0x0, 0x0, 0xffffff00], [0xff, 0x0, 0x0, 0xffffff00], 'wg1\x00', 'gre0\x00'}, 0x0, 0x100, 0x228, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x5, 'system_u:object_r:getty_var_run_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x438) (async) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x3d8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @empty, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x5, 0x5}, {0x1, 0x5, 0x6}, {0x0, 0x2, 0x5}, 0x4, 0x7ff}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}, [0x0, 0x0, 0xffffff00], [0xff, 0x0, 0x0, 0xffffff00], 'wg1\x00', 'gre0\x00'}, 0x0, 0x100, 0x228, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x5, 'system_u:object_r:getty_var_run_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x438) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) (async) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) ioctl$sock_netdev_private(r11, 0x8914, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000d9000000040000000100000040000000", @ANYRES32=r1, @ANYBLOB="12ab000000000000000000810000000000000000", @ANYRES32=r10, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000d9000000040000000100000040000000", @ANYRES32=r1, @ANYBLOB="12ab000000000000000000810000000000000000", @ANYRES32=r10, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000980)=ANY=[@ANYBLOB="18020000b204d13fe6da000000000000000000000518bff6f4d3b741f0d2651c43704725310e66a8e48937f561df080000ec89c53629066b0ecbab35260c8a22d90071425bb5665e92836155319b1860aec8c966d3ba9e53c81006e1283d9987535b0ba774830be21b0b128c00c4c80ee134241cfafdc523c22fab744acff0ac00"/139, @ANYRES32=r13, @ANYBLOB="00000000000000002702000014000000b7030000000000008500000031000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000006c000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00'}, 0x90) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={'rose', 0x0}, 0x4, 'syz0\x00', @default, 0x1, 0x0, [@null, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) 2.060342141s ago: executing program 3 (id=1731): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001500192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r1 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@l2={0x1f, 0x0, @none}, &(0x7f0000000000)=0x80, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xa9, &(0x7f0000000180)=""/169}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000deff00001b20000008009a00"], 0x1c}}, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, @multicast}]}) 1.856052803s ago: executing program 3 (id=1734): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0xff0e}, 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x8, 0x1, 0x4, 0xfffffbb6}]}, 0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f00000000c0)={r1, 0x6ec, 0x20, 0x1000000000006, 0xb1aa}, &(0x7f0000000200)=0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f00000000c0)={0x3, 0x67}, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f7, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) socket$inet_icmp(0x2, 0x2, 0x1) unshare(0x20000400) bpf$MAP_CREATE(0x15, 0x0, 0x0) r6 = socket$kcm(0x10, 0x6, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c0640010000f6043582c137153e370248078000f01700d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) 1.572167559s ago: executing program 3 (id=1737): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000240), 0x10) clock_gettime(0x2, &(0x7f0000000180)={0x0}) sendmsg$can_bcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="05000000010400"/16, @ANYRES64=r2, @ANYRESHEX, @ANYRES32, @ANYRES16, @ANYBLOB="0000004001"], 0x48}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r7 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}}}, 0x108) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000500)={&(0x7f0000000300), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000400)=""/230, 0xe6}, {&(0x7f0000000580)=""/138, 0x8a}], 0x2, &(0x7f0000000380)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001700)={0x50, r4, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, r4, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0xfffffffffffffeeb}, 0x1, 0x0, 0x0, 0x8000}, 0x84) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="24000080", @ANYRES16=r10, @ANYBLOB="030029bd7000fedbdf250900000008000300", @ANYRES32=r11, @ANYBLOB="0800370003000000"], 0x24}, 0x1, 0x0, 0x0, 0x24000851}, 0x4) 1.143793831s ago: executing program 0 (id=1741): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x0, 0x70bd2b, 0x25dfdbfe, "", ["", "", ""]}, 0x10}}, 0x20000090) (async) sendfile(r0, r0, &(0x7f0000000100)=0x7, 0x7) (async) sendfile(r0, r0, &(0x7f0000000140)=0x3, 0x3a) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x1410, 0x300, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}]}, 0x40}}, 0x20000840) (async) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000002c0)=0x1c, 0x180000) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'macvtap0\x00', &(0x7f0000000300)=@ethtool_eee={0x44, 0x7, 0x3, 0x3, 0x9, 0x1, 0xea86, 0x7fff, [0x96, 0xa9fe]}}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000003c0)='tasks\x00', 0x2, 0x0) (async) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x8}, 0x18) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='fsi_master_gpio_out\x00', r4, 0x0, 0x5}, 0x18) setsockopt$sock_int(r1, 0x1, 0x3, &(0x7f0000000500)=0x6, 0x4) (async) sendfile(r5, r2, &(0x7f0000000540), 0x1) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000580)=0xffffffffffffffff, 0x4) bpf$LINK_DETACH(0x22, &(0x7f00000005c0)=r6, 0x4) (async) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, 0x1406, 0x8, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0xffffffff, 0x8000, 0xfffffe01, 0x204d0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000880)={r7, &(0x7f0000000780)="27092444376716a7e4965232271f1d1410c581035303e7bd6719bb0199828f67c6e012aef1543505f57f733b6d30e7556dc46747c5448c49da92badadd6accf7c07a16da5efff58a6b2e251f2521580867b4bdc6a664f19e5412ed4784d6527a119e35c6c7e7220031795f60e0a2cc34b242c0286241a85f83f0c35fd4bcd2cfa291cff9dc86817603260c90cb3cc442f5fd0fd8339655f0ca5420dc6203501faf61a9bb15a037ebfd342bd4390931037b45d4576e9123df474394ca84c5d754", &(0x7f0000000840)=@udp=r3, 0x4}, 0x20) (async) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r8, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x18, 0x3ed, 0x400, 0x70bd26, 0x25dfdbfb, "3f564cd03fbf", ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4010) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, r10, 0x47ebdcccd4222fca, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x100, 0x14}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x6]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xbb0}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xd1c}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x2040c50) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r6, 0x400c6615, &(0x7f0000000b00)={0x0, @aes128}) sendmsg$AUDIT_ADD_RULE(r8, &(0x7f0000001040)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001000)={&(0x7f0000000b80)={0x448, 0x3f3, 0x400, 0x70bd2d, 0x25dfdbfb, {0x10, 0x0, 0x30, [0x6, 0x1, 0x8c0a, 0x400, 0x4, 0x2, 0x8, 0x3, 0x1008, 0x2, 0x7, 0x8000000, 0x9, 0x10001, 0x6, 0xfff, 0xbbef, 0x8, 0x401, 0x10001, 0x8, 0x6, 0x2, 0x5a37, 0x400, 0x1bc7, 0xffffffff, 0xf0d8, 0x4, 0x3, 0x3f8, 0x8000, 0x5, 0xd239, 0x1, 0xb1, 0xdb52c361, 0x8000, 0x10000, 0x7, 0x6, 0x2, 0x1000000, 0x6822, 0x4, 0x5, 0x7, 0x9, 0x2, 0x80, 0x6, 0xffffffff, 0x7, 0x1357, 0x4, 0xf5, 0x200, 0x9, 0x9, 0x4, 0x3, 0xfff, 0x1, 0x9], [0x7, 0x81, 0xcdcf, 0xe, 0x8, 0x3, 0xb, 0x9, 0xffffffff, 0x5, 0x4, 0x2, 0x4, 0x7, 0x40, 0x1, 0xc, 0x9, 0x0, 0x800, 0x7ff, 0x3, 0xe, 0x5672, 0xa, 0x5, 0xffff19be, 0x10, 0x8, 0x38, 0x1409, 0x4, 0x9, 0x8, 0x5c, 0xc, 0x10001, 0x4, 0x9, 0x5, 0x6, 0x92ae, 0x9, 0x1, 0xf, 0x4, 0x8, 0x9, 0x100, 0x0, 0x40, 0x9, 0x80000001, 0x2a, 0x1, 0x1, 0x7, 0x8001, 0x0, 0x0, 0x0, 0x3, 0x6, 0xfffffffe], [0x80000000, 0x3, 0x1, 0x2800000, 0x3, 0x7, 0x134, 0xc902, 0x8, 0x5, 0x7, 0x9, 0x8, 0x0, 0x3, 0xfffffff1, 0x1, 0x3, 0x6, 0x2, 0x56186acb, 0x86, 0xff, 0x2, 0xda, 0x7f, 0x5, 0x0, 0xc942, 0x9, 0x4, 0x9, 0x9, 0x8, 0x34a7, 0xda, 0x80, 0x4, 0xe057, 0x6, 0xffffffff, 0x9, 0xe, 0x3e99, 0xe, 0x1, 0x8, 0xb33, 0x5, 0xfff, 0x400, 0xc, 0x91, 0x7, 0xd, 0x10000, 0x1ff, 0xfff, 0x853, 0x9447, 0xd, 0x5, 0x7, 0x3], [0x7, 0x800, 0x4a, 0x82fae48, 0x0, 0x10, 0x0, 0x7, 0x8001, 0x259, 0xc, 0x5, 0x5, 0xffff1d89, 0xfffffeff, 0x7, 0xd6a9, 0x3, 0x4, 0x0, 0x0, 0x4, 0x6, 0x7, 0x44d, 0x2, 0xd, 0xffffffff, 0xe, 0x2, 0x8000, 0x21, 0x7, 0x9, 0xd, 0xf, 0x2ac, 0x2, 0x735a, 0xff, 0x6, 0x8, 0xffffff80, 0x7, 0x40, 0x13, 0x0, 0x6, 0x0, 0x0, 0x200, 0x5, 0x1, 0x6ad1, 0x49, 0xad8, 0x6, 0x800, 0x401, 0x9, 0x10000, 0x7, 0x40], 0x26, ['./cgroup.cpu/syz0\x00', 'fsi_master_gpio_out\x00']}, ["", "", "", "", ""]}, 0x448}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) (async) ioctl$BTRFS_IOC_SYNC(r8, 0x9408, 0x0) (async) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000001080)='veth0_to_bond\x00') sendmsg$NL80211_CMD_GET_SURVEY(r9, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x20, r10, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x101, 0x67}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x40, 0x1411, 0x20, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x3b}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc1}, 0x40004) 1.009909401s ago: executing program 0 (id=1742): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) r2 = accept(r0, &(0x7f0000000000)=@nl=@unspec, &(0x7f0000000080)=0x80) connect$unix(r2, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) 977.240723ms ago: executing program 1 (id=1743): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x75}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14"], 0x18}, 0xc800) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4) 880.302557ms ago: executing program 0 (id=1744): r0 = socket(0x2c, 0x803, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="0500ffffffff0c0000002e00000008000300", @ANYRES32, @ANYBLOB="0a00340001010101010100000800490001ac0f0006006600060800000a00"], 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x880) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000fb0061120000000000009500000000000000e69824181cbe4776b2637712f2649dbec7bcc05d980bb637f80219fcbd8c3963f705201b8f2f2b50af97ef3f4e6ba69b2b39181e23fd7b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r3, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x9, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3e, &(0x7f0000000300)=[{}, {}], 0x10, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x75, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000680)={0xa4, r5, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x5}, @ETHTOOL_A_LINKMODES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xff}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x3}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x6}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x10}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008000) 873.410268ms ago: executing program 1 (id=1745): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003012000060ec970012301100fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061101c000000000895000000fd000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xd8}, 0x1, 0x0, 0x0, 0x131e284dd61db437}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x42000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r3, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003012000060ec970012301100fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061101c000000000895000000fd000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x80) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000000001000000090a010400000000000000000100000008000a40000000000200020073797a32000000000900010073797a3000000000080005400000001f080003400000000746b78e91cfe44c0000000c0a010200000000000000000100000027cf020073797a3200000000200003801c0000800400018008000340000000010c00044000000000000000000900010073797a3000000000140000001000010000000000000000000000000a3582c6541b8ead3731110bddd7b285237befa52a2719d198d21a5fcc4d6fe9c2f75f4d0a44b32240aabfd0b20043ef0e4afb049f84497599b08779d023c3615a820524fc6e16e42334b29c80ec4dbf4fca4c2776b9b4052d52700ff4c4cd726873248f98cefeaf3a4fd6a0be0af469bf7a9778213fd41148a1c77788891ac299b75b499a701e8f88764940ea70f848e878b4ad23684060e1fa380ff464e0d64382195d34cc4998bb68ef530ed2e81de5da089c9d9ec62e5e884b28f18c43b31ede261b32ef78"], 0xd8}, 0x1, 0x0, 0x0, 0x131e284dd61db437}, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x42000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r3, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4000) (async) 757.186459ms ago: executing program 0 (id=1746): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xd3}]}, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x3c}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000001780)) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r5, 0x1, 0x0, 0x0, {0x22}}, 0x14}}, 0x0) 620.138524ms ago: executing program 3 (id=1747): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0}], 0x1, 0x4) recvmmsg$unix(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)=""/227, 0xe3}], 0x1}}], 0x1, 0x10001, 0x0) (async) recvmmsg$unix(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)=""/227, 0xe3}], 0x1}}], 0x1, 0x10001, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r3, 0x5, 0x40000000, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2008c0d4) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r3, 0x5, 0x40000000, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2008c0d4) 600.383014ms ago: executing program 1 (id=1748): r0 = socket(0x1e, 0x805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xf, 0x0, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x80, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x54, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL={0x8, 0x7, @multicast2}, @IFLA_GTP_FD0={0x8, 0x1, @udp6=r0}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x2}, @IFLA_GTP_LOCAL6={0x14, 0x8, @local}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL6={0x14, 0x8, @empty}, @IFLA_GTP_FD1={0x8, 0x2, @udp6=r0}]}}}]}, 0x80}}, 0x0) socket(0x1e, 0x805, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xf, 0x0, &(0x7f0000000000)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x80, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x54, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL={0x8, 0x7, @multicast2}, @IFLA_GTP_FD0={0x8, 0x1, @udp6=r0}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x2}, @IFLA_GTP_LOCAL6={0x14, 0x8, @local}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL6={0x14, 0x8, @empty}, @IFLA_GTP_FD1={0x8, 0x2, @udp6=r0}]}}}]}, 0x80}}, 0x0) (async) 414.270735ms ago: executing program 1 (id=1749): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x700, 0x8, 0x2, 0x0, {{0x23, 0x4, 0x1, 0x3, 0x8c, 0x66, 0x0, 0x1, 0x4, 0x0, @loopback, @multicast2, {[@cipso={0x86, 0x18, 0x1, [{0x0, 0x12, "e9e94009788d949b7ebb442de24edbd2"}]}, @timestamp={0x44, 0x18, 0xc1, 0x0, 0x5, [0xa442513, 0x6, 0x3ff, 0x80000001, 0x0]}, @ssrr={0x89, 0xb, 0x59, [@private=0xa010102, @multicast2]}, @noop, @generic={0x0, 0x6, "09f6a5b9"}, @timestamp_addr={0x44, 0x34, 0xbd, 0x1, 0xa, [{@empty, 0x41e7}, {@multicast1, 0xfaa}, {@empty, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@empty, 0xd}, {@rand_addr=0x64010102, 0x6}]}]}}}}}) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0)={r3}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x368, 0xffffffff, 0x1d0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5}}}, {{@ip={@broadcast, @broadcast, 0x0, 0xff, 'pim6reg0\x00', 'ip6tnl0\x00', {0xff}, {}, 0xc, 0x0, 0x2}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0xc}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x4ca, 0xb, [0x10, 0x2a, 0x36, 0xe, 0x6, 0xf, 0xb, 0x22, 0x39, 0x12, 0x17, 0x36, 0x6, 0xe, 0xa, 0x10], 0x0, 0xb, 0x681}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x4, 0x4, 0x4, 0x1, 0x4, 0x7], 0x0, 0x2}}}, @common=@ttl={{0x28}, {0x0, 0x80}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@dellinkprop={0x20, 0x6d, 0x400, 0x70bd2f, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, 0x60389, 0x29100}}, 0x20}}, 0x0) accept(r0, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000100)=0x80) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) 312.074224ms ago: executing program 0 (id=1750): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map, r1, 0x5}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000f00000100000e00"}}}]}, 0x48}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000740)='%pI4 \x00'}, 0x20) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r11}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x37, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ldst={0x0, 0x1, 0x2, 0xa, 0x6, 0xffffffffffffffe0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe06}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xb030}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xe}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='GPL\x00', 0x240, 0x6b, &(0x7f00000006c0)=""/107, 0x41000, 0x1c, '\x00', r8, @fallback=0xf, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x1, &(0x7f00000007c0)=[r10, r12], &(0x7f0000000800)=[{0x4, 0xfffff564, 0x6, 0xb}], 0x10, 0x8001}, 0x94) 241.61148ms ago: executing program 1 (id=1751): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000063019d00000000009500000000000001"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300}, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000001c0), 0x4) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)={'a', ' *:* ', 'm\x00'}, 0x8) (async) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)={'a', ' *:* ', 'm\x00'}, 0x8) 75.427337ms ago: executing program 1 (id=1752): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000540)={'tunl0\x00', 0x200}) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2}}, [@null, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @bcast]}, 0x48) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x0, 0x11, 0x148, 0x0, 0x10, 0x418, 0x2a8, 0x2a8, 0x418, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x11, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0xfffc, 0x0, 0x0, 'syz0\x00', 'syz1\x00', {0x9}}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 'veth1_to_hsr\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x510) 0s ago: executing program 0 (id=1753): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r3, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) setsockopt$inet6_tcp_int(r3, 0x6, 0x10, &(0x7f0000000080)=0x5, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000001440)=[{&(0x7f0000000080)="90d1a07ed121aae31dd2295a0ad54176e3d772dee6432633290618335b7c3d3d46594c52c7de96dfd70379bea56e8ce07f5824fc12d9f63140d051f069a9c9f010740b1bdce361599aff646138bf54521aecb24a8d5e30d767cd3408218e8c1e308ea720704cb5c2a2d35e6343c2f2903da088da28efe64a6e2a88380ad334437536aa891a1133dd5a84fcfe7f569defb349f99e269d87be6c2edcc1f4ad4eb943fac21cff9861e932e597a39934d648b4a4cb78f5ae", 0xb6}, {&(0x7f0000000180)="00ed6cc0e650653e448c21f4df503ab2ebc9743713ecb58b0b63ba39eda53fa644f0abac9d85e334b1ac5d99624a52b61f14628909d058abf54524ba1a30af1440e6c891a9b0e6140add27b8712bb6cfb1457c41de99dbd30159def9f4b295d508524aa18ef86b41af49c43d4afcf3ef4000", 0x72}, {&(0x7f0000000200)="1a85f7fc3588979f99c374a6745cf171d53bd6d8ae5db892090dd03159bd33400c36895283d6092ec0734a8cabf8988f3341016762", 0x35}, {&(0x7f0000000240)="665cf2d354901953183dccef3cc498cac63b826c10dcdb323f2c8a740168eef4494dbd7eb8c2101aa535ada4a6e03ae92b131c584ea3821fbdba25c8e4488bde3804e2f28ad66a949b940c771a027a108dd6a55821f3ea3087c8e1ea84fc02f8972a088e1c6151b8bd4b677fb8a26580af0791bc18fc86eeebba1ade020b7fee1044e3834f816e4869e205c2", 0x8c}, {&(0x7f0000000300)="340b0e6c6d4a891bee6a0749fb498e6e42872140b8e76a7137ab1c058771805fb9988c86bc11633aed50fc8d696a0465710fd8515f4474c1648fe70380e6fc40b2b86633785cb2e5eca6abfe186840179495515779c39a3046ab1924408f05e7f413578ce73a593f91058fc01c627a133a28228ad09b08f2e66ff342e37e3e2ce7665c8d33a4a68182fde12edc6448df75ad27941c6c753e14f1947fa561b3b27c537924244cedcb31a93154de334d01ab35e1d5be2bad06c5e1af4b63686c22b3ce1f4e511d130f7567d0d781aec48b9422c1b300dd1df2698625b895347d9a29951fe974bcf82246660b04aa797abe", 0xf0}, {&(0x7f0000000400)="f0c3a1af9f1f23c103ce82cd84749d0beb", 0x11}, {&(0x7f0000000440)="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", 0xc00}], 0x7) r10 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) sendmsg$kcm(r11, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="100000000700000004"], 0x10}, 0x331e5c6805043cda) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r11, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) ioctl$SIOCAX25ADDFWD(r10, 0x89ea, &(0x7f0000000040)={@default, @default}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "1df872f69cd5ad2e80be65faf679fd0785e05c67e1d9d4b38a6a25ac4c873b68169bdfdedf99e8cafc45667421c8cc7b88b3378dd9a9465522abcb43b9248aeedfa4a311bb26e70ecfcc381a806b5e5f321c7367a5288f83f9623cd2f809dad054d3606ff723018bd84265e4c54b51670fa4fdb17b7882e7009f8635c9a2ec0a5e498e4b0c4ad7c501fc4872e7fd2876a42d852b0c542df1511fba83c1ff3faa9cc077c61649d4e9d9d4ccb7262b6137e0b65e06fa4a163546b5e3c79dce98e26d615e959d74e69bbfd74b775d0a5434291dd5f5a6c845099088d20c350472baf5cbe9fa6711cd6ce57afaae3534165ce0f4729ec1d36047dc650babf602cbff"}, @TCA_RED_PARMS={0x14, 0x1, {0x409, 0x0, 0x8001, 0x1c, 0x3, 0x19, 0x4}}]}}]}, 0x148}}, 0x0) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000200), 0x4) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r12, @ANYBLOB="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"], 0x1c8}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000040801010000000d000000000a000000"], 0x14}}, 0x0) kernel console output (not intermixed with test programs): filter on device bond0 [ 291.969573][T10367] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.039834][ T9349] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.047117][ T9349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.078442][ T9349] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.085704][ T9349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.424252][T10673] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1073'. [ 292.440677][T10673] (unnamed net_device) (uninitialized): (slave gretap0): Device is not bonding slave [ 292.457430][T10673] (unnamed net_device) (uninitialized): option active_slave: invalid value (gretap0) [ 292.497738][T10337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.635558][T10678] ieee802154 phy0 wpan0: encryption failed: -22 [ 292.638037][T10337] veth0_vlan: entered promiscuous mode [ 292.653616][T10678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1074'. [ 292.665199][T10678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1074'. [ 292.731127][T10337] veth1_vlan: entered promiscuous mode [ 292.806844][T10682] netlink: 'syz.3.1076': attribute type 1 has an invalid length. [ 292.819888][T10367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.839905][T10337] veth0_macvtap: entered promiscuous mode [ 292.858140][T10337] veth1_macvtap: entered promiscuous mode [ 292.926700][T10337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.959225][T10337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.997367][ T1338] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 293.005610][T10337] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.051348][T10337] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.060323][T10337] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.099752][T10337] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.378452][ T1338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.404453][ T1338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.511417][ T6796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.534092][T10719] netlink: 'syz.0.1083': attribute type 1 has an invalid length. [ 293.539860][ T6796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.558391][T10719] netlink: 'syz.0.1083': attribute type 1 has an invalid length. [ 293.578480][T10719] netlink: 'syz.0.1083': attribute type 1 has an invalid length. [ 293.589951][T10719] netlink: 'syz.0.1083': attribute type 1 has an invalid length. [ 293.619844][T10719] netlink: 'syz.0.1083': attribute type 1 has an invalid length. [ 293.851058][T10729] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 293.858694][T10729] IPv6: NLM_F_CREATE should be set when creating new route [ 293.866008][T10729] IPv6: NLM_F_CREATE should be set when creating new route [ 293.887670][T10367] veth0_vlan: entered promiscuous mode [ 293.925662][T10367] veth1_vlan: entered promiscuous mode [ 293.999194][T10367] veth0_macvtap: entered promiscuous mode [ 294.020299][T10367] veth1_macvtap: entered promiscuous mode [ 294.058559][T10367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.086288][T10367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.119147][T10367] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.138147][T10367] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.150102][T10367] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.164590][T10367] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.364154][ T5951] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.497134][ T9340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.509183][ T9340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.548511][ T5951] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.633474][ T5951] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.649552][ T6796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.659881][ T6796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.967035][ T5951] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.127919][ T5951] bridge_slave_1: left allmulticast mode [ 295.136382][ T5951] bridge_slave_1: left promiscuous mode [ 295.144555][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.157320][ T5951] bridge_slave_0: left allmulticast mode [ 295.164005][ T5951] bridge_slave_0: left promiscuous mode [ 295.169827][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.700560][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 295.715242][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 295.725904][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 295.739271][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 295.746967][ T5951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.748237][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 295.768050][ T5951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.783308][ T5951] bond0 (unregistering): Released all slaves [ 295.861030][T10758] geneve1 speed is unknown, defaulting to 1000 [ 296.288446][ T5951] hsr_slave_0: left promiscuous mode [ 296.296498][ T5951] hsr_slave_1: left promiscuous mode [ 296.302783][ T5951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.310302][ T5951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.320016][ T5951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.328310][ T5951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.348951][ T5951] veth1_macvtap: left promiscuous mode [ 296.354757][ T5951] veth0_macvtap: left promiscuous mode [ 296.360370][ T5951] veth1_vlan: left promiscuous mode [ 296.365864][ T5951] veth0_vlan: left promiscuous mode [ 296.899926][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 296.916926][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 296.929364][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 296.948920][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 296.964145][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 297.024405][ T5951] team0 (unregistering): Port device team_slave_1 removed [ 297.061904][ T5951] team0 (unregistering): Port device team_slave_0 removed [ 297.439726][T10768] __nla_validate_parse: 10 callbacks suppressed [ 297.439746][T10768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1098'. [ 297.487540][T10767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1098'. [ 297.730075][T10775] geneve1 speed is unknown, defaulting to 1000 [ 297.802325][ T5851] Bluetooth: hci0: command tx timeout [ 297.890378][T10758] chnl_net:caif_netlink_parms(): no params data found [ 297.967231][T10790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1100'. [ 298.337735][T10758] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.364103][T10758] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.383774][T10758] bridge_slave_0: entered allmulticast mode [ 298.403142][T10758] bridge_slave_0: entered promiscuous mode [ 298.423751][T10758] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.432220][T10758] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.439643][T10758] bridge_slave_1: entered allmulticast mode [ 298.448770][T10758] bridge_slave_1: entered promiscuous mode [ 298.573911][T10758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.628230][ T5951] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.641579][T10818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1108'. [ 298.669853][T10758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.747909][ T5951] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.769784][T10758] team0: Port device team_slave_0 added [ 298.780723][T10758] team0: Port device team_slave_1 added [ 298.835012][ T5951] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.988915][ T5951] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.002238][ T5851] Bluetooth: hci3: command tx timeout [ 299.020449][T10758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.029187][T10758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.030006][T10828] SET target dimension over the limit! [ 299.056267][T10758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.074996][T10758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.095587][T10758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.122517][T10758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.239122][T10838] netlink: 'syz.1.1113': attribute type 7 has an invalid length. [ 299.308522][T10840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1114'. [ 299.470295][T10758] hsr_slave_0: entered promiscuous mode [ 299.498092][T10758] hsr_slave_1: entered promiscuous mode [ 299.604224][T10775] chnl_net:caif_netlink_parms(): no params data found [ 299.873849][ T5851] Bluetooth: hci0: command tx timeout [ 299.995529][T10867] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1119'. [ 300.069662][ T5951] bridge_slave_1: left allmulticast mode [ 300.094305][ T5951] bridge_slave_1: left promiscuous mode [ 300.112088][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.138564][ T5951] bridge_slave_0: left allmulticast mode [ 300.170595][ T5951] bridge_slave_0: left promiscuous mode [ 300.188105][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.256475][T10885] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1121'. [ 300.765634][ T5951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.779152][ T5951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.790097][ T5951] bond0 (unregistering): Released all slaves [ 300.953418][T10878] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 301.050628][T10909] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1126'. [ 301.060560][T10775] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.070996][T10775] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.078509][ T5848] Bluetooth: hci3: command tx timeout [ 301.086472][T10909] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1126'. [ 301.098386][T10775] bridge_slave_0: entered allmulticast mode [ 301.104799][T10909] netlink: 'syz.3.1126': attribute type 5 has an invalid length. [ 301.116667][T10775] bridge_slave_0: entered promiscuous mode [ 301.122972][T10909] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1126'. [ 301.135630][T10775] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.143281][T10775] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.150604][T10775] bridge_slave_1: entered allmulticast mode [ 301.160164][T10775] bridge_slave_1: entered promiscuous mode [ 301.235177][T10911] netlink: 'syz.0.1128': attribute type 7 has an invalid length. [ 301.271140][T10775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.384113][T10920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.404764][T10775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.577364][T10775] team0: Port device team_slave_0 added [ 301.754722][T10775] team0: Port device team_slave_1 added [ 301.874210][T10941] netlink: 'syz.0.1135': attribute type 1 has an invalid length. [ 301.896104][T10941] netlink: 'syz.0.1135': attribute type 1 has an invalid length. [ 301.952563][ T51] Bluetooth: hci0: command tx timeout [ 301.970791][ T5951] hsr_slave_0: left promiscuous mode [ 301.985184][ T5951] hsr_slave_1: left promiscuous mode [ 301.993339][ T5951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.007371][ T5951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.011853][T10939] netlink: 'syz.1.1134': attribute type 1 has an invalid length. [ 302.022453][T10939] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.039101][ T5951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.048977][ T5951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.117150][ T5951] veth1_macvtap: left promiscuous mode [ 302.126081][ T5951] veth0_macvtap: left promiscuous mode [ 302.135517][ T5951] veth1_vlan: left promiscuous mode [ 302.140937][ T5951] veth0_vlan: left promiscuous mode [ 302.169243][T10948] netlink: 'syz.0.1136': attribute type 1 has an invalid length. [ 302.266866][T10950] netlink: 'syz.0.1137': attribute type 83 has an invalid length. [ 302.499585][T10955] __nla_validate_parse: 2 callbacks suppressed [ 302.499609][T10955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1139'. [ 302.760441][ T5951] team0 (unregistering): Port device team_slave_1 removed [ 302.770841][T10964] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1142'. [ 302.815459][ T5951] team0 (unregistering): Port device team_slave_0 removed [ 302.994131][ T5851] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 303.004631][ T5851] Bluetooth: hci2: command 0x0406 tx timeout [ 303.163415][ T5851] Bluetooth: hci3: command tx timeout [ 303.199181][T10775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.236240][T10775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.290064][T10775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.319945][T10963] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.328616][T10963] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.336934][T10963] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.345492][T10963] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.465381][T10775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.480861][T10775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.521129][T10775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.746798][T10758] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 303.782828][T10775] hsr_slave_0: entered promiscuous mode [ 303.789822][T10775] hsr_slave_1: entered promiscuous mode [ 303.805004][T10775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.812899][T10775] Cannot create hsr debugfs directory [ 303.856605][T10758] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 303.885995][T10758] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 303.978577][T10758] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 304.041334][ T5851] Bluetooth: hci4: command 0x0406 tx timeout [ 304.042246][ T51] Bluetooth: hci0: command 0x0419 tx timeout [ 304.319797][T11018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1154'. [ 304.343808][T11018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1154'. [ 304.470169][T10758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.514833][T10758] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.603405][ T9340] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.610619][ T9340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.629483][ T9340] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.636701][ T9340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.846265][T10775] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 304.883260][T10775] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 304.915459][T10775] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 304.937695][T10775] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 305.059077][T11051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1161'. [ 305.111625][T11051] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1161'. [ 305.233733][ T5848] Bluetooth: hci3: command tx timeout [ 305.246982][T11057] openvswitch: netlink: Missing key (keys=40, expected=80) [ 305.250141][T10775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.287293][T10775] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.337079][ T4502] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.344322][ T4502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.376545][ T4502] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.383776][ T4502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.444792][T11063] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1165'. [ 305.456281][T10758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.473640][T11063] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1165'. [ 305.569418][T10775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 305.673584][T10758] veth0_vlan: entered promiscuous mode [ 305.713625][T11076] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1170'. [ 305.728103][T10758] veth1_vlan: entered promiscuous mode [ 305.849086][T10758] veth0_macvtap: entered promiscuous mode [ 305.888230][T10758] veth1_macvtap: entered promiscuous mode [ 305.950368][T10758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.974940][T11090] netlink: 'syz.1.1173': attribute type 1 has an invalid length. [ 305.996148][T10758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.046652][T10758] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.072719][T10758] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.092551][T10758] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.111609][ T5848] Bluetooth: hci0: command 0x0419 tx timeout [ 306.117815][T10758] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.157039][T11096] netlink: 'syz.1.1174': attribute type 1 has an invalid length. [ 306.171471][T11096] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1174'. [ 306.182881][T11096] nbd: couldn't find device at index 1048576 [ 306.245234][T10775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.399902][ T1338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.430125][ T1338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.518178][ T9340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.535324][T11105] xfrm0: entered promiscuous mode [ 306.540513][T11105] xfrm0: entered allmulticast mode [ 306.541012][ T9340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.975949][T10775] veth0_vlan: entered promiscuous mode [ 306.990720][T11126] netlink: 'syz.0.1183': attribute type 10 has an invalid length. [ 307.020971][T10775] veth1_vlan: entered promiscuous mode [ 307.099105][T11133] xt_socket: unknown flags 0x2 [ 307.100267][T10775] veth0_macvtap: entered promiscuous mode [ 307.127793][T10775] veth1_macvtap: entered promiscuous mode [ 307.184313][T10775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.213879][T10775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.258759][T10775] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.280700][T10775] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.295634][T10775] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.304893][T10775] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.335206][T11145] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 307.345460][T11145] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 307.356131][T11145] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 307.365590][T11145] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 307.384902][T11145] geneve2: entered promiscuous mode [ 307.390184][T11145] geneve2: entered allmulticast mode [ 307.610771][ T6796] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.782993][ T4502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.790958][ T4502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.850118][ T9340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.878271][ T9340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.909765][ T6796] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.199430][ T6796] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.258845][ T6796] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.442421][ T6796] bridge_slave_1: left allmulticast mode [ 308.448156][ T6796] bridge_slave_1: left promiscuous mode [ 308.468550][ T6796] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.484364][ T6796] bridge_slave_0: left allmulticast mode [ 308.490092][ T6796] bridge_slave_0: left promiscuous mode [ 308.517709][ T6796] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.928720][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 308.937549][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 308.947029][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 308.956056][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 308.967172][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 309.058698][ T6796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.070497][ T6796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.082008][ T6796] bond0 (unregistering): Released all slaves [ 309.129208][T11164] geneve1 speed is unknown, defaulting to 1000 [ 309.564852][ T6796] hsr_slave_0: left promiscuous mode [ 309.570812][ T6796] hsr_slave_1: left promiscuous mode [ 309.580856][ T6796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.588541][ T6796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.598089][ T6796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.638137][ T6796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.685989][ T6796] veth1_macvtap: left promiscuous mode [ 309.695468][ T6796] veth0_macvtap: left promiscuous mode [ 309.701634][ T6796] veth1_vlan: left promiscuous mode [ 309.707160][ T6796] veth0_vlan: left promiscuous mode [ 309.753556][T11175] ipt_rpfilter: unknown options [ 310.072783][T11186] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1199'. [ 310.234075][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 310.245626][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 310.253764][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 310.262934][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 310.270639][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 310.607761][ T6796] team0 (unregistering): Port device team_slave_1 removed [ 310.646316][ T6796] team0 (unregistering): Port device team_slave_0 removed [ 311.081956][ T51] Bluetooth: hci0: command tx timeout [ 311.125710][T11190] geneve1 speed is unknown, defaulting to 1000 [ 311.228027][T11199] veth0: entered promiscuous mode [ 311.249547][T11198] veth0: left promiscuous mode [ 311.376053][T11164] chnl_net:caif_netlink_parms(): no params data found [ 311.574151][T11210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1205'. [ 311.681801][T11164] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.689164][T11164] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.698417][T11164] bridge_slave_0: entered allmulticast mode [ 311.706211][T11164] bridge_slave_0: entered promiscuous mode [ 311.748618][T11164] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.756564][T11164] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.767951][T11164] bridge_slave_1: entered allmulticast mode [ 311.779314][T11164] bridge_slave_1: entered promiscuous mode [ 311.839539][T11218] xt_bpf: check failed: parse error [ 311.927102][T11164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.962339][T11164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.083478][T11227] ieee802154 phy0 wpan0: encryption failed: -22 [ 312.098490][T11164] team0: Port device team_slave_0 added [ 312.138366][ T6796] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.188468][T11164] team0: Port device team_slave_1 added [ 312.196336][T11233] netlink: 'syz.3.1211': attribute type 4 has an invalid length. [ 312.246563][T11230] netlink: 'syz.3.1211': attribute type 4 has an invalid length. [ 312.258333][T11164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.265731][T11164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.293360][T11164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.293985][T11237] netlink: 'syz.1.1210': attribute type 39 has an invalid length. [ 312.347984][ T6796] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.360663][ T51] Bluetooth: hci3: command tx timeout [ 312.380443][T11164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.389056][T11164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.415470][T11164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.635635][ T6796] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.834981][ T6796] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.868131][T11190] chnl_net:caif_netlink_parms(): no params data found [ 312.894283][T11164] hsr_slave_0: entered promiscuous mode [ 312.901164][T11164] hsr_slave_1: entered promiscuous mode [ 313.151629][ T51] Bluetooth: hci0: command tx timeout [ 313.418003][T11295] ieee802154 phy0 wpan0: encryption failed: -22 [ 313.496471][T11298] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1230'. [ 313.534247][T11190] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.536121][T11302] netlink: 'syz.1.1231': attribute type 2 has an invalid length. [ 313.552217][T11190] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.559630][T11190] bridge_slave_0: entered allmulticast mode [ 313.567388][T11190] bridge_slave_0: entered promiscuous mode [ 313.600448][T11190] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.607946][T11190] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.616160][T11190] bridge_slave_1: entered allmulticast mode [ 313.625306][T11190] bridge_slave_1: entered promiscuous mode [ 313.698640][T11298] netlink: 'syz.0.1230': attribute type 3 has an invalid length. [ 313.720134][T11190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.729902][ T6796] bridge_slave_1: left allmulticast mode [ 313.735935][ T6796] bridge_slave_1: left promiscuous mode [ 313.742554][ T6796] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.756250][ T6796] bridge_slave_0: left allmulticast mode [ 313.762387][ T6796] bridge_slave_0: left promiscuous mode [ 313.768179][ T6796] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.091604][ T6796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.103654][ T6796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.114700][ T6796] bond0 (unregistering): Released all slaves [ 314.132960][T11190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.319481][T11190] team0: Port device team_slave_0 added [ 314.359907][T11190] team0: Port device team_slave_1 added [ 314.432763][ T51] Bluetooth: hci3: command tx timeout [ 314.515891][T11190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.529087][T11190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.555435][T11190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.670401][T11190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.709619][T11190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.765925][T11190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.030963][T11348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1240'. [ 315.066877][T11190] hsr_slave_0: entered promiscuous mode [ 315.096706][T11190] hsr_slave_1: entered promiscuous mode [ 315.118997][T11190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.126921][T11190] Cannot create hsr debugfs directory [ 315.243357][ T51] Bluetooth: hci0: command tx timeout [ 315.387818][ T6796] hsr_slave_0: left promiscuous mode [ 315.400287][ T6796] hsr_slave_1: left promiscuous mode [ 315.408928][ T6796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.430000][ T6796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.456995][ T6796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.477292][ T6796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.506670][ T6796] veth1_macvtap: left promiscuous mode [ 315.513476][ T6796] veth0_macvtap: left promiscuous mode [ 315.519362][ T6796] veth1_vlan: left promiscuous mode [ 315.525144][ T6796] veth0_vlan: left promiscuous mode [ 315.609638][T11363] rdma_rxe: rxe_newlink: failed to add lo [ 315.969357][ T6796] team0 (unregistering): Port device team_slave_1 removed [ 316.010446][ T6796] team0 (unregistering): Port device team_slave_0 removed [ 316.516989][ T51] Bluetooth: hci3: command tx timeout [ 316.588532][T11164] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 316.623273][T11164] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 316.644012][T11375] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1250'. [ 316.695321][T11164] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 316.718811][T11164] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 316.896739][T11385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1251'. [ 316.898785][T11384] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge0 [ 316.934864][T11385] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1251'. [ 317.034155][T11385] ip6_vti0: Master is either lo or non-ether device [ 317.315291][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.325147][ T51] Bluetooth: hci0: command tx timeout [ 317.408985][T11164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.508231][T11164] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.548825][ T9349] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.556100][ T9349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.594835][T11190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 317.617302][ T9349] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.624568][ T9349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.654349][T11190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 317.690328][T11190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 317.714848][T11190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 318.023116][T11190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.096074][T11190] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.125044][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.132309][ T5951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.256170][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.263513][ T5951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.369313][T11433] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1265'. [ 318.424638][T11164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.560767][T11164] veth0_vlan: entered promiscuous mode [ 318.594217][ T51] Bluetooth: hci3: command tx timeout [ 318.620911][T11164] veth1_vlan: entered promiscuous mode [ 318.627555][T11443] openvswitch: netlink: Missing key (keys=40, expected=100) [ 318.747212][T11164] veth0_macvtap: entered promiscuous mode [ 318.766781][T11164] veth1_macvtap: entered promiscuous mode [ 318.820207][T11164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.864340][T11164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.915252][T11190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.936575][T11164] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.971717][T11164] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.980490][T11164] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.021245][T11164] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.310227][ T9349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.346931][ T9349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.355898][T11476] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1277'. [ 319.424633][ T6796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.444602][ T6796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.893057][T11190] veth0_vlan: entered promiscuous mode [ 319.940438][T11190] veth1_vlan: entered promiscuous mode [ 320.055650][T11190] veth0_macvtap: entered promiscuous mode [ 320.068789][T11190] veth1_macvtap: entered promiscuous mode [ 320.168258][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.234224][T11190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.338747][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.375711][T11190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.440129][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.462368][T11190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.471132][T11190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.480667][T11190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.490410][T11190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.472118][T11523] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1286'. [ 321.492061][T11525] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1287'. [ 321.691460][T11529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1287'. [ 321.792082][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 321.811017][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 321.819141][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 321.834833][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 321.854542][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 322.042434][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.255090][T11531] geneve1 speed is unknown, defaulting to 1000 [ 322.401082][ T6796] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.420457][ T6796] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.570701][ T1338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.612164][ T1338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.630555][ T49] bridge_slave_1: left allmulticast mode [ 322.640623][ T49] bridge_slave_1: left promiscuous mode [ 322.657923][T11547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1292'. [ 322.661504][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.690780][T11549] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1291'. [ 322.759360][ T49] bridge_slave_0: left allmulticast mode [ 322.767714][ T49] bridge_slave_0: left promiscuous mode [ 322.789070][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.223636][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.235313][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.247322][ T49] bond0 (unregistering): Released all slaves [ 323.286515][T11547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.330353][T11550] vlan2: entered allmulticast mode [ 323.342797][T11550] bond0: entered allmulticast mode [ 323.415666][T11553] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1292'. [ 323.559172][T11567] netlink: 'syz.3.1299': attribute type 10 has an invalid length. [ 323.638503][T11567] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 323.952436][ T5848] Bluetooth: hci0: command tx timeout [ 324.106908][ T49] hsr_slave_0: left promiscuous mode [ 324.120663][ T49] hsr_slave_1: left promiscuous mode [ 324.126767][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.141475][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.149310][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.158309][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.178536][ T49] veth1_macvtap: left promiscuous mode [ 324.184331][ T49] veth0_macvtap: left promiscuous mode [ 324.189965][ T49] veth1_vlan: left promiscuous mode [ 324.195457][ T49] veth0_vlan: left promiscuous mode [ 324.353273][ T1338] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 324.596747][ T49] team0 (unregistering): Port device team_slave_1 removed [ 324.635995][ T49] team0 (unregistering): Port device team_slave_0 removed [ 325.070179][T11531] chnl_net:caif_netlink_parms(): no params data found [ 325.174228][T11531] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.181851][T11531] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.189169][T11531] bridge_slave_0: entered allmulticast mode [ 325.197134][T11531] bridge_slave_0: entered promiscuous mode [ 325.205428][T11531] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.213332][T11531] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.220603][T11531] bridge_slave_1: entered allmulticast mode [ 325.253655][T11531] bridge_slave_1: entered promiscuous mode [ 325.321458][T11585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1303'. [ 325.375671][T11585] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 325.419464][T11585] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.441663][T11592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1303'. [ 325.452182][T11592] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 325.459812][T11592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.474910][T11531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.490721][T11531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.705699][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.760891][T11531] team0: Port device team_slave_0 added [ 325.779749][T11610] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1310'. [ 325.793227][T11612] delete_channel: no stack [ 325.805027][T11531] team0: Port device team_slave_1 added [ 325.856631][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 325.869735][T11610] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1310'. [ 325.885240][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 325.885250][T11610] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1310'. [ 325.906378][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 325.915870][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 325.924027][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 325.956512][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.978230][T11531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.985633][T11531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.016199][T11531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.031580][ T5848] Bluetooth: hci0: command tx timeout [ 326.034311][T11531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.044435][T11531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.073813][T11621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1310'. [ 326.088564][T11531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.159914][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.265268][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.358770][T11613] geneve1 speed is unknown, defaulting to 1000 [ 326.375911][T11531] hsr_slave_0: entered promiscuous mode [ 326.392991][T11531] hsr_slave_1: entered promiscuous mode [ 326.486340][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.594832][ T49] bridge_slave_1: left allmulticast mode [ 326.614051][ T49] bridge_slave_1: left promiscuous mode [ 326.630216][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.657353][ T49] bridge_slave_0: left allmulticast mode [ 326.669357][ T49] bridge_slave_0: left promiscuous mode [ 326.676140][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.989901][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.001729][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.011499][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.012906][ T49] bond0 (unregistering): Released all slaves [ 327.240898][T11644] netlink: 'syz.1.1322': attribute type 49 has an invalid length. [ 327.645891][T11661] __nla_validate_parse: 2 callbacks suppressed [ 327.645914][T11661] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1325'. [ 327.948966][T11665] tipc: Enabling of bearer rejected, failed to enable media [ 328.033383][ T5848] Bluetooth: hci3: command tx timeout [ 328.048679][ T49] hsr_slave_0: left promiscuous mode [ 328.054980][ T49] hsr_slave_1: left promiscuous mode [ 328.061108][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.089405][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.098480][T11672] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.109088][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.118256][ T5848] Bluetooth: hci0: command tx timeout [ 328.124044][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.178443][ T49] veth1_macvtap: left promiscuous mode [ 328.186114][ T49] veth0_macvtap: left promiscuous mode [ 328.196537][ T49] veth1_vlan: left promiscuous mode [ 328.202090][ T49] veth0_vlan: left promiscuous mode [ 328.646300][ T49] team0 (unregistering): Port device team_slave_1 removed [ 328.694939][ T49] team0 (unregistering): Port device team_slave_0 removed [ 329.101644][T11613] chnl_net:caif_netlink_parms(): no params data found [ 329.307850][T11693] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1335'. [ 329.377777][T11613] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.400111][T11613] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.417142][T11613] bridge_slave_0: entered allmulticast mode [ 329.443695][T11613] bridge_slave_0: entered promiscuous mode [ 329.520003][T11613] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.538578][T11613] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.560787][T11613] bridge_slave_1: entered allmulticast mode [ 329.591067][T11613] bridge_slave_1: entered promiscuous mode [ 329.615569][T11700] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 329.782959][T11709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1337'. [ 329.840554][T11613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.877465][T11613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.895150][T11531] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 329.975274][T11531] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 330.013716][T11531] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 330.045301][T11531] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 330.074150][T11613] team0: Port device team_slave_0 added [ 330.113170][ T51] Bluetooth: hci3: command tx timeout [ 330.141037][T11613] team0: Port device team_slave_1 added [ 330.177881][T11734] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 330.203044][ T51] Bluetooth: hci0: command tx timeout [ 330.294540][T11613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.302914][T11613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.335018][T11613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.387609][T11613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.419346][T11613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.446290][T11613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.557819][T11747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1347'. [ 330.575647][T11613] hsr_slave_0: entered promiscuous mode [ 330.582650][T11613] hsr_slave_1: entered promiscuous mode [ 330.589057][T11613] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.598172][T11613] Cannot create hsr debugfs directory [ 330.625822][T11748] tipc: Can't bind to reserved service type 2 [ 330.849997][T11531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.908914][T11531] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.950108][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.957392][ T5951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.002835][ T9349] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.010106][ T9349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.092552][T11761] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1351'. [ 331.368792][T11613] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 331.392974][T11768] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1353'. [ 331.408909][T11613] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 331.462621][T11613] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 331.492406][T11613] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 331.544140][T11774] netlink: 'syz.0.1356': attribute type 24 has an invalid length. [ 331.767683][T11531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.804739][T11792] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1359'. [ 331.816615][T11792] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1359'. [ 331.827738][T11792] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1359'. [ 331.889684][T11613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.980246][T11613] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.018686][ T6796] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.025965][ T6796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.088169][T11531] veth0_vlan: entered promiscuous mode [ 332.132379][ T6796] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.139637][ T6796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.182560][T11803] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.192481][ T51] Bluetooth: hci3: command 0x040f tx timeout [ 332.263305][T11531] veth1_vlan: entered promiscuous mode [ 332.374313][ T43] IPVS: starting estimator thread 0... [ 332.420664][T11531] veth0_macvtap: entered promiscuous mode [ 332.456439][T11531] veth1_macvtap: entered promiscuous mode [ 332.475385][T11812] IPVS: using max 25 ests per chain, 60000 per kthread [ 332.568569][T11531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.609901][T11531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.640209][T11531] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.649565][T11531] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.665024][T11531] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.676045][T11531] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.836793][T11828] netlink: 'syz.1.1373': attribute type 1 has an invalid length. [ 332.884500][T11613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.074496][T11832] sctp: [Deprecated]: syz.3.1375 (pid 11832) Use of struct sctp_assoc_value in delayed_ack socket option. [ 333.074496][T11832] Use struct sctp_sack_info instead [ 333.081770][ T4502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.144196][ T4502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.275863][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.307389][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.500013][T11851] vlan0: entered promiscuous mode [ 333.841840][T11858] bridge0: port 2(batadv0) entered disabled state [ 333.880871][T11858] : left allmulticast mode [ 333.910331][T11858] : left promiscuous mode [ 333.927079][T11858] bridge0: port 1() entered disabled state [ 333.970685][T11858] team0: Port device team_slave_0 removed [ 334.000133][T11858] team0: Port device team_slave_1 removed [ 334.014325][T11858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.025730][T11858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.037176][T11858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.045432][T11858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.083794][T11858] team0: Port device geneve0 removed [ 334.097955][T11858] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 334.116099][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.237893][ T1338] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.272141][ T5848] Bluetooth: hci3: command 0x040f tx timeout [ 334.348047][T11613] veth0_vlan: entered promiscuous mode [ 334.405966][ T1338] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.440766][T11613] veth1_vlan: entered promiscuous mode [ 334.476847][T11613] veth0_macvtap: entered promiscuous mode [ 334.486264][T11613] veth1_macvtap: entered promiscuous mode [ 334.507319][T11613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.527781][T11613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.540870][T11613] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.550371][T11613] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.559683][T11613] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.569207][T11613] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.598623][ T1338] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.664445][ T1338] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.703053][ T9349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.710973][ T9349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.748492][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.757950][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.809372][ T1338] bridge_slave_1: left allmulticast mode [ 334.815415][ T1338] bridge_slave_1: left promiscuous mode [ 334.821269][ T1338] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.837705][ T1338] bridge_slave_0: left allmulticast mode [ 334.843850][ T1338] bridge_slave_0: left promiscuous mode [ 334.849670][ T1338] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.072724][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.191798][ T1338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.205796][ T1338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.216071][ T1338] bond0 (unregistering): Released all slaves [ 335.432828][T11877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1386'. [ 335.632484][T11882] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1388'. [ 335.808298][T11883] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 335.822156][T11883] syzkaller0: Linktype set failed because interface is up [ 335.858431][T11877] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1386'. [ 336.075556][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 336.099706][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 336.117788][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 336.130422][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 336.154172][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 337.627039][ T1338] hsr_slave_0: left promiscuous mode [ 337.635432][ T1338] hsr_slave_1: left promiscuous mode [ 337.642687][ T1338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.650434][ T1338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.665916][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 337.669029][ T1338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.686804][ T1338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.687526][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 337.708119][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 337.722634][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 337.731749][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 337.769277][ T1338] veth1_macvtap: left promiscuous mode [ 337.779250][ T1338] veth0_macvtap: left promiscuous mode [ 337.786280][ T1338] veth1_vlan: left promiscuous mode [ 337.797540][ T1338] veth0_vlan: left promiscuous mode [ 338.195348][ T5848] Bluetooth: hci0: command tx timeout [ 338.367892][ T1338] team0 (unregistering): Port device team_slave_1 removed [ 338.413612][ T1338] team0 (unregistering): Port device team_slave_0 removed [ 338.805409][T11901] netlink: 'syz.3.1391': attribute type 1 has an invalid length. [ 338.861730][T11901] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1391'. [ 338.886320][T11901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1391'. [ 338.901910][T11903] geneve1 speed is unknown, defaulting to 1000 [ 338.950355][T11915] syzkaller1: entered promiscuous mode [ 338.973051][T11915] syzkaller1: entered allmulticast mode [ 339.349685][T11889] geneve1 speed is unknown, defaulting to 1000 [ 339.707252][ T1338] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.718639][T11945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1401'. [ 339.792071][ T5848] Bluetooth: hci3: command tx timeout [ 339.908119][ T1338] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.038076][T11953] netlink: 'syz.0.1402': attribute type 32 has an invalid length. [ 340.058373][ T1338] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.081126][T11953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1402'. [ 340.116258][T11953] (unnamed net_device) (uninitialized): option coupled_control: invalid value (153) [ 340.159817][T11903] chnl_net:caif_netlink_parms(): no params data found [ 340.208820][ T1338] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.227845][T11957] syzkaller1: entered promiscuous mode [ 340.234351][T11957] syzkaller1: entered allmulticast mode [ 340.271979][ T5848] Bluetooth: hci0: command tx timeout [ 340.305884][T11966] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.436305][T11975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1405'. [ 340.635045][T11903] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.648671][T11903] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.656459][T11903] bridge_slave_0: entered allmulticast mode [ 340.669239][T11903] bridge_slave_0: entered promiscuous mode [ 340.687291][T11983] SET target dimension over the limit! [ 340.705542][T11983] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1408'. [ 340.773743][T11903] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.784310][T11903] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.793823][T11903] bridge_slave_1: entered allmulticast mode [ 340.806876][T11903] bridge_slave_1: entered promiscuous mode [ 340.858773][T11980] geneve1 speed is unknown, defaulting to 1000 [ 341.016276][ T1338] bridge_slave_1: left allmulticast mode [ 341.039738][ T1338] bridge_slave_1: left promiscuous mode [ 341.059782][ T1338] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.099972][ T1338] bridge_slave_0: left allmulticast mode [ 341.111916][ T1338] bridge_slave_0: left promiscuous mode [ 341.117810][ T1338] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.673219][ T1338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.686942][ T1338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.698028][ T1338] bond0 (unregistering): Released all slaves [ 341.721137][T11889] chnl_net:caif_netlink_parms(): no params data found [ 341.737481][T11903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.850060][T11903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.878936][ T5848] Bluetooth: hci3: command tx timeout [ 342.016528][T11903] team0: Port device team_slave_0 added [ 342.027208][T11903] team0: Port device team_slave_1 added [ 342.237771][T11903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.249604][T11903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.283542][T11903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.297795][T11903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.305225][T11903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.332425][T11903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.351972][ T5848] Bluetooth: hci0: command tx timeout [ 342.426083][T11889] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.457807][T11889] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.498184][T11889] bridge_slave_0: entered allmulticast mode [ 342.529176][T11889] bridge_slave_0: entered promiscuous mode [ 342.780536][T11889] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.805281][T11889] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.822288][T11889] bridge_slave_1: entered allmulticast mode [ 342.872560][T11889] bridge_slave_1: entered promiscuous mode [ 342.984083][ T1338] hsr_slave_0: left promiscuous mode [ 342.990023][ T1338] hsr_slave_1: left promiscuous mode [ 343.010307][ T1338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.019045][ T1338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.028548][ T1338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.036848][ T1338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.063818][T12042] tipc: Failed to remove unknown binding: 66,1,1/0:2718247677/2718247679 [ 343.080616][ T1338] veth1_macvtap: left promiscuous mode [ 343.087359][ T1338] veth0_macvtap: left promiscuous mode [ 343.093509][ T1338] veth1_vlan: left promiscuous mode [ 343.098828][ T1338] veth0_vlan: left promiscuous mode [ 343.101572][T12042] tipc: Failed to remove unknown binding: 66,1,1/0:2718247677/2718247679 [ 343.302041][T12050] Bluetooth: MGMT ver 1.23 [ 343.606886][ T1338] team0 (unregistering): Port device team_slave_1 removed [ 343.647442][ T1338] team0 (unregistering): Port device team_slave_0 removed [ 343.952972][ T51] Bluetooth: hci3: command tx timeout [ 344.083639][T11889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.098692][T11903] hsr_slave_0: entered promiscuous mode [ 344.110367][T11903] hsr_slave_1: entered promiscuous mode [ 344.140353][T11889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.218543][T12037] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.229237][T12037] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 344.303582][T11889] team0: Port device team_slave_0 added [ 344.337431][T12037] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.350632][T12037] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 344.373648][T11889] team0: Port device team_slave_1 added [ 344.432239][ T51] Bluetooth: hci0: command tx timeout [ 344.465003][T12037] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.476361][T12037] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 344.538510][T11889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.549933][T11889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.581932][T11889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.610110][T11889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.619591][T12065] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1430'. [ 344.631024][T11889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.658554][T11889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.701573][T12037] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.714920][T12037] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 344.843582][T11889] hsr_slave_0: entered promiscuous mode [ 344.856177][T11889] hsr_slave_1: entered promiscuous mode [ 344.862741][T11889] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 344.870348][T11889] Cannot create hsr debugfs directory [ 344.959512][T12037] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 344.968144][T12037] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 345.024166][T12037] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 345.035699][T12037] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 345.077244][T12037] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 345.088373][T12037] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 345.116930][T12072] netlink: 'syz.1.1432': attribute type 29 has an invalid length. [ 345.140985][T12037] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 345.149995][T12037] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 345.180837][T12072] netlink: 'syz.1.1432': attribute type 29 has an invalid length. [ 345.312699][ T5848] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 345.347905][T12082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1435'. [ 345.647353][T11903] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 345.660165][T11903] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 345.674336][T11903] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 345.686890][T11903] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 345.940871][T11903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.997399][T11903] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.032241][ T5848] Bluetooth: hci3: command tx timeout [ 346.095815][ T9349] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.103210][ T9349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.124634][T11889] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 346.138472][ T9349] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.145773][ T9349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.168853][T11889] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 346.196499][T11889] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 346.215740][T11889] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 346.488800][T11889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.512882][ T5848] Bluetooth: hci0: command 0x0c1a tx timeout [ 346.554727][T11889] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.583779][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.591036][ T5951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.627944][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.635189][ T5951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.696753][T12138] xt_HMARK: spi-set and port-set can't be combined [ 347.140742][T11903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.536815][T11889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.707907][T11889] veth0_vlan: entered promiscuous mode [ 347.729150][T12183] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 347.764693][T11889] veth1_vlan: entered promiscuous mode [ 347.859289][T11889] veth0_macvtap: entered promiscuous mode [ 347.879538][T11889] veth1_macvtap: entered promiscuous mode [ 347.954944][T11889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.981640][T11889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.985522][T12192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.994704][T11889] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.006835][T11889] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.017430][T11889] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.026557][T11889] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.042721][T12192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1455'. [ 348.103969][T11903] veth0_vlan: entered promiscuous mode [ 348.112031][ T5848] Bluetooth: hci3: command tx timeout [ 348.170371][T11903] veth1_vlan: entered promiscuous mode [ 348.262188][ T1338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.290667][ T1338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.309473][T12197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1458'. [ 348.392205][ T9336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.414738][T11903] veth0_macvtap: entered promiscuous mode [ 348.417720][ T9336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.436102][T11903] veth1_macvtap: entered promiscuous mode [ 348.495102][T12203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1459'. [ 348.496051][T11903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.547506][T11903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.566570][T11903] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.576922][T11903] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.587765][T11903] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.598657][T11903] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.771149][T12213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1462'. [ 348.783679][T12213] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 348.794652][T12213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.822690][ T9349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.830577][ T9349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.876439][ T6796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.892384][ T6796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.018486][T12224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1464'. [ 349.230211][T12232] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1466'. [ 349.349597][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.494026][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.652721][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.987435][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 349.996903][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 350.006451][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 350.015875][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 350.025746][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 350.062791][T12240] geneve1 speed is unknown, defaulting to 1000 [ 350.090761][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.402082][ T49] bridge_slave_1: left allmulticast mode [ 350.407807][ T49] bridge_slave_1: left promiscuous mode [ 350.422154][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.441077][ T49] bridge_slave_0: left allmulticast mode [ 350.448371][ T49] bridge_slave_0: left promiscuous mode [ 350.454876][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.764486][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.777217][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.788418][ T49] bond0 (unregistering): Released all slaves [ 350.814928][T12240] chnl_net:caif_netlink_parms(): no params data found [ 350.972316][T12240] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.979521][T12240] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.987234][T12240] bridge_slave_0: entered allmulticast mode [ 350.996162][T12240] bridge_slave_0: entered promiscuous mode [ 351.006179][T12240] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.014140][T12240] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.022106][T12240] bridge_slave_1: entered allmulticast mode [ 351.029413][T12240] bridge_slave_1: entered promiscuous mode [ 351.139573][T12250] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1470'. [ 351.220392][T12240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.273873][T12240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.370364][T12259] xt_connbytes: Forcing CT accounting to be enabled [ 351.403614][T12259] --map-set only usable from mangle table [ 351.516434][T12240] team0: Port device team_slave_0 added [ 351.554140][T12240] team0: Port device team_slave_1 added [ 351.943008][T12278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.968093][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 351.969882][T12240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.984113][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 351.994862][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 351.994877][T12240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.033683][T12240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.048210][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 352.059867][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 352.080804][ T49] hsr_slave_0: left promiscuous mode [ 352.102934][ T49] hsr_slave_1: left promiscuous mode [ 352.108880][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.122257][ T51] Bluetooth: hci0: command tx timeout [ 352.135007][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.150023][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.163310][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.217326][ T49] veth1_macvtap: left promiscuous mode [ 352.225529][ T49] veth0_macvtap: left promiscuous mode [ 352.232051][ T49] veth1_vlan: left promiscuous mode [ 352.237487][ T49] veth0_vlan: left promiscuous mode [ 352.329721][T12292] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1484'. [ 352.663532][T12304] xt_recent: Unsupported userspace flags (00000061) [ 353.043462][T12316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1491'. [ 353.097853][ T49] team0 (unregistering): Port device team_slave_1 removed [ 353.151474][ T49] team0 (unregistering): Port device team_slave_0 removed [ 353.531861][T12284] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1481'. [ 353.548307][T12240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.561322][T12240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.602070][T12240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.662117][T12320] tipc: Invalid UDP bearer configuration [ 353.662184][T12320] tipc: Enabling of bearer rejected, failed to enable media [ 353.721990][T12321] geneve3: entered promiscuous mode [ 353.727270][T12321] geneve3: entered allmulticast mode [ 353.832160][T12328] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1493'. [ 353.975413][T12337] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1497'. [ 353.988330][T12240] hsr_slave_0: entered promiscuous mode [ 354.016869][T12240] hsr_slave_1: entered promiscuous mode [ 354.038844][T12240] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 354.063767][T12240] Cannot create hsr debugfs directory [ 354.085454][T12281] geneve1 speed is unknown, defaulting to 1000 [ 354.116748][ T5848] Bluetooth: hci3: command tx timeout [ 354.191955][ T5848] Bluetooth: hci0: command tx timeout [ 354.233085][T12348] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1498'. [ 354.313334][T12339] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1496'. [ 354.378989][T12348] gretap0: entered promiscuous mode [ 354.447251][T12339] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 354.771120][T12368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1504'. [ 354.825853][T12369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1504'. [ 354.855168][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.042072][T12379] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 355.094093][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.214584][T12389] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1510'. [ 355.239477][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.265311][T12382] pim6reg1: entered promiscuous mode [ 355.271510][T12382] pim6reg1: entered allmulticast mode [ 355.314403][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.534994][T12401] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1513'. [ 355.767130][T12281] chnl_net:caif_netlink_parms(): no params data found [ 355.827556][ T49] bridge_slave_1: left allmulticast mode [ 355.848836][ T49] bridge_slave_1: left promiscuous mode [ 355.852602][T12413] netlink: 'syz.1.1517': attribute type 1 has an invalid length. [ 355.859223][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.897429][ T49] bridge_slave_0: left allmulticast mode [ 355.906350][ T49] bridge_slave_0: left promiscuous mode [ 355.912829][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.192540][ T5848] Bluetooth: hci3: command 0x041b tx timeout [ 356.219380][T12426] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1519'. [ 356.272228][ T51] Bluetooth: hci0: command tx timeout [ 356.351843][ T9340] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 356.496928][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.510815][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.528215][ T49] bond0 (unregistering): Released all slaves [ 356.600375][T12240] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 356.689298][T12240] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 356.735042][T12444] netlink: 'syz.0.1524': attribute type 10 has an invalid length. [ 356.815405][T12240] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 356.829066][T12240] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 356.900982][T12281] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.910259][T12281] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.918079][T12281] bridge_slave_0: entered allmulticast mode [ 356.930883][T12281] bridge_slave_0: entered promiscuous mode [ 356.980949][T12281] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.988442][T12281] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.998655][T12281] bridge_slave_1: entered allmulticast mode [ 357.010657][T12281] bridge_slave_1: entered promiscuous mode [ 357.088022][T12470] unsupported nla_type 52263 [ 357.208772][T12281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.246732][T12281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.392506][T12479] x_tables: unsorted underflow at hook 3 [ 357.497545][T12281] team0: Port device team_slave_0 added [ 357.538174][T12281] team0: Port device team_slave_1 added [ 357.587203][ T49] hsr_slave_0: left promiscuous mode [ 357.601017][ T49] hsr_slave_1: left promiscuous mode [ 357.617176][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.628775][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.648751][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.657959][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.700906][ T49] veth1_macvtap: left promiscuous mode [ 357.716955][ T49] veth0_macvtap: left promiscuous mode [ 357.728602][ T49] veth1_vlan: left promiscuous mode [ 357.736423][ T49] veth0_vlan: left promiscuous mode [ 358.239949][ T49] team0 (unregistering): Port device team_slave_1 removed [ 358.273318][ T51] Bluetooth: hci3: command 0x041b tx timeout [ 358.274408][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.299877][ T49] team0 (unregistering): Port device team_slave_0 removed [ 358.362545][ T51] Bluetooth: hci0: command tx timeout [ 358.802172][T12281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.809203][T12281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.856624][T12281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.874186][T12281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.885869][T12281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.925343][T12281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.957564][T12514] __nla_validate_parse: 6 callbacks suppressed [ 358.957579][T12514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1542'. [ 358.974387][T12514] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 359.015275][T12514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.128736][T12281] hsr_slave_0: entered promiscuous mode [ 359.136158][T12281] hsr_slave_1: entered promiscuous mode [ 359.487914][T12240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.499720][T12532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.548853][T12240] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.598413][ T1338] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.605698][ T1338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.652381][T12536] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 359.667109][ T9340] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.674314][ T9340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.827100][T12547] IPVS: set_ctl: invalid protocol: 3 172.20.20.45:20000 [ 359.840278][T12240] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 359.947152][T12552] macvtap0: entered promiscuous mode [ 359.954624][T12552] macvtap0: entered allmulticast mode [ 359.963797][T12552] vlan0: entered allmulticast mode [ 359.979331][T12552] veth0_vlan: entered allmulticast mode [ 359.996225][T12552] vlan0: left allmulticast mode [ 360.002991][T12552] veth0_vlan: left allmulticast mode [ 360.058386][T12557] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1555'. [ 360.137300][T12556] tap0: tun_chr_ioctl cmd 35312 [ 360.146564][T12281] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 360.163429][T12556] sctp: [Deprecated]: syz.1.1555 (pid 12556) Use of struct sctp_assoc_value in delayed_ack socket option. [ 360.163429][T12556] Use struct sctp_sack_info instead [ 360.206625][T12281] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 360.250423][T12281] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 360.300350][T12281] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 360.361935][ T51] Bluetooth: hci3: command 0x041b tx timeout [ 360.369154][T12567] netlink: 'syz.3.1557': attribute type 64 has an invalid length. [ 360.381700][T12567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1557'. [ 360.436207][T12578] netlink: 'syz.3.1557': attribute type 1 has an invalid length. [ 360.465604][T12572] netlink: 'syz.0.1558': attribute type 5 has an invalid length. [ 360.474168][T12577] netlink: 'syz.0.1558': attribute type 5 has an invalid length. [ 360.567515][T12240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.646996][T12587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1562'. [ 360.704474][T12281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.893792][T12281] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.910799][T12240] veth0_vlan: entered promiscuous mode [ 360.970680][T12240] veth1_vlan: entered promiscuous mode [ 360.989742][ T9349] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.996955][ T9349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.044346][ T9349] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.051620][ T9349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.297704][T12240] veth0_macvtap: entered promiscuous mode [ 361.350786][T12240] veth1_macvtap: entered promiscuous mode [ 361.409393][T12240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.448342][T12240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.475906][T12240] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.490771][T12240] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.505360][T12240] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.515135][T12240] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.776983][T12281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.786649][ T9349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.818133][ T9349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.905897][ T6796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.922795][T12627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1570'. [ 361.928165][ T6796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.942879][T12627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1570'. [ 362.238540][T12635] dvmrp8: entered allmulticast mode [ 362.306916][T12641] netlink: 'syz.0.1574': attribute type 28 has an invalid length. [ 362.333754][T12641] netlink: 'syz.0.1574': attribute type 3 has an invalid length. [ 362.388530][T12641] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1574'. [ 362.431778][ T51] Bluetooth: hci3: command 0x041b tx timeout [ 362.510539][ T9340] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.569069][T12645] 8021q: adding VLAN 0 to HW filter on device bond4 [ 362.677236][ T9340] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.794518][ T9340] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.814472][T12281] veth0_vlan: entered promiscuous mode [ 362.827487][T12281] veth1_vlan: entered promiscuous mode [ 362.867887][T12281] veth0_macvtap: entered promiscuous mode [ 362.878624][T12281] veth1_macvtap: entered promiscuous mode [ 362.910053][ T9340] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.930505][T12281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.950687][T12281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.969231][T12281] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.978914][T12281] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.988535][T12281] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.998109][T12281] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.111730][ T1338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.119666][ T1338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.143843][ T9340] bridge_slave_1: left allmulticast mode [ 363.149541][ T9340] bridge_slave_1: left promiscuous mode [ 363.158840][ T9340] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.169711][ T9340] bridge_slave_0: left allmulticast mode [ 363.176162][ T9340] bridge_slave_0: left promiscuous mode [ 363.182874][ T9340] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.492394][ T9340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.504312][ T9340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.515307][ T9340] bond0 (unregistering): Released all slaves [ 363.549014][ T9349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.559445][ T9349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.958825][T12652] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.1578'. [ 363.970071][T12652] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 363.997627][T12652] openvswitch: netlink: Duplicate key (type 0). [ 364.037687][ T9340] hsr_slave_0: left promiscuous mode [ 364.078804][ T9340] hsr_slave_1: left promiscuous mode [ 364.095318][ T9340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.107300][ T9340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.139669][ T9340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.161128][ T9340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.193206][T12664] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1579'. [ 364.255489][ T9340] veth1_macvtap: left promiscuous mode [ 364.293440][ T9340] veth0_macvtap: left promiscuous mode [ 364.299186][ T9340] veth1_vlan: left promiscuous mode [ 364.312030][ T9340] veth0_vlan: left promiscuous mode [ 364.645849][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 364.667363][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 364.678809][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 364.689736][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 364.699051][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 365.026372][ T9340] team0 (unregistering): Port device team_slave_1 removed [ 365.067888][ T9340] team0 (unregistering): Port device team_slave_0 removed [ 365.488142][T12674] geneve1 speed is unknown, defaulting to 1000 [ 365.846341][ T9340] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.870350][T12674] chnl_net:caif_netlink_parms(): no params data found [ 365.957498][T12674] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.965299][T12674] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.973386][T12674] bridge_slave_0: entered allmulticast mode [ 365.980641][T12674] bridge_slave_0: entered promiscuous mode [ 365.989895][T12674] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.997745][T12674] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.006206][T12674] bridge_slave_1: entered allmulticast mode [ 366.015702][T12674] bridge_slave_1: entered promiscuous mode [ 366.058111][T12674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.070562][T12674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.125265][T12674] team0: Port device team_slave_0 added [ 366.179553][T12674] team0: Port device team_slave_1 added [ 366.227041][ T9340] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.457858][ T9340] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.503944][T12674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.519377][T12674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.550094][T12674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.658610][ T9340] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.697834][T12674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.717104][T12674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.750791][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 366.759605][ T5851] Bluetooth: hci0: command tx timeout [ 366.772268][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 366.782330][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 366.791685][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 366.800565][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 366.812925][T12674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.829422][T12700] netlink: 'syz.1.1588': attribute type 2 has an invalid length. [ 366.848205][T12698] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 366.890360][T12709] geneve1 speed is unknown, defaulting to 1000 [ 366.901075][T12716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1590'. [ 367.061591][T12723] netlink: 'syz.3.1593': attribute type 8 has an invalid length. [ 367.079819][T12718] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1591'. [ 367.166765][T12674] hsr_slave_0: entered promiscuous mode [ 367.182386][T12674] hsr_slave_1: entered promiscuous mode [ 367.209382][T12674] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.243149][T12674] Cannot create hsr debugfs directory [ 367.249116][T12725] kthread_run failed with err -4 [ 367.409730][T12738] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1595'. [ 367.548800][ T9340] bridge_slave_1: left allmulticast mode [ 367.556267][ T9340] bridge_slave_1: left promiscuous mode [ 367.566833][ T9340] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.588685][ T9340] bridge_slave_0: left allmulticast mode [ 367.598705][T12743] netlink: 'syz.0.1596': attribute type 3 has an invalid length. [ 367.617128][ T9340] bridge_slave_0: left promiscuous mode [ 367.626460][ T9340] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.639688][T12749] Unsupported ieee802154 address type: 0 [ 368.051583][ T9340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.063202][ T9340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.076178][ T9340] bond0 (unregistering): Released all slaves [ 368.116858][T12752] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 368.315115][T12765] netlink: 'syz.0.1602': attribute type 1 has an invalid length. [ 368.327492][T12765] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1602'. [ 368.360473][T12761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1601'. [ 368.505199][T12763] netlink: 'syz.3.1603': attribute type 8 has an invalid length. [ 368.728025][T12788] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.831404][ T51] Bluetooth: hci0: command tx timeout [ 368.837024][ T5848] Bluetooth: hci3: command tx timeout [ 368.960016][T12799] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1608'. [ 369.024968][T12709] chnl_net:caif_netlink_parms(): no params data found [ 369.179649][T12804] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1609'. [ 369.240008][ T9340] hsr_slave_0: left promiscuous mode [ 369.282089][ T9340] hsr_slave_1: left promiscuous mode [ 369.288677][ T9340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.317483][ T9340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.342606][ T9340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.360381][ T9340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.410649][ T9340] veth1_macvtap: left promiscuous mode [ 369.443906][ T9340] veth0_macvtap: left promiscuous mode [ 369.449669][ T9340] veth1_vlan: left promiscuous mode [ 369.461465][ T9340] veth0_vlan: left promiscuous mode [ 370.093525][ T9340] team0 (unregistering): Port device team_slave_1 removed [ 370.149447][ T9340] team0 (unregistering): Port device team_slave_0 removed [ 370.912281][ T5848] Bluetooth: hci3: command tx timeout [ 370.912289][ T51] Bluetooth: hci0: command tx timeout [ 370.961722][T12838] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1614'. [ 370.977190][T12709] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.001838][T12709] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.024897][T12709] bridge_slave_0: entered allmulticast mode [ 371.052142][T12709] bridge_slave_0: entered promiscuous mode [ 371.065606][T12709] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.092067][T12709] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.101656][T12709] bridge_slave_1: entered allmulticast mode [ 371.113867][T12709] bridge_slave_1: entered promiscuous mode [ 371.277412][T12709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.307928][T12709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.335594][T12674] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 371.465327][T12674] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 371.495448][T12709] team0: Port device team_slave_0 added [ 371.506274][T12856] xt_hashlimit: invalid interval [ 371.516662][T12709] team0: Port device team_slave_1 added [ 371.517676][T12856] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1622'. [ 371.535908][T12856] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.576530][T12674] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 371.626662][T12857] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1621'. [ 371.643275][T12674] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 371.662297][T12854] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1621'. [ 371.678697][T12709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.694073][T12709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.721894][T12709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.735764][T12709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.743798][T12709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.773770][T12709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.916003][T12876] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 371.932146][T12877] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 371.955789][T12878] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1627'. [ 371.999243][T12709] hsr_slave_0: entered promiscuous mode [ 372.026166][T12709] hsr_slave_1: entered promiscuous mode [ 372.158274][T12891] Bluetooth: MGMT ver 1.23 [ 372.180743][T12890] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1631'. [ 372.190694][T12890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1631'. [ 372.524889][T12674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.666920][T12912] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1640'. [ 372.676749][T12674] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.738917][ T4502] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.746185][ T4502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.847925][ T4502] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.855205][ T4502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.871748][T12916] xt_cgroup: path and classid specified [ 372.992296][ T51] Bluetooth: hci3: command tx timeout [ 372.994430][ T5848] Bluetooth: hci0: command tx timeout [ 373.086765][T12919] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1642'. [ 373.139134][T12919] gretap0: entered promiscuous mode [ 373.168748][T12925] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1642'. [ 373.203388][T12925] 0猉功D: renamed from gretap0 [ 373.233567][T12925] 0猉功D: left promiscuous mode [ 373.238996][T12925] 0猉功D: entered allmulticast mode [ 373.251126][T12925] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 373.334631][T12709] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 373.388338][T12709] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 373.433865][T12709] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 373.475934][T12709] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 373.720987][T12674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.755397][T12943] sit4: entered promiscuous mode [ 373.760446][T12943] sit4: entered allmulticast mode [ 373.777978][T12945] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 373.879672][T12947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.919297][T12951] macvlan3: entered promiscuous mode [ 373.927530][T12951] macvlan3: entered allmulticast mode [ 373.936782][T12951] bond0: entered promiscuous mode [ 373.943090][T12951] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 373.953051][T12951] bond0: left promiscuous mode [ 374.045482][T12959] macvtap2: entered allmulticast mode [ 374.051085][T12959] veth0_macvtap: entered allmulticast mode [ 374.167127][T12709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.219863][T12674] veth0_vlan: entered promiscuous mode [ 374.233711][T12709] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.257354][T12964] netlink: 'syz.1.1651': attribute type 15 has an invalid length. [ 374.294150][ T1338] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.301403][ T1338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.326691][T12674] veth1_vlan: entered promiscuous mode [ 374.353757][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.361029][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.558222][T12674] veth0_macvtap: entered promiscuous mode [ 374.614379][T12674] veth1_macvtap: entered promiscuous mode [ 374.666061][T12674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.705982][T12674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.782707][T12674] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.822414][T12674] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.832055][T12674] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.840797][T12674] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.072060][ T5848] Bluetooth: hci3: command tx timeout [ 375.098425][ T6796] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.137852][ T6796] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.217934][T12709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.255190][ T9336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.281799][ T9336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.818510][ T9336] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.869500][T13027] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 375.988605][ T9336] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.088095][ T9336] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.111600][T12709] veth0_vlan: entered promiscuous mode [ 376.134853][T12709] veth1_vlan: entered promiscuous mode [ 376.182784][ T9336] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.212418][T12709] veth0_macvtap: entered promiscuous mode [ 376.223607][T12709] veth1_macvtap: entered promiscuous mode [ 376.243852][T12709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.260906][T12709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.276434][T12709] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.287652][T12709] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.297569][T12709] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.309537][T12709] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.406685][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.416951][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.496044][ T6796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.506989][ T6796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.531078][ T9336] bridge_slave_1: left allmulticast mode [ 376.537292][ T9336] bridge_slave_1: left promiscuous mode [ 376.543921][ T9336] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.557482][ T9336] bridge_slave_0: left allmulticast mode [ 376.563897][ T9336] bridge_slave_0: left promiscuous mode [ 376.569789][ T9336] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.956769][ T9336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.969397][ T9336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.980410][ T9336] bond0 (unregistering): Released all slaves [ 377.383694][ T9336] hsr_slave_0: left promiscuous mode [ 377.441519][ T9336] hsr_slave_1: left promiscuous mode [ 377.447675][ T9336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.496585][ T9336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.553148][ T9336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.608901][ T9336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.685908][T13049] netlink: 'syz.1.1671': attribute type 21 has an invalid length. [ 377.707262][T13049] netlink: 'syz.1.1671': attribute type 22 has an invalid length. [ 377.733840][T13049] netlink: 'syz.1.1671': attribute type 23 has an invalid length. [ 377.761641][T13049] netlink: 'syz.1.1671': attribute type 25 has an invalid length. [ 377.776882][ T9336] veth1_macvtap: left promiscuous mode [ 377.788286][T13049] netlink: 'syz.1.1671': attribute type 26 has an invalid length. [ 377.792985][ T9336] veth0_macvtap: left promiscuous mode [ 377.807771][T13045] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 377.817971][T13049] __nla_validate_parse: 4 callbacks suppressed [ 377.817987][T13049] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1671'. [ 377.822829][ T9336] veth1_vlan: left promiscuous mode [ 377.891981][ T9336] veth0_vlan: left promiscuous mode [ 378.098988][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 378.108650][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 378.117542][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 378.126780][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 378.135102][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 378.551981][ T9336] team0 (unregistering): Port device team_slave_1 removed [ 378.593554][ T9336] team0 (unregistering): Port device team_slave_0 removed [ 378.758476][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.005415][T13052] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1670'. [ 379.105618][T13056] geneve1 speed is unknown, defaulting to 1000 [ 379.435400][ T9336] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.508966][T13056] chnl_net:caif_netlink_parms(): no params data found [ 379.602061][T13056] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.609253][T13056] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.617016][T13056] bridge_slave_0: entered allmulticast mode [ 379.626862][T13056] bridge_slave_0: entered promiscuous mode [ 379.636114][T13056] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.643981][T13056] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.654490][T13056] bridge_slave_1: entered allmulticast mode [ 379.663128][T13056] bridge_slave_1: entered promiscuous mode [ 379.699293][T13056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.713131][T13056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.755535][T13056] team0: Port device team_slave_0 added [ 379.765458][T13056] team0: Port device team_slave_1 added [ 379.803431][ T9336] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.896559][T13067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1674'. [ 379.964642][T13056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.985222][T13056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.033452][T13056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.076588][T13075] netlink: 'syz.3.1677': attribute type 1 has an invalid length. [ 380.098708][T13075] netlink: 'syz.3.1677': attribute type 10 has an invalid length. [ 380.119105][T13075] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1677'. [ 380.133532][ T9336] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.174845][T13080] netlink: 'syz.1.1678': attribute type 2 has an invalid length. [ 380.191001][T13056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.202554][ T51] Bluetooth: hci0: command tx timeout [ 380.218445][T13056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.266639][T13082] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1678'. [ 380.289053][T13056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.398856][ T9336] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.430889][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 380.444266][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 380.453447][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 380.475472][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 380.487323][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 380.598778][T13056] hsr_slave_0: entered promiscuous mode [ 380.606420][T13056] hsr_slave_1: entered promiscuous mode [ 380.613578][T13056] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.626305][T13056] Cannot create hsr debugfs directory [ 380.634379][T13095] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1681'. [ 380.650846][T13095] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1681'. [ 380.691629][T13092] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1681'. [ 380.729554][T13092] gretap0: entered promiscuous mode [ 380.752293][T13095] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1681'. [ 380.776949][T13101] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 380.779525][T13088] geneve1 speed is unknown, defaulting to 1000 [ 380.787761][T13095] 0猉功D: renamed from gretap0 [ 380.813940][T13095] 0猉功D: left promiscuous mode [ 380.823765][T13095] 0猉功D: entered allmulticast mode [ 380.826460][T13102] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 380.875826][T13095] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 381.047934][T13107] C: renamed from team_slave_0 [ 381.064555][T13107] netlink: 'syz.0.1686': attribute type 1 has an invalid length. [ 381.122201][T13107] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 381.178522][T13109] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1688'. [ 381.314822][ T9336] bridge_slave_1: left allmulticast mode [ 381.323073][ T9336] bridge_slave_1: left promiscuous mode [ 381.332337][ T9336] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.352431][ T9336] bridge_slave_0: left allmulticast mode [ 381.360439][ T9336] bridge_slave_0: left promiscuous mode [ 381.376918][ T9336] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.786066][ T9336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.797671][ T9336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.808483][ T9336] bond0 (unregistering): Released all slaves [ 382.271936][ T51] Bluetooth: hci0: command tx timeout [ 382.466323][T13156] netlink: 'syz.3.1701': attribute type 1 has an invalid length. [ 382.482212][T13156] netlink: 'syz.3.1701': attribute type 4 has an invalid length. [ 382.591823][ T51] Bluetooth: hci3: command tx timeout [ 382.752151][T13167] block nbd0: server does not support multiple connections per device. [ 382.818147][T13167] block nbd0: shutting down sockets [ 382.925505][T13164] netlink: 'syz.3.1701': attribute type 2 has an invalid length. [ 383.053802][ T9336] hsr_slave_0: left promiscuous mode [ 383.068179][ T9336] hsr_slave_1: left promiscuous mode [ 383.091825][ T9336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.108136][ T9336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.138102][ T9336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.151243][ T9336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.190648][ T9336] veth1_macvtap: left promiscuous mode [ 383.196832][ T9336] veth0_macvtap: left promiscuous mode [ 383.207184][ T9336] veth1_vlan: left promiscuous mode [ 383.213482][ T9336] veth0_vlan: left promiscuous mode [ 383.312845][T13196] __nla_validate_parse: 2 callbacks suppressed [ 383.312864][T13196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1709'. [ 383.838270][ T9336] team0 (unregistering): Port device team_slave_1 removed [ 383.886070][ T9336] team0 (unregistering): Port device team_slave_0 removed [ 384.316839][T13191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1709'. [ 384.351473][ T51] Bluetooth: hci0: command tx timeout [ 384.387693][T13196] macvlan2: entered promiscuous mode [ 384.395584][T13207] xt_CT: You must specify a L4 protocol and not use inversions on it [ 384.406365][T13196] macvlan2: entered allmulticast mode [ 384.432083][T13202] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1712'. [ 384.446331][T13088] chnl_net:caif_netlink_parms(): no params data found [ 384.675452][ T51] Bluetooth: hci3: command tx timeout [ 384.823180][T13056] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 384.843701][T13056] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 385.003091][T13088] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.010308][T13088] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.030625][T13088] bridge_slave_0: entered allmulticast mode [ 385.032361][T13234] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 385.049313][T13088] bridge_slave_0: entered promiscuous mode [ 385.086599][T13056] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 385.106089][T13056] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 385.127378][T13088] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.138301][T13088] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.147678][T13088] bridge_slave_1: entered allmulticast mode [ 385.157889][T13088] bridge_slave_1: entered promiscuous mode [ 385.168056][T13236] netlink: 'syz.1.1719': attribute type 39 has an invalid length. [ 385.184997][T13240] sch_tbf: burst 32855 is lower than device lo mtu (39799) ! [ 385.286743][T13088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.322025][T13088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.434869][T13088] team0: Port device team_slave_0 added [ 385.521226][T13088] team0: Port device team_slave_1 added [ 385.619435][T13088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.641908][T13088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.672623][T13261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1723'. [ 385.703650][T13088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.779744][T13088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.788168][T13088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.818634][T13088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.847266][T13265] pim6reg1: entered promiscuous mode [ 385.855688][T13265] pim6reg1: entered allmulticast mode [ 385.968695][T13088] hsr_slave_0: entered promiscuous mode [ 385.976233][T13088] hsr_slave_1: entered promiscuous mode [ 386.116484][T13268] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1724'. [ 386.215254][T13286] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 386.358805][T13056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.431392][ T51] Bluetooth: hci0: command tx timeout [ 386.458807][T13056] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.477416][ T1338] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.484608][ T1338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.533819][ T1338] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.541057][ T1338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.585261][T13301] xt_l2tp: unknown flags: 18 [ 386.660191][T13303] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1736'. [ 386.667629][T13056] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 386.736532][T13308] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1738'. [ 386.748792][T13308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1738'. [ 386.761946][ T51] Bluetooth: hci3: command tx timeout [ 386.774562][T13303] x_tables: duplicate underflow at hook 1 [ 387.191012][T13088] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 387.208237][T13088] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 387.224486][T13088] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 387.238342][T13088] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 387.285499][T13056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.431831][T13339] netlink: 'syz.0.1744': attribute type 83 has an invalid length. [ 387.453123][T13339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1744'. [ 387.490013][T13341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1745'. [ 387.514812][T13056] veth0_vlan: entered promiscuous mode [ 387.580175][T13088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.590660][T13056] veth1_vlan: entered promiscuous mode [ 387.703809][T13088] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.757750][ T1338] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.764998][ T1338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.797310][T13056] veth0_macvtap: entered promiscuous mode [ 387.844133][ T1338] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.851382][ T1338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.864286][T13056] veth1_macvtap: entered promiscuous mode [ 387.917998][T13056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.944506][T13056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.978487][T13056] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.993104][T13359] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 388.006263][T13056] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.016879][T13056] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.026127][T13056] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.255211][ T9340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.268973][ T9340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.344582][ T9340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.356396][ T9349] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 388.375891][ T9340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.383929][ T9349] ------------[ cut here ]------------ [ 388.389442][ T9349] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1223:5 [ 388.410694][ T9349] index 11 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 388.430135][ T9349] CPU: 0 UID: 0 PID: 9349 Comm: kworker/u8:17 Not tainted 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) [ 388.430166][ T9349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 388.430180][ T9349] Workqueue: events_unbound cfg80211_wiphy_work [ 388.430227][ T9349] Call Trace: [ 388.430235][ T9349] [ 388.430245][ T9349] dump_stack_lvl+0x189/0x250 [ 388.430277][ T9349] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.430303][ T9349] ? __pfx__printk+0x10/0x10 [ 388.430346][ T9349] ubsan_epilogue+0xa/0x40 [ 388.430373][ T9349] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 388.430406][ T9349] ieee80211_request_ibss_scan+0x600/0x8b0 [ 388.430456][ T9349] ieee80211_ibss_work+0xd85/0x1060 [ 388.430485][ T9349] ? lockdep_hardirqs_on+0x9c/0x150 [ 388.430519][ T9349] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 388.430557][ T9349] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 388.430587][ T9349] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 388.430624][ T9349] ? skb_dequeue+0x10e/0x150 [ 388.430642][ T9349] ? ieee80211_iface_work+0xcdb/0xfe0 [ 388.430666][ T9349] ? ieee80211_iface_work+0xf39/0xfe0 [ 388.430688][ T9349] ? rcu_is_watching+0x15/0xb0 [ 388.430719][ T9349] cfg80211_wiphy_work+0x2df/0x460 [ 388.430744][ T9349] ? process_scheduled_works+0x9ef/0x17b0 [ 388.430770][ T9349] process_scheduled_works+0xade/0x17b0 [ 388.430829][ T9349] ? __pfx_process_scheduled_works+0x10/0x10 [ 388.430872][ T9349] worker_thread+0x8a0/0xda0 [ 388.430906][ T9349] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 388.430946][ T9349] ? __kthread_parkme+0x7b/0x200 [ 388.430984][ T9349] kthread+0x70e/0x8a0 [ 388.431018][ T9349] ? __pfx_worker_thread+0x10/0x10 [ 388.431041][ T9349] ? __pfx_kthread+0x10/0x10 [ 388.431072][ T9349] ? _raw_spin_unlock_irq+0x23/0x50 [ 388.431100][ T9349] ? lockdep_hardirqs_on+0x9c/0x150 [ 388.431128][ T9349] ? __pfx_kthread+0x10/0x10 [ 388.431157][ T9349] ret_from_fork+0x3fc/0x770 [ 388.431182][ T9349] ? __pfx_ret_from_fork+0x10/0x10 [ 388.431211][ T9349] ? __switch_to_asm+0x39/0x70 [ 388.431245][ T9349] ? __switch_to_asm+0x33/0x70 [ 388.431270][ T9349] ? __pfx_kthread+0x10/0x10 [ 388.431299][ T9349] ret_from_fork_asm+0x1a/0x30 [ 388.431345][ T9349] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 388.780972][ T9349] ---[ end trace ]--- [ 388.787060][T13088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.800540][ T9349] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 388.807808][ T9349] CPU: 0 UID: 0 PID: 9349 Comm: kworker/u8:17 Not tainted 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) [ 388.820099][ T9349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 388.830206][ T9349] Workqueue: events_unbound cfg80211_wiphy_work [ 388.836515][ T9349] Call Trace: [ 388.839830][ T9349] [ 388.842785][ T9349] dump_stack_lvl+0x99/0x250 [ 388.847405][ T9349] ? __asan_memcpy+0x40/0x70 [ 388.852012][ T9349] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.857248][ T9349] ? __pfx__printk+0x10/0x10 [ 388.861886][ T9349] panic+0x2db/0x790 [ 388.865812][ T9349] ? __pfx_panic+0x10/0x10 [ 388.870248][ T9349] ? _printk+0xcf/0x120 [ 388.874473][ T9349] ? __pfx__printk+0x10/0x10 [ 388.879099][ T9349] check_panic_on_warn+0x89/0xb0 [ 388.884074][ T9349] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 388.889819][ T9349] ieee80211_request_ibss_scan+0x600/0x8b0 [ 388.895675][ T9349] ieee80211_ibss_work+0xd85/0x1060 [ 388.900898][ T9349] ? lockdep_hardirqs_on+0x9c/0x150 [ 388.906119][ T9349] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 388.912033][ T9349] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 388.918412][ T9349] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 388.924078][ T9349] ? skb_dequeue+0x10e/0x150 [ 388.928700][ T9349] ? ieee80211_iface_work+0xcdb/0xfe0 [ 388.934088][ T9349] ? ieee80211_iface_work+0xf39/0xfe0 [ 388.939473][ T9349] ? rcu_is_watching+0x15/0xb0 [ 388.944269][ T9349] cfg80211_wiphy_work+0x2df/0x460 [ 388.949408][ T9349] ? process_scheduled_works+0x9ef/0x17b0 [ 388.955152][ T9349] process_scheduled_works+0xade/0x17b0 [ 388.960744][ T9349] ? __pfx_process_scheduled_works+0x10/0x10 [ 388.966755][ T9349] worker_thread+0x8a0/0xda0 [ 388.971372][ T9349] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 388.977732][ T9349] ? __kthread_parkme+0x7b/0x200 [ 388.982697][ T9349] kthread+0x70e/0x8a0 [ 388.986791][ T9349] ? __pfx_worker_thread+0x10/0x10 [ 388.991928][ T9349] ? __pfx_kthread+0x10/0x10 [ 388.996643][ T9349] ? _raw_spin_unlock_irq+0x23/0x50 [ 389.001874][ T9349] ? lockdep_hardirqs_on+0x9c/0x150 [ 389.007094][ T9349] ? __pfx_kthread+0x10/0x10 [ 389.011707][ T9349] ret_from_fork+0x3fc/0x770 [ 389.016313][ T9349] ? __pfx_ret_from_fork+0x10/0x10 [ 389.021455][ T9349] ? __switch_to_asm+0x39/0x70 [ 389.026251][ T9349] ? __switch_to_asm+0x33/0x70 [ 389.031046][ T9349] ? __pfx_kthread+0x10/0x10 [ 389.035656][ T9349] ret_from_fork_asm+0x1a/0x30 [ 389.040456][ T9349] [ 389.043824][ T9349] Kernel Offset: disabled [ 389.048218][ T9349] Rebooting in 86400 seconds..