last executing test programs: 1m31.091180647s ago: executing program 0 (id=7): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000a060500000000000000000002000009040007800900020073797a30000000000900020073797a3200000000ffffffffffffffff"], 0x38}}, 0x50) socket$inet6_sctp(0xa, 0x801, 0x84) socket$kcm(0x10, 0x400000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0xffffffffffffff87}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000004a000000900000000200000010080000", @ANYRES32, @ANYBLOB="e1ad00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000015010000000400"/26], 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYRESDEC], 0x1c}}, 0x48054) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)="ca", 0x1) poll(&(0x7f0000000040), 0x55, 0x2) unshare(0x64040280) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r6, 0x103, 0x2, &(0x7f0000000040), 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r8 = accept4(r0, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000240)=0xfffffffffffffeb4, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r8, 0x5411, &(0x7f00000002c0)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x1, '\x00', r7, 0xffffffffffffffff, 0x0, 0x4, 0x9, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x275a, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010019000000000000005c000000740000000b0000000b000000000000010025e2039607d0b1fd0000000000000a02000000050000000300009307000000070000000000008006000000070000000a000000080000000b000000050000000700000007000000000000110100000002000100005f0000000300615f5f00"], 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r11 = openat$cgroup_ro(r9, &(0x7f00000004c0)='cpuacct.usage_user\x00', 0x7a05, 0x1700) write$cgroup_type(r11, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x9) sendfile(r11, r10, 0x0, 0x10000) connect$bt_l2cap(r10, &(0x7f0000000300)={0x1f, 0x2, @none, 0x9, 0x1}, 0xe) 1m18.678004407s ago: executing program 0 (id=7): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000a060500000000000000000002000009040007800900020073797a30000000000900020073797a3200000000ffffffffffffffff"], 0x38}}, 0x50) socket$inet6_sctp(0xa, 0x801, 0x84) socket$kcm(0x10, 0x400000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0xffffffffffffff87}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000004a000000900000000200000010080000", @ANYRES32, @ANYBLOB="e1ad00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000015010000000400"/26], 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYRESDEC], 0x1c}}, 0x48054) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)="ca", 0x1) poll(&(0x7f0000000040), 0x55, 0x2) unshare(0x64040280) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r6, 0x103, 0x2, &(0x7f0000000040), 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r8 = accept4(r0, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000240)=0xfffffffffffffeb4, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r8, 0x5411, &(0x7f00000002c0)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x1, '\x00', r7, 0xffffffffffffffff, 0x0, 0x4, 0x9, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x275a, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010019000000000000005c000000740000000b0000000b000000000000010025e2039607d0b1fd0000000000000a02000000050000000300009307000000070000000000008006000000070000000a000000080000000b000000050000000700000007000000000000110100000002000100005f0000000300615f5f00"], 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r11 = openat$cgroup_ro(r9, &(0x7f00000004c0)='cpuacct.usage_user\x00', 0x7a05, 0x1700) write$cgroup_type(r11, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x9) sendfile(r11, r10, 0x0, 0x10000) connect$bt_l2cap(r10, &(0x7f0000000300)={0x1f, 0x2, @none, 0x9, 0x1}, 0xe) 1m6.268247474s ago: executing program 0 (id=7): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000a060500000000000000000002000009040007800900020073797a30000000000900020073797a3200000000ffffffffffffffff"], 0x38}}, 0x50) socket$inet6_sctp(0xa, 0x801, 0x84) socket$kcm(0x10, 0x400000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0xffffffffffffff87}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000004a000000900000000200000010080000", @ANYRES32, @ANYBLOB="e1ad00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000015010000000400"/26], 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYRESDEC], 0x1c}}, 0x48054) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)="ca", 0x1) poll(&(0x7f0000000040), 0x55, 0x2) unshare(0x64040280) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r6, 0x103, 0x2, &(0x7f0000000040), 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r8 = accept4(r0, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000240)=0xfffffffffffffeb4, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r8, 0x5411, &(0x7f00000002c0)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x1, '\x00', r7, 0xffffffffffffffff, 0x0, 0x4, 0x9, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x275a, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010019000000000000005c000000740000000b0000000b000000000000010025e2039607d0b1fd0000000000000a02000000050000000300009307000000070000000000008006000000070000000a000000080000000b000000050000000700000007000000000000110100000002000100005f0000000300615f5f00"], 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r11 = openat$cgroup_ro(r9, &(0x7f00000004c0)='cpuacct.usage_user\x00', 0x7a05, 0x1700) write$cgroup_type(r11, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x9) sendfile(r11, r10, 0x0, 0x10000) connect$bt_l2cap(r10, &(0x7f0000000300)={0x1f, 0x2, @none, 0x9, 0x1}, 0xe) 59.109384871s ago: executing program 1 (id=526): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a010200"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) socket$kcm(0x29, 0x2, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@encap={0x1c, 0x4, {0x7, 0x0, 0x0, @in=@loopback}}, @algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x154}}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@ipv4_newroute={0x3c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x4}}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000008100008008000300", @ANYRES32=r9, @ANYBLOB="0a000600080211000001000006006600c78800004a0033"], 0x7c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000f80)={@in={{0x2, 0x4e23, @remote}}, 0x0, 0x0, 0x15, 0x0, "b60f2360290bd1028f727c25a0aec3e4d2afbb0e2897c20828374c685b36c8d7ea95b6f7ddf3eb8cfca74c6449c89ab8d99c4d7ddea65fb634926a809a73362e3ec3de715deb6ac6de99c01844dc7929"}, 0xd8) 58.756319199s ago: executing program 1 (id=528): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_linger(r4, 0x1, 0x4b, 0x0, &(0x7f0000000240)) unshare(0x40600) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r5, 0x40305829, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81}, [@jmp={0x5, 0x1, 0xd, 0xa, 0x7, 0xfffffffffffffff8, 0xffffffffffffffff}]}, &(0x7f00000004c0)='GPL\x00', 0xfffffff7, 0xaa, &(0x7f0000000500)=""/170, 0x1f00, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x4, 0xc7}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0x1, 0xfffffffe, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x10, @void, @value}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000740)={r5, r1, 0xf6f4b90c0445afd, r6}, 0x10) tee(r3, r3, 0x66f, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x4e20, 0x0, @remote}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x5, @private1}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0xc, @empty, 0x800}}, 0x0, 0x0, 0x1f, 0x0, "3a044801a17a428756c5f98645bab131542c6e717e3119c966c1c82f80055b3156a48cb67cae75043ca06058689aea8caf0686bb3600f1b4dbca61f61aed4e2b08083ad700c504f3bcff8e91a6c27e63"}, 0xd8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r8, 0x0, 0x23, &(0x7f0000000180)="f97aaf37bec371cb9aba96e8d74404b6c80112cc606bdde173e80124faa1d6b1e2a2694313b16fa6550d47ef59ef915468190bf70c930fe6b88bf02ff1983d1159fec5c1fad54b1f027483b0f9dac372e6188fbc69be3e9dd208a492978e71865c3659f1d56fb9f41183dbbfbf998b2604ca423437e3a3101b7d82af3044fb4fd5b42e4884d28c117f6b1576821484b5ff39832bbd281d8d1f27723fba2fcee0026471847d65d124656c422d3c2c117d07bcdc19b0917163f444b146e6d6ae2af8", 0xc1) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000229bd7000fedbdf250100000040000380080074c77716791c2cba517d580500ac1e00011400020070696d3672656730000000000000005f124896ac4615b0d3396b4d21f83000080001000000000008000500e00180000000038e000100000008000300aed40900c46f4e277a"], 0x64}, 0x1, 0x0, 0x0, 0x1000}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRESHEX=r2, @ANYBLOB="0000000000000000040000000b0001006d"], 0x3c}}, 0x0) 51.915453873s ago: executing program 0 (id=7): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000a060500000000000000000002000009040007800900020073797a30000000000900020073797a3200000000ffffffffffffffff"], 0x38}}, 0x50) socket$inet6_sctp(0xa, 0x801, 0x84) socket$kcm(0x10, 0x400000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0xffffffffffffff87}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000004a000000900000000200000010080000", @ANYRES32, @ANYBLOB="e1ad00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000015010000000400"/26], 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYRESDEC], 0x1c}}, 0x48054) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)="ca", 0x1) poll(&(0x7f0000000040), 0x55, 0x2) unshare(0x64040280) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r6, 0x103, 0x2, &(0x7f0000000040), 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r8 = accept4(r0, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000240)=0xfffffffffffffeb4, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r8, 0x5411, &(0x7f00000002c0)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x1, '\x00', r7, 0xffffffffffffffff, 0x0, 0x4, 0x9, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x275a, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010019000000000000005c000000740000000b0000000b000000000000010025e2039607d0b1fd0000000000000a02000000050000000300009307000000070000000000008006000000070000000a000000080000000b000000050000000700000007000000000000110100000002000100005f0000000300615f5f00"], 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r11 = openat$cgroup_ro(r9, &(0x7f00000004c0)='cpuacct.usage_user\x00', 0x7a05, 0x1700) write$cgroup_type(r11, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x9) sendfile(r11, r10, 0x0, 0x10000) connect$bt_l2cap(r10, &(0x7f0000000300)={0x1f, 0x2, @none, 0x9, 0x1}, 0xe) 46.170124507s ago: executing program 1 (id=528): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_linger(r4, 0x1, 0x4b, 0x0, &(0x7f0000000240)) unshare(0x40600) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r5, 0x40305829, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81}, [@jmp={0x5, 0x1, 0xd, 0xa, 0x7, 0xfffffffffffffff8, 0xffffffffffffffff}]}, &(0x7f00000004c0)='GPL\x00', 0xfffffff7, 0xaa, &(0x7f0000000500)=""/170, 0x1f00, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x4, 0xc7}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0x1, 0xfffffffe, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x10, @void, @value}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000740)={r5, r1, 0xf6f4b90c0445afd, r6}, 0x10) tee(r3, r3, 0x66f, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x4e20, 0x0, @remote}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x5, @private1}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0xc, @empty, 0x800}}, 0x0, 0x0, 0x1f, 0x0, "3a044801a17a428756c5f98645bab131542c6e717e3119c966c1c82f80055b3156a48cb67cae75043ca06058689aea8caf0686bb3600f1b4dbca61f61aed4e2b08083ad700c504f3bcff8e91a6c27e63"}, 0xd8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r8, 0x0, 0x23, &(0x7f0000000180)="f97aaf37bec371cb9aba96e8d74404b6c80112cc606bdde173e80124faa1d6b1e2a2694313b16fa6550d47ef59ef915468190bf70c930fe6b88bf02ff1983d1159fec5c1fad54b1f027483b0f9dac372e6188fbc69be3e9dd208a492978e71865c3659f1d56fb9f41183dbbfbf998b2604ca423437e3a3101b7d82af3044fb4fd5b42e4884d28c117f6b1576821484b5ff39832bbd281d8d1f27723fba2fcee0026471847d65d124656c422d3c2c117d07bcdc19b0917163f444b146e6d6ae2af8", 0xc1) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000229bd7000fedbdf250100000040000380080074c77716791c2cba517d580500ac1e00011400020070696d3672656730000000000000005f124896ac4615b0d3396b4d21f83000080001000000000008000500e00180000000038e000100000008000300aed40900c46f4e277a"], 0x64}, 0x1, 0x0, 0x0, 0x1000}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRESHEX=r2, @ANYBLOB="0000000000000000040000000b0001006d"], 0x3c}}, 0x0) 33.791123146s ago: executing program 0 (id=7): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000a060500000000000000000002000009040007800900020073797a30000000000900020073797a3200000000ffffffffffffffff"], 0x38}}, 0x50) socket$inet6_sctp(0xa, 0x801, 0x84) socket$kcm(0x10, 0x400000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0xffffffffffffff87}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000004a000000900000000200000010080000", @ANYRES32, @ANYBLOB="e1ad00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000015010000000400"/26], 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYRESDEC], 0x1c}}, 0x48054) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)="ca", 0x1) poll(&(0x7f0000000040), 0x55, 0x2) unshare(0x64040280) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r6, 0x103, 0x2, &(0x7f0000000040), 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r8 = accept4(r0, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000240)=0xfffffffffffffeb4, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r8, 0x5411, &(0x7f00000002c0)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x1, '\x00', r7, 0xffffffffffffffff, 0x0, 0x4, 0x9, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x275a, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010019000000000000005c000000740000000b0000000b000000000000010025e2039607d0b1fd0000000000000a02000000050000000300009307000000070000000000008006000000070000000a000000080000000b000000050000000700000007000000000000110100000002000100005f0000000300615f5f00"], 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r11 = openat$cgroup_ro(r9, &(0x7f00000004c0)='cpuacct.usage_user\x00', 0x7a05, 0x1700) write$cgroup_type(r11, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x9) sendfile(r11, r10, 0x0, 0x10000) connect$bt_l2cap(r10, &(0x7f0000000300)={0x1f, 0x2, @none, 0x9, 0x1}, 0xe) 32.802873929s ago: executing program 1 (id=528): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_linger(r4, 0x1, 0x4b, 0x0, &(0x7f0000000240)) unshare(0x40600) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r5, 0x40305829, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81}, [@jmp={0x5, 0x1, 0xd, 0xa, 0x7, 0xfffffffffffffff8, 0xffffffffffffffff}]}, &(0x7f00000004c0)='GPL\x00', 0xfffffff7, 0xaa, &(0x7f0000000500)=""/170, 0x1f00, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x4, 0xc7}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0x1, 0xfffffffe, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x10, @void, @value}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000740)={r5, r1, 0xf6f4b90c0445afd, r6}, 0x10) tee(r3, r3, 0x66f, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x4e20, 0x0, @remote}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x5, @private1}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0xc, @empty, 0x800}}, 0x0, 0x0, 0x1f, 0x0, "3a044801a17a428756c5f98645bab131542c6e717e3119c966c1c82f80055b3156a48cb67cae75043ca06058689aea8caf0686bb3600f1b4dbca61f61aed4e2b08083ad700c504f3bcff8e91a6c27e63"}, 0xd8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r8, 0x0, 0x23, &(0x7f0000000180)="f97aaf37bec371cb9aba96e8d74404b6c80112cc606bdde173e80124faa1d6b1e2a2694313b16fa6550d47ef59ef915468190bf70c930fe6b88bf02ff1983d1159fec5c1fad54b1f027483b0f9dac372e6188fbc69be3e9dd208a492978e71865c3659f1d56fb9f41183dbbfbf998b2604ca423437e3a3101b7d82af3044fb4fd5b42e4884d28c117f6b1576821484b5ff39832bbd281d8d1f27723fba2fcee0026471847d65d124656c422d3c2c117d07bcdc19b0917163f444b146e6d6ae2af8", 0xc1) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000229bd7000fedbdf250100000040000380080074c77716791c2cba517d580500ac1e00011400020070696d3672656730000000000000005f124896ac4615b0d3396b4d21f83000080001000000000008000500e00180000000038e000100000008000300aed40900c46f4e277a"], 0x64}, 0x1, 0x0, 0x0, 0x1000}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRESHEX=r2, @ANYBLOB="0000000000000000040000000b0001006d"], 0x3c}}, 0x0) 18.464960119s ago: executing program 1 (id=528): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_linger(r4, 0x1, 0x4b, 0x0, &(0x7f0000000240)) unshare(0x40600) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r5, 0x40305829, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81}, [@jmp={0x5, 0x1, 0xd, 0xa, 0x7, 0xfffffffffffffff8, 0xffffffffffffffff}]}, &(0x7f00000004c0)='GPL\x00', 0xfffffff7, 0xaa, &(0x7f0000000500)=""/170, 0x1f00, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x4, 0xc7}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0x1, 0xfffffffe, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x10, @void, @value}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000740)={r5, r1, 0xf6f4b90c0445afd, r6}, 0x10) tee(r3, r3, 0x66f, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x4e20, 0x0, @remote}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x5, @private1}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0xc, @empty, 0x800}}, 0x0, 0x0, 0x1f, 0x0, "3a044801a17a428756c5f98645bab131542c6e717e3119c966c1c82f80055b3156a48cb67cae75043ca06058689aea8caf0686bb3600f1b4dbca61f61aed4e2b08083ad700c504f3bcff8e91a6c27e63"}, 0xd8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r8, 0x0, 0x23, &(0x7f0000000180)="f97aaf37bec371cb9aba96e8d74404b6c80112cc606bdde173e80124faa1d6b1e2a2694313b16fa6550d47ef59ef915468190bf70c930fe6b88bf02ff1983d1159fec5c1fad54b1f027483b0f9dac372e6188fbc69be3e9dd208a492978e71865c3659f1d56fb9f41183dbbfbf998b2604ca423437e3a3101b7d82af3044fb4fd5b42e4884d28c117f6b1576821484b5ff39832bbd281d8d1f27723fba2fcee0026471847d65d124656c422d3c2c117d07bcdc19b0917163f444b146e6d6ae2af8", 0xc1) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000229bd7000fedbdf250100000040000380080074c77716791c2cba517d580500ac1e00011400020070696d3672656730000000000000005f124896ac4615b0d3396b4d21f83000080001000000000008000500e00180000000038e000100000008000300aed40900c46f4e277a"], 0x64}, 0x1, 0x0, 0x0, 0x1000}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRESHEX=r2, @ANYBLOB="0000000000000000040000000b0001006d"], 0x3c}}, 0x0) 17.622842845s ago: executing program 0 (id=7): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000a060500000000000000000002000009040007800900020073797a30000000000900020073797a3200000000ffffffffffffffff"], 0x38}}, 0x50) socket$inet6_sctp(0xa, 0x801, 0x84) socket$kcm(0x10, 0x400000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0xffffffffffffff87}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000004a000000900000000200000010080000", @ANYRES32, @ANYBLOB="e1ad00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000015010000000400"/26], 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYRESDEC], 0x1c}}, 0x48054) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)="ca", 0x1) poll(&(0x7f0000000040), 0x55, 0x2) unshare(0x64040280) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r6, 0x103, 0x2, &(0x7f0000000040), 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r8 = accept4(r0, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000240)=0xfffffffffffffeb4, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r8, 0x5411, &(0x7f00000002c0)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x1, '\x00', r7, 0xffffffffffffffff, 0x0, 0x4, 0x9, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x275a, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010019000000000000005c000000740000000b0000000b000000000000010025e2039607d0b1fd0000000000000a02000000050000000300009307000000070000000000008006000000070000000a000000080000000b000000050000000700000007000000000000110100000002000100005f0000000300615f5f00"], 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r11 = openat$cgroup_ro(r9, &(0x7f00000004c0)='cpuacct.usage_user\x00', 0x7a05, 0x1700) write$cgroup_type(r11, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x9) sendfile(r11, r10, 0x0, 0x10000) connect$bt_l2cap(r10, &(0x7f0000000300)={0x1f, 0x2, @none, 0x9, 0x1}, 0xe) 2.853725308s ago: executing program 2 (id=846): getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x6c, 0x2, 0x6, 0x600, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x200}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(ctr-camellia-aesni,rmd256)\x00'}, 0x58) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000340)=0x7, 0x4) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x62) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) close(0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0/../file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 2.584853335s ago: executing program 2 (id=848): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x8) r1 = getpid() r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x8001000000000000, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd0, 0x11, 0x148, 0xd0, 0x0, 0x1a8, 0x2a8, 0x2a8, 0xd0, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}, 0xffffff00, 0xffffffff, 'geneve0\x00', 'sit0\x00', {}, {0xff}, 0x73, 0x2, 0x14}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x9, 0x3, 0x3]}, {0xffffffffffffffff, [0x11]}}}}, {{@ip={@multicast2, @multicast2, 0xffffff00, 0xffffffff, 'lo\x00', 'ip6gretap0\x00', {0xff}, {0x7f}, 0x88, 0x3, 0x3}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00', {0xb201}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c4) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000100)=r1) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0xfffffffffffffd40, 0x0}, 0x20000004) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x0, 0x3}, 0x10) 2.583637291s ago: executing program 3 (id=849): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x4, &(0x7f0000000000)="24d1") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40001}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0xf00, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2a83d03b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa0, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3}, {0x8, 0x0, 0x7}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x34, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x5}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0x200}, {0x8, 0x0, 0x101}, {0x8, 0x0, 0xf}, {0x8, 0x0, 0x1}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xc, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x213e191f}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x20, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xe, 0x1, @random="886a136e99781b4a0623"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x200}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8004080}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r4, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20008811) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, r4, 0x7d7f143598230fb, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x36}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x10}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x32}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x32}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2b}]}, 0x6c}}, 0x20008080) socketpair(0x9, 0x4, 0x7f, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, r7, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x5) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f00000007c0)='cpuset.memory_pressure\x00', 0x0, 0x0) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r9}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000840)={0x6, 0x0, 0x1, 0xd9f, 0x0}, &(0x7f0000000880)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r10, 0x84, 0x72, &(0x7f00000008c0)={r11, 0x5, 0x10}, 0xc) pipe(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000000980), r6) sendmsg$TIPC_CMD_SET_NETID(r12, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, r14, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0xf}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x44800) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x9c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "87f71f7576c70fb078fc77e2b862e081"}, @NL80211_ATTR_SSID={0x1f, 0x34, @random="0a57d09dd288ed5cda38c3231ddae1b101ab9ecb45f8823110b47c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "144d250c0e2c556117a5563455f6489b"}, @NL80211_ATTR_PMK={0x14, 0xfe, "d5d496c3ce1bbeea41b9fa122d19e500"}, @NL80211_ATTR_PMK={0x14, 0xfe, "726aab5fae6488cd8b2bf1648982285a"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40010}, 0x4040808) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$vsock_stream(r5, &(0x7f0000000c00)={0x28, 0x0, 0x0, @host}, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x24, r4, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r13}]}, 0x24}, 0x1, 0x0, 0x0, 0x404c005}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)=@getnexthop={0x38, 0x6a, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_GROUPS={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f0000000e40)={r11, 0x5}, &(0x7f0000000e80)=0x8) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x38, r14, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x1c, 0x18, {0x6, @bearer=@l2={'eth', 0x3a, 'veth1_to_batadv\x00'}}}}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20048080}, 0x8010) socket$inet_udp(0x2, 0x2, 0x0) 2.332165691s ago: executing program 2 (id=850): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_sctp(0x2, 0x0, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb) setsockopt$inet6_tcp_int(r1, 0x6, 0xdb12a9e8eb45100c, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0xb3fa, 0x4) r4 = accept4(r0, &(0x7f0000000040)=@l2, &(0x7f00000000c0)=0x80, 0x800) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0xdfc, 0x0, 0x0, 0x7}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r5, 0x81}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={r6, 0x6c, &(0x7f0000000200)=[@in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e21, 0x8, @loopback, 0x400}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f00000002c0)=0x10) 2.17485688s ago: executing program 4 (id=851): socket$rds(0x15, 0x5, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x118, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd7127cfc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029c1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4ed842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c9097"]}]}, 0x118}], 0x1}, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket(0x2, 0xa, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x3d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r1) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200090c5}, 0xc0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100), 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x1, {{@in=@multicast1, @in6=@remote, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x40000000000000}, 0x400, 0x0, 0x2}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f0000000000)="17000000020001000003d68c5ee1768812003208020300ecff3f0002000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ab65761407a681f009cee4a5acb3da400001fb700674f39b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r7, 0x400442c8, &(0x7f0000000000)={r2, 0x1, 0x5}) 2.168486222s ago: executing program 3 (id=852): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000340)=@nat={'nat\x00', 0x670, 0x5, 0x3f0, 0x0, 0x0, 0xfeffffff, 0x0, 0x280, 0x358, 0x358, 0xffffffff, 0x358, 0x358, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @dev, @dev, @gre_key, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e20}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@mcast1, @ipv6=@mcast2, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000dc0)={'filter\x00', 0x7, 0x4, 0x3e0, 0x0, 0x1f8, 0xe8, 0x2f8, 0x2f8, 0xe8, 0x4, 0x0, {[{{@arp={@multicast1, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 'pim6reg\x00', 'nicvf0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @broadcast}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d1b7201e6851dcc361a7eb546f513b69c23cd84d078ce2b4e1b29dcf3fb6"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r4) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000240)={0x24, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x29}, 0x1, 0x0, 0x0, 0xc800}, 0x20020000) sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="19042cbd70001f0d1dde0954de05ffdbdf25020000000800010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x4040) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x40000) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000500)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="93bdd25886b6d9c78bacd74bb6dc49280028bd7000fe4775dbdf25120000000c0016000100010001000000a1a86d2b3a77b6d781bdced1860eafeb5302f41269ca3f33135e95578c82f9fec052a13a98401dbcbfa76fd05112d7881d139580b32aa229cb95ccb759394eb43dedfdb9eff1244e8ce6a9e7b8239d012b22c385d32aeaa5286a6b"], 0x20}}, 0x4800) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x0) recvmmsg(r7, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0, 0xfffffffffffffe46}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f00000002c0)=""/35, 0x23}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000001940)=""/4102, 0x1006}, {&(0x7f0000000100)=""/74, 0x4a}, {&(0x7f00000004c0)=""/6, 0x6}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x8}, 0x5}], 0x4, 0x20, 0x0) 1.765434679s ago: executing program 3 (id=853): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x14, r0, 0x25, 0x0, 0xfffffffe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20004001}, 0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000080)={'vlan1\x00', 0x5}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r3) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg1\x00'}) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000013000000000000000000000000000000461a1f1efd688f408143f001995867d21b692ecb31cbc94681013ecfb33b5bdd2484570748c1fbb29592fcbfb8f596c964ff952361ec368cb127ce"], 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002a00dbdf"], 0x1c}, 0x1, 0x3000000}, 0x8080) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r6 = accept4$alg(r5, 0x0, 0x0, 0x80000) read$alg(r6, &(0x7f0000001540)=""/4131, 0x1023) sendmsg$alg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000007c0)="8a5f", 0x2}], 0x1, 0x0, 0x0, 0x400d0}, 0xc4) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000003c0)=@generic={0x0}, 0x18) 1.756695571s ago: executing program 4 (id=854): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000c04}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x3}}], {0x14}}, 0x3c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000180)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x2c}}, 0x0) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5c, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x5], 0x0, [0x0, 0x2], [0x0, 0x4]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x20, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x62}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x6008015}, 0x4008801) 1.486937159s ago: executing program 2 (id=855): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x18000000000002a0, 0x7, 0x0, &(0x7f00000000c0)="76389e147583dd", 0x0, 0x3404, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a0000000000000008000500", @ANYRES32=r4, @ANYBLOB="3249759bf9202c6e71308f3fc7c6cecbffbfaea0b61253fcdc7659820dce625e0d753e2eb9a893519d921b7697396ae8c6192782e448095a62494d5c3729588977c7a5c3d22b462fe08af26f63f4834853ea1e23a2e41e9219d02faec7c4d177085c5526893e0dfc28a1fa3e39d17d936d73ae1382293cee47c18fae67cdba45fde08edd83dabaa6ee0356735a32000000f231b598dfcb525e1e1415ec60f3d5914ce102a19237ec880d6cceeaf0c64d274e3d1eaccfa68541b5c9d29f8e48dd02dc6c8ade8f5cafc46feea50fa8df3337e99a7a59adc6378b1a91ca8661cbdaed7660f123"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a0000000000000008000500", @ANYRES32=r4, @ANYBLOB="3249759bf9202c6e71308f3fc7c6cecbffbfaea0b61253fcdc7659820dce625e0d753e2eb9a893519d921b7697396ae8c6192782e448095a62494d5c3729588977c7a5c3d22b462fe08af26f63f4834853ea1e23a2e41e9219d02faec7c4d177085c5526893e0dfc28a1fa3e39d17d936d73ae1382293cee47c18fae67cdba45fde08edd83dabaa6ee0356735a32000000f231b598dfcb525e1e1415ec60f3d5914ce102a19237ec880d6cceeaf0c64d274e3d1eaccfa68541b5c9d29f8e48dd02dc6c8ade8f5cafc46feea50fa8df3337e99a7a59adc6378b1a91ca8661cbdaed7660f123"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000021c0), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000021c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000002200)={0x3c, r6, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3f}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_getaddr={0x20, 0x16, 0x800, 0x70bd27, 0x25dfdbfb, {0xa, 0x48, 0x0, 0xc8, r4}, [@IFA_FLAGS={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4084}, 0x4000) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001800090400000000000000000a090000000000000000000008001e0001"], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x192}}, 0x20}}, 0x0) 1.294729348s ago: executing program 4 (id=856): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c0000001000010000000000fcdbdf2500000000", @ANYRES32=r2, @ANYBLOB="000000004a11010034001680300001802c000c80140001"], 0x5c}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) socket$inet(0x2, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c0000001000010000000000fcdbdf2500000000", @ANYRES32=r2, @ANYBLOB="000000004a11010034001680300001802c000c80140001"], 0x5c}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) (async) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async) setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) (async) 971.55825ms ago: executing program 3 (id=857): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x40, 0x9, @empty, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) (async) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000540)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000b00000040000580070001"], 0x54}}, 0x0) (async) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r4, 0x0, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x20002, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) 834.819097ms ago: executing program 2 (id=858): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x3c}}, 0x0) shutdown(r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r1, 0x5, 0x0, 0x80, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000f5ff0000711241000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB="f00000001a000100000000000000000000000000000000000000ffffac1414bbac1e200100000000000000000000000000000000000000000a0000b000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff000000000000000000000000000000000000000000000000000200"/168], 0xf0}}, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3a}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x8000) 668.167718ms ago: executing program 4 (id=859): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000008ac0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$tipc(0x1e, 0x5, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r0}, 0x8) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000300)={'ip6tnl0\x00', 0x20}) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r8, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="400100001000010000000000fddbdf25ac1414aa0000000000000000000000000000000000000000000000000000000040000000000300030000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff4000000000000000000000000000000033000000ff02000000000000800000000000000100000000000000000000000000000000000000000000000001040000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000008002300190d00004800010073686132353600"/248], 0x140}}, 0x20000000) bind$tipc(r6, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r8, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0xffffffff}, 0x4}}, 0x10) bind$tipc(r6, 0x0, 0x0) getsockopt$packet_int(r5, 0x107, 0xa, 0x0, &(0x7f0000000140)) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000000000010000490040000180060001000a00000008000500000000000c00070000000000000000000800090000000000080006006f766600080008000000000008000b00736974"], 0x54}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000240)={'geneve0\x00', &(0x7f0000000040)=@ethtool_cmd={0x37, 0x8000, 0x4, 0x40, 0x2, 0x2, 0x1, 0x7, 0xc, 0x9, 0x2, 0x8001, 0x7fff, 0x43, 0x3, 0x6, [0x7, 0x6]}}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r4, @ANYBLOB="00410000000000001c002b8008000100", @ANYRES32, @ANYBLOB="0800030019000000080008"], 0x3c}}, 0x0) 600.404284ms ago: executing program 3 (id=860): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x0, 0x17c1, 0x8}}}}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async) close(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5], 0x22c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x6b78}, @WGDEVICE_A_PEERS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x10000000) (async) socket(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, 0x0, &(0x7f0000000240)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@delchain={0x748, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x9}, {0x5, 0x2}, {0xfff2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x718, 0x2, [@TCA_CGROUP_POLICE={0x4c, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xa6, 0x3, 0x1e6ad986, 0x5, 0x401, {0x1, 0x0, 0x89bc, 0xe, 0x7, 0x1000}, {0x9, 0x0, 0x0, 0x100, 0xf487, 0x4}, 0x7f, 0x80000001, 0xf}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}]}, @TCA_CGROUP_EMATCHES={0x620, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x18, 0x2, 0x0, 0x0, {{0x6, 0x0, 0xb}, "300901da5824a91c9519"}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0xf8, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x6, 0x1, 0x2}, {0xb6, 0x0, 0xbe01, 0x2, 0xf, 0x0, 0x1}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x332, 0x2, 0x9}, {0x2, 0x2, 0x2, "1c9c"}}}, @TCF_EM_IPT={0xb4, 0x3, 0x0, 0x0, {{0x6, 0x9, 0x1ff}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0xa4a0f563cd437429}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xd}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x7c, 0x5, "23f4a5c2ef1737e5b30487e8f6255bad54be8388ed14bc33210a7b670c9142265626ce3225e113f0cd50c859a347a3ee400c11cf7fc598ed0b1c5839695fa5b04e756ac918ac1f299bb52c5b26602216416d24606f4b16278b76adf1562d328d6a88e5eb28c22f8c19e0b97a801a8b8a6d391df6bf977a7f"}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xf7b, 0x7, 0x2494}, {{0x1}, {0x1, 0x0, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x158, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xf0, 0x1, 0x0, 0x0, {{0x6, 0x0, 0x140c}, "3e539cb892b1bbc72b788cea6b0dd98fd8d1e0ebd4227556f612086b8ac1e2256052498a401dee6a145e98795e092b91f7b3f9b382e7240a4eaafc87e803a0874d0983effbf85dcb80a5f5cc2815606a275200818ef34722d02dc73a1a292ced4dbcaf92dc2fcff7a6d1044f26f3688356addd82d59d53be19d4b4537d9940fc15dba2110c1337194b43b1188c2cf7df6253b0b7553e7f350d251ee35ad315e3f978e7cd2e89b4a67d557da0640d3bac6f41edbb93f7145e20346a6960efed10a51933057a4da0c6133c572b1d42e35e6266d89ec02e33e53cacb775aa5cfb0b4fcdd0"}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7, 0x7, 0x9}, {{0x1, 0x0, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0x24, 0x1, 0x0, 0x0, {{0x5, 0x0, 0x2d}, "3dbc68a7dcbb49439381af33c94d36bb7dc2501ae0ca01"}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x3}, {0x8, 0x9, 0x2, "140edff9062a27b5d1"}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xfff9, 0x8, 0x3}, {0x0, 0x5, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x21c, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7, 0x8, 0x9}, {0xffffffffffffffff, 0x4, 0x1}}}, @TCF_EM_META={0x7c, 0x2, 0x0, 0x0, {{0xd1e, 0x4, 0x7}, [@TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="18", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="ef2c1753c8"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xc, 0x2, 0x2}, {0x70, 0x2, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xffff, 0x2, 0x1}, {0x8, 0x8, 0x2}}}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_VAR="100d8cf887273c6fc8", @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x3, 0x1}, {0xbf, 0x5}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x3, 0x1}, {0xfff5, 0x8, 0x2}}}, @TCA_EM_META_RVALUE={0x16, 0x3, [@TCF_META_TYPE_VAR="217c7c0ed8341b64790a", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR]}]}}, @TCF_EM_CONTAINER={0xec, 0x3, 0x0, 0x0, {{0x86, 0x0, 0x5}, "5db08f3447a28a2f5a4fc2b7810ac4d958de08e54178ecdd0fd1a567cf0c9f04225bf166170f79f20cbe314bd0fe6ad041085f1dcd16e38800e4a11d598052883d2e2554ab578c75169b45c9cdc3d53d6f0be1fe1e3300e9fe425ec631085c1613adec6ad7066e78cb25f755bff08ed9edb6fbd17e9729441c1dc47df285379850362d4eb7e41c7d1efa42e6c2c8aeb91067cb5b16a0fdd6a9961abfbcd5ff5c51aceeab384800ed7f7d712e6b30416377f0c6c44a6b3dfdefb01f42704e8c7a83b6abd26279d2bb3b7298b490879b00736d15db1477b33d4c42e63fde"}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xdd7, 0x7, 0x8}, {{0x1, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x400, 0x2, 0x2e}, {0xaac4, 0x4, 0x0, "d5508462"}}}, @TCF_EM_IPT={0x44, 0x3, 0x0, 0x0, {{0x4f2e, 0x9, 0x1}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xd9}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_NFPROTO={0x5}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x34, 0x7, 0x80}, {{0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}}}, @TCF_EM_IPT={0xc, 0x3, 0x0, 0x0, {{0xc, 0x9, 0x401}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x1, 0x2, 0x59c0}, {0x9, 0x4, 0x1, "2130e432"}}}]}, @TCA_EMATCH_TREE_LIST={0x130, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x6, 0x8, 0x6}, {0xffffffffffffffff, 0x1, 0x2}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x2, 0x1, 0x3}, {0xfffffeff, 0x4, 0x97e2, 0x1, 0x2}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x5b26}, {0x0, 0x7fff, 0x5, 0x0, 0x1, 0x1, 0x2}}}, @TCF_EM_CONTAINER={0xd0, 0x3, 0x0, 0x0, {{0x3, 0x0, 0x9}, "ec785e1a4c4ae86a318803df30fdefe20bfa7abf4e8645ea235be2d2578aa2e1c3e358393a526d64cdc58ab943352e951a928f46c046a373a87a563ca11ad346bdb93153473dc3056a0162110f2caafd3b9ee2c9c26ec658e043c611ae6c212d5357a7de124637ab454673665a971f992c95e1082419111ec3ba2b13a9483bbe4fc32c16066e43b58cd00d9403cf67aeff66d192ff886140361f77bf35380ca18586e2da86afa72368405a05b38e0a00ee0c575094ba7151ebd6be67ccb5af8fd290de15"}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x1ff, 0x3, 0x3}, {0x7, 0x8, 0x6, 0x8000}}}]}, @TCA_EMATCH_TREE_LIST={0x54, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x50, 0x1, 0x0, 0x0, {{0xfc01, 0x0, 0x5}, "9d82314e507aca7ff46f4af5bd851719a2d9c26141156ea3db4685572bd89457742bcdf027baffaa4df8781c70053c0e73f8c9f74686364deca71039a116b9633ef7"}}]}]}, @TCA_CGROUP_EMATCHES={0xa8, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7ff}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x6c, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x1000, 0x8, 0x7f}, {0x2, 0x2}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x101, 0x1, 0x9}, {0x5, 0x5, 0x0, 0x4, 0xe, 0x2}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7f, 0x8, 0x8}, {0x0, 0x6, 0x2}}}, @TCF_EM_IPT={0x30, 0x1, 0x0, 0x0, {{0x0, 0x9, 0xd}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xf}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}, @TCA_EM_IPT_HOOK={0x8}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x548}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x101}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xcc9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6f8}}]}]}}]}, 0x748}}, 0x0) 294.719353ms ago: executing program 2 (id=861): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="08000000000000000a00001000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000aa00"/134], 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'vlan1\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x3}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000100a}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="080027bd7000fbdbdf250b00000008000300", @ANYRES32=r5, @ANYBLOB="0800090001ac0f002c005080050009000200000005000200030000000400060008000700010000000400060005000900010000000a00060008021100000100006c0050800c00040040478f9133a4a34f040006000500090002000000040005002c000880040002000400010004000200040002000400020004000100040001000400020004000200040002000400050008000700000000000900010062fd3c9c3a000000050002000000000004000b000400280008003700010000000a0006000802110000000000"], 0xe4}, 0x1, 0x0, 0x0, 0x10000}, 0x840) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f00000002c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x4}, 0x8) r8 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x0, 0x7}, 0x20) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000048000000180a0101000b000000000000010000000900020073797a30f9ff00000900010073797a30"], 0xe8}}, 0x0) recvmmsg(r10, &(0x7f0000007e40)=[{{&(0x7f0000000640)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000006c0)=""/47, 0x2f}, {&(0x7f0000000700)=""/199, 0xc7}, {&(0x7f0000000800)=""/131, 0x83}, {&(0x7f0000000940)=""/154, 0x9a}, {&(0x7f0000000a00)=""/42, 0x2a}, {&(0x7f0000000a40)=""/100, 0x64}, {&(0x7f0000000ac0)=""/85, 0x55}], 0x7, &(0x7f0000000bc0)=""/44, 0x2c}}, {{&(0x7f0000000c00)=@caif=@rfm, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000c80)=""/75, 0x4b}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000000d00)=""/154, 0x9a}, {&(0x7f0000003240)=""/4096, 0x1000}], 0x5, &(0x7f0000000e40)=""/241, 0xf1}, 0x3}, {{&(0x7f0000000f40)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000001180)=[{&(0x7f0000004240)=""/4096, 0x1000}, {&(0x7f0000000fc0)=""/5, 0x5}, {&(0x7f0000001000)=""/63, 0x3f}, {&(0x7f0000001040)=""/237, 0xed}, {&(0x7f0000005240)=""/4096, 0x1000}, {&(0x7f0000001140)=""/1, 0x1}], 0x6}, 0x7}, {{&(0x7f0000006240)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f00000068c0)=[{&(0x7f00000062c0)=""/169, 0xa9}, {&(0x7f0000006380)=""/155, 0x9b}, {&(0x7f0000006440)=""/213, 0xd5}, {&(0x7f0000006540)=""/112, 0x70}, {&(0x7f00000065c0)=""/225, 0xe1}, {&(0x7f00000066c0)=""/162, 0xa2}, {&(0x7f0000006780)=""/114, 0x72}, {&(0x7f0000006800)=""/138, 0x8a}], 0x8, &(0x7f0000006940)=""/173, 0xad}, 0x5}, {{&(0x7f0000006a00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000007b80)=[{&(0x7f0000006a80)=""/194, 0xc2}, {&(0x7f0000006b80)=""/4096, 0x1000}], 0x2, &(0x7f0000007bc0)=""/149, 0x95}, 0x2}, {{&(0x7f0000007c80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000007e00)=[{&(0x7f0000007d00)=""/250, 0xfa}], 0x1}, 0x7}], 0x6, 0x2020, &(0x7f0000007fc0)) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000002c00010000000000000000000400008045001100eedcbb7d1d11c6d3139ebb7290e4d8a1c39156c2a7ef6ad7ecb70f506210f4f53fcc5cf5ca0895a0abb6ba14702d4f56729b90a05e1954183363e3e4b2103c9e3e000000"], 0x5c}], 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000005c0)=ANY=[@ANYRES8=r3, @ANYRES8=r12, @ANYRESDEC=r2, @ANYRESOCT=r0, @ANYRES8=r7, @ANYRES8=r9, @ANYRES32=r9, @ANYRES32=r3, @ANYRESHEX=r12], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000084) 251.911767ms ago: executing program 4 (id=862): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x64}}, 0x4800) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000010000000400000000000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0200"/28], 0x95) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 82.064876ms ago: executing program 4 (id=863): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f00000008c0)=@ethtool_per_queue_op={0x4b, 0xf, [0x800, 0x1, 0x0, 0x3, 0xd, 0x4, 0x4, 0x8, 0xffffffff, 0x6, 0xc, 0x2e, 0x4790, 0x4d2, 0x4, 0xc, 0x4d, 0xe4, 0x7, 0x0, 0x9, 0xffff, 0x8, 0x93, 0x6, 0x7, 0x4, 0x5, 0xe, 0x8001, 0x5, 0x4, 0x1, 0x0, 0xffff065b, 0x7000, 0x8001, 0x8f, 0x8, 0x0, 0xabfb, 0x2, 0x4, 0xfffffffa, 0x5, 0x7, 0x7, 0x9, 0xfcef, 0x0, 0x0, 0xf27, 0x6, 0x73, 0x3, 0x30, 0x0, 0xfffffff7, 0x6, 0xd, 0x5, 0x5, 0x7, 0x6, 0x7, 0x5, 0x7, 0x7, 0x28, 0x3, 0x2, 0x8, 0x4, 0x3, 0x100, 0x8, 0x4, 0x8001, 0x7fffffff, 0x7, 0xfd, 0x9, 0x1, 0x3, 0x0, 0xfffffff8, 0x100, 0x3d, 0x865, 0xffffffff, 0x1, 0xfffffffe, 0x2, 0x6, 0x3, 0x534b, 0x4, 0xf, 0x10001, 0xc, 0x1, 0x80000000, 0x6, 0x2, 0xf, 0xbe0, 0x2, 0xe0, 0x351, 0x800, 0x5, 0x2, 0x9, 0x9b, 0xfff, 0x100, 0xe, 0xa0a, 0x2, 0x4, 0x7, 0x6, 0x8, 0xa, 0x10, 0x7, 0xfffffffd]}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x1c, 0x800) (async) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x1c, 0x800) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000200), 0x4) (async) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x0, 0x7, 0x401, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x48d5}, 0x8010) socket$kcm(0x29, 0x7, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x2c, 0x0, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x277e0405}]}, 0x2c}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xf8, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0xd0, 0x4, 0x0, 0x1, [{0xcc, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xbc, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_INFO={0xa0, 0x3, "8549cda9799b74798c9d391c84f745cc8dc12894312057f541ce75a73f28dc874245bcea53f57c8bf1d0289d7fe0977244e27b936f8d6ebb842f438933822f0e86d8ac2efac2122799f08ff218541b576a455dbec88b6bf68b1f0b2dd4c0110fbcd49c76983a77ddd641707483a22e7a8695a1dd4cad9ecdf66ffd20eaee7b2918584fbe06478e5f04f34e354ec0c89aa64458ddfc2e57eef57b9dd2"}, @NFTA_MATCH_NAME={0xe, 0x1, 'conntrack\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x30, 0x0, 0x0, {0x2}}}, 0x16c}}, 0x0) write(r4, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) (async) write(r4, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r6 = socket$inet_udp(0x2, 0x2, 0x0) splice(r3, 0x0, r6, 0x0, 0x1100000000f336, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)={0x38, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xa}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x38}}, 0x4040000) 3.022389ms ago: executing program 3 (id=864): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0x8004b707, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, @in6=@empty, 0x4e22, 0xfef0, 0x4e21, 0x0, 0xa, 0x20, 0x0, 0x33}, {0x9d, 0x9fa, 0x2, 0x101, 0x2, 0x0, 0x400, 0x9}, {0x7fff8000000000, 0x0, 0x0, 0x3ff}, 0x401, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x4d4, 0x3c}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3506, 0x1, 0x0, 0x2, 0x3b, 0x3, 0xe8}}, 0xe8) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 0s ago: executing program 1 (id=528): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_linger(r4, 0x1, 0x4b, 0x0, &(0x7f0000000240)) unshare(0x40600) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r5, 0x40305829, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81}, [@jmp={0x5, 0x1, 0xd, 0xa, 0x7, 0xfffffffffffffff8, 0xffffffffffffffff}]}, &(0x7f00000004c0)='GPL\x00', 0xfffffff7, 0xaa, &(0x7f0000000500)=""/170, 0x1f00, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x4, 0xc7}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0x1, 0xfffffffe, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x10, @void, @value}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000740)={r5, r1, 0xf6f4b90c0445afd, r6}, 0x10) tee(r3, r3, 0x66f, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x4e20, 0x0, @remote}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x5, @private1}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0xc, @empty, 0x800}}, 0x0, 0x0, 0x1f, 0x0, "3a044801a17a428756c5f98645bab131542c6e717e3119c966c1c82f80055b3156a48cb67cae75043ca06058689aea8caf0686bb3600f1b4dbca61f61aed4e2b08083ad700c504f3bcff8e91a6c27e63"}, 0xd8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r8, 0x0, 0x23, &(0x7f0000000180)="f97aaf37bec371cb9aba96e8d74404b6c80112cc606bdde173e80124faa1d6b1e2a2694313b16fa6550d47ef59ef915468190bf70c930fe6b88bf02ff1983d1159fec5c1fad54b1f027483b0f9dac372e6188fbc69be3e9dd208a492978e71865c3659f1d56fb9f41183dbbfbf998b2604ca423437e3a3101b7d82af3044fb4fd5b42e4884d28c117f6b1576821484b5ff39832bbd281d8d1f27723fba2fcee0026471847d65d124656c422d3c2c117d07bcdc19b0917163f444b146e6d6ae2af8", 0xc1) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000229bd7000fedbdf250100000040000380080074c77716791c2cba517d580500ac1e00011400020070696d3672656730000000000000005f124896ac4615b0d3396b4d21f83000080001000000000008000500e00180000000038e000100000008000300aed40900c46f4e277a"], 0x64}, 0x1, 0x0, 0x0, 0x1000}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRESHEX=r2, @ANYBLOB="0000000000000000040000000b0001006d"], 0x3c}}, 0x0) kernel console output (not intermixed with test programs): ackets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.963972][ T6404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.023720][ T6559] netlink: 108 bytes leftover after parsing attributes in process `syz.1.137'. [ 102.186776][ T6404] hsr_slave_0: entered promiscuous mode [ 102.213415][ T6404] hsr_slave_1: entered promiscuous mode [ 102.738135][ T6599] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 102.803011][ T6602] ip6t_rpfilter: unknown options [ 103.060640][ T6615] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 103.102252][ T5847] Bluetooth: hci0: command tx timeout [ 103.223032][ T6624] netlink: 24 bytes leftover after parsing attributes in process `syz.3.150'. [ 103.290710][ T6630] netlink: 24 bytes leftover after parsing attributes in process `syz.3.150'. [ 103.692311][ T6640] netlink: 96 bytes leftover after parsing attributes in process `syz.3.153'. [ 103.807883][ T6643] xt_l2tp: wrong L2TP version: 0 [ 103.904901][ T6404] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.017131][ T6404] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.101330][ T6404] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.147698][ T6404] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.463108][ T6404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.560511][ T6404] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.643792][ T5904] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.651082][ T5904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.706018][ T5904] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.713333][ T5904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.181888][ T5847] Bluetooth: hci0: command tx timeout [ 105.367832][ T6745] __nla_validate_parse: 3 callbacks suppressed [ 105.367853][ T6745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.166'. [ 105.476566][ T6745] netlink: 24 bytes leftover after parsing attributes in process `syz.4.166'. [ 105.647902][ T6754] netlink: 24 bytes leftover after parsing attributes in process `syz.3.168'. [ 105.694569][ T6404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.820474][ T6404] veth0_vlan: entered promiscuous mode [ 105.828554][ T6757] netlink: 'syz.1.169': attribute type 1 has an invalid length. [ 105.842646][ T6757] netlink: 104 bytes leftover after parsing attributes in process `syz.1.169'. [ 105.868519][ T6404] veth1_vlan: entered promiscuous mode [ 105.901830][ T6757] netlink: 'syz.1.169': attribute type 1 has an invalid length. [ 105.917936][ T6757] netlink: 'syz.1.169': attribute type 2 has an invalid length. [ 105.989177][ T6404] veth0_macvtap: entered promiscuous mode [ 106.047063][ T6404] veth1_macvtap: entered promiscuous mode [ 106.067732][ T6766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.170'. [ 106.099963][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.153883][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.172329][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.231708][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.275328][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.311547][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.334606][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.360563][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.399560][ T6404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.470528][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.515900][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.551430][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.592571][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.627886][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.638561][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.648483][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.659754][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.676271][ T6404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.691703][ T6784] sit0: entered promiscuous mode [ 106.725518][ T6784] netlink: 'syz.1.175': attribute type 1 has an invalid length. [ 106.748326][ T6784] netlink: 1 bytes leftover after parsing attributes in process `syz.1.175'. [ 106.766053][ T6785] dvmrp0: entered allmulticast mode [ 106.792245][ T6404] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.807487][ T6795] netlink: 'syz.3.177': attribute type 2 has an invalid length. [ 106.821848][ T6404] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.836761][ T6404] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.860561][ T6404] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.054991][ T6739] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.087877][ T6739] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.135550][ T6747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.150040][ T6747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.835803][ T137] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.858537][ T6841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.184'. [ 107.885785][ T6841] netlink: 24 bytes leftover after parsing attributes in process `syz.3.184'. [ 108.091042][ T137] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.511186][ T6860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.190'. [ 108.533730][ T137] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.555015][ T6860] netlink: 28 bytes leftover after parsing attributes in process `syz.4.190'. [ 108.820503][ T137] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.954858][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.969436][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.981821][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.990028][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.997993][ T5845] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 109.005556][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 109.158074][ T6887] geneve2: entered promiscuous mode [ 109.208381][ T6887] geneve2: entered allmulticast mode [ 109.316803][ T6885] netlink: 'syz.2.197': attribute type 5 has an invalid length. [ 109.429562][ T137] bridge_slave_1: left allmulticast mode [ 109.443210][ T137] bridge_slave_1: left promiscuous mode [ 109.464303][ T137] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.522716][ T137] bridge_slave_0: left allmulticast mode [ 109.560923][ T137] bridge_slave_0: left promiscuous mode [ 109.568854][ T137] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.092161][ T137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.111273][ T137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.133914][ T137] bond0 (unregistering): Released all slaves [ 110.646662][ T30] audit: type=1804 audit(1742120386.200:2): pid=6983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.211" name="/newroot/53/cgroup.controllers" dev="tmpfs" ino=288 res=1 errno=0 [ 110.668907][ T30] audit: type=1800 audit(1742120386.200:3): pid=6983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.211" name="cgroup.controllers" dev="tmpfs" ino=288 res=0 errno=0 [ 110.680154][ T6988] __nla_validate_parse: 5 callbacks suppressed [ 110.680182][ T6988] netlink: 36 bytes leftover after parsing attributes in process `syz.3.209'. [ 110.781328][ T137] hsr_slave_0: left promiscuous mode [ 110.801760][ T137] hsr_slave_1: left promiscuous mode [ 110.809726][ T137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.837574][ T137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.875953][ T137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.897649][ T137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.929896][ T137] veth1_macvtap: left promiscuous mode [ 110.937119][ T137] veth0_macvtap: left promiscuous mode [ 110.943048][ T137] veth1_vlan: left promiscuous mode [ 110.948604][ T137] veth0_vlan: left promiscuous mode [ 111.093362][ T5847] Bluetooth: hci0: command tx timeout [ 111.437692][ T137] team0 (unregistering): Port device team_slave_1 removed [ 111.478769][ T137] team0 (unregistering): Port device team_slave_0 removed [ 111.922607][ T6998] bond_slave_1: entered allmulticast mode [ 112.275887][ T6879] chnl_net:caif_netlink_parms(): no params data found [ 112.568308][ T7032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.220'. [ 112.830329][ T6879] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.844219][ T6879] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.856725][ T6879] bridge_slave_0: entered allmulticast mode [ 112.868671][ T6879] bridge_slave_0: entered promiscuous mode [ 112.937047][ T6879] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.961970][ T6879] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.985258][ T6879] bridge_slave_1: entered allmulticast mode [ 113.012943][ T6879] bridge_slave_1: entered promiscuous mode [ 113.112702][ T6879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.126274][ T6879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.173241][ T5845] Bluetooth: hci0: command tx timeout [ 113.348137][ T6879] team0: Port device team_slave_0 added [ 113.389756][ T6879] team0: Port device team_slave_1 added [ 113.572089][ T7076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.228'. [ 113.572665][ T6879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.630060][ T6879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.706317][ T6879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.747710][ T6879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.763443][ T6879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.823140][ T6879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.893473][ T7096] netlink: 100 bytes leftover after parsing attributes in process `syz.3.231'. [ 113.903015][ T7090] xt_CT: No such helper "pptp" [ 114.171127][ T6879] hsr_slave_0: entered promiscuous mode [ 114.177649][ T7106] netlink: 52 bytes leftover after parsing attributes in process `syz.3.234'. [ 114.198147][ T6879] hsr_slave_1: entered promiscuous mode [ 115.096975][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.240'. [ 115.157836][ T7137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.240'. [ 115.253017][ T5845] Bluetooth: hci0: command 0x040f tx timeout [ 115.541598][ T5883] IPVS: starting estimator thread 0... [ 115.562756][ T7154] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20000 [ 115.672471][ T7155] IPVS: using max 19 ests per chain, 45600 per kthread [ 115.695800][ T7158] netlink: 12 bytes leftover after parsing attributes in process `syz.4.246'. [ 115.742337][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.246'. [ 115.786800][ T6879] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 115.789278][ T7158] netlink: 16 bytes leftover after parsing attributes in process `syz.4.246'. [ 115.865717][ T6879] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 115.964305][ T6879] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 116.017749][ T6879] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 116.224653][ T7182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.253'. [ 116.273448][ T7182] netlink: 'syz.1.253': attribute type 1 has an invalid length. [ 116.475593][ T6879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.630886][ T6879] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.701123][ T6730] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.708395][ T6730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.762764][ T6730] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.769990][ T6730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.964609][ T6879] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 116.999138][ T6879] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 117.056980][ T7207] netlink: 40 bytes leftover after parsing attributes in process `syz.2.258'. [ 117.332934][ T5847] Bluetooth: hci0: command 0x040f tx timeout [ 117.742898][ T7248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.264'. [ 117.756639][ T6879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.763963][ T7248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.264'. [ 118.045768][ T6879] veth0_vlan: entered promiscuous mode [ 118.100706][ T6879] veth1_vlan: entered promiscuous mode [ 118.205905][ T6879] veth0_macvtap: entered promiscuous mode [ 118.222931][ T7265] tap0: tun_chr_ioctl cmd 1074025678 [ 118.228606][ T7265] tap0: group set to 0 [ 118.283060][ T6879] veth1_macvtap: entered promiscuous mode [ 118.418674][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.460423][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.491010][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.557359][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.601430][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.635081][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.684372][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.720163][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.749155][ T6879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.830273][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.889241][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.931860][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.965770][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.012780][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.054460][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.084939][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.151570][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.203776][ T6879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.316153][ T7304] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 119.381106][ T6879] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.412070][ T5845] Bluetooth: hci0: command 0x040f tx timeout [ 119.432941][ T6879] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.443691][ T6879] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.452751][ T6879] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.600229][ T7311] xt_l2tp: invalid flags combination: 4 [ 119.696746][ T6739] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.748116][ T6739] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.864466][ T6730] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.883863][ T6730] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.888852][ T7327] tipc: Started in network mode [ 119.922089][ T7327] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 119.952829][ T7327] tipc: Enabling of bearer rejected, failed to enable media [ 120.018390][ T7332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.284'. [ 120.281090][ T7345] netlink: 24 bytes leftover after parsing attributes in process `syz.2.287'. [ 120.430405][ T7353] netlink: 'syz.4.285': attribute type 2 has an invalid length. [ 120.456441][ T7353] netlink: 244 bytes leftover after parsing attributes in process `syz.4.285'. [ 120.797743][ T7367] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 121.184826][ T6734] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.435885][ T6734] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.498326][ T6734] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.590038][ T6734] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.877045][ T6734] bridge_slave_1: left allmulticast mode [ 121.908653][ T6734] bridge_slave_1: left promiscuous mode [ 121.936261][ T6734] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.990487][ T6734] bridge_slave_0: left allmulticast mode [ 122.019113][ T7416] netlink: 24 bytes leftover after parsing attributes in process `syz.4.297'. [ 122.042602][ T6734] bridge_slave_0: left promiscuous mode [ 122.065598][ T6734] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.522310][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 122.534997][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 122.548528][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 122.559888][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 122.568799][ T5845] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 122.577783][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 123.074300][ T6734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.098432][ T6734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.117275][ T6734] bond0 (unregistering): Released all slaves [ 123.680698][ T7472] netlink: 40 bytes leftover after parsing attributes in process `syz.3.301'. [ 123.716938][ T7463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.301'. [ 123.948099][ T7484] netlink: 16 bytes leftover after parsing attributes in process `syz.1.306'. [ 123.999332][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.021115][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.236647][ T6734] hsr_slave_0: left promiscuous mode [ 124.269119][ T6734] hsr_slave_1: left promiscuous mode [ 124.290737][ T7502] netlink: 28 bytes leftover after parsing attributes in process `syz.3.311'. [ 124.303389][ T6734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.310873][ T6734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.342544][ T6734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.351630][ T6734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.415724][ T6734] veth1_macvtap: left promiscuous mode [ 124.432116][ T6734] veth0_macvtap: left promiscuous mode [ 124.443852][ T6734] veth1_vlan: left promiscuous mode [ 124.449401][ T6734] veth0_vlan: left promiscuous mode [ 124.691557][ T5847] Bluetooth: hci0: command tx timeout [ 125.286676][ T6734] team0 (unregistering): Port device team_slave_1 removed [ 125.327863][ T6734] team0 (unregistering): Port device team_slave_0 removed [ 125.787418][ T7509] netlink: 'syz.2.312': attribute type 29 has an invalid length. [ 125.854592][ T7517] netlink: 'syz.2.312': attribute type 21 has an invalid length. [ 125.893787][ T7517] IPv6: NLM_F_CREATE should be specified when creating new route [ 125.938327][ T7431] chnl_net:caif_netlink_parms(): no params data found [ 126.126220][ T7540] netlink: 48 bytes leftover after parsing attributes in process `syz.3.318'. [ 126.183477][ T7537] delete_channel: no stack [ 126.320668][ T7554] netlink: 40 bytes leftover after parsing attributes in process `syz.4.321'. [ 126.330277][ T7554] netlink: 40 bytes leftover after parsing attributes in process `syz.4.321'. [ 126.340349][ T7431] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.365513][ T7431] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.395449][ T7431] bridge_slave_0: entered allmulticast mode [ 126.415112][ T7431] bridge_slave_0: entered promiscuous mode [ 126.451845][ T7431] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.460990][ T7431] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.486894][ T7431] bridge_slave_1: entered allmulticast mode [ 126.512491][ T7431] bridge_slave_1: entered promiscuous mode [ 126.591552][ T7561] netlink: 'syz.4.324': attribute type 29 has an invalid length. [ 126.611014][ T7563] netlink: 'syz.4.324': attribute type 29 has an invalid length. [ 126.741122][ T7572] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 126.771887][ T5847] Bluetooth: hci0: command tx timeout [ 126.823916][ T7431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.846545][ T7431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.915078][ T7576] netlink: 24 bytes leftover after parsing attributes in process `syz.3.330'. [ 127.007164][ T7431] team0: Port device team_slave_0 added [ 127.040857][ T7581] ip6t_srh: unknown srh invflags A757 [ 127.047763][ T7431] team0: Port device team_slave_1 added [ 127.194953][ T7431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.224002][ T7431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.280707][ T7431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.301135][ T7431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.370393][ T7431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.451432][ T7431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.584178][ T7606] netlink: 32 bytes leftover after parsing attributes in process `syz.4.337'. [ 127.652492][ T7431] hsr_slave_0: entered promiscuous mode [ 127.659125][ T7431] hsr_slave_1: entered promiscuous mode [ 127.931915][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030d79c00: rx timeout, send abort [ 127.987498][ T7625] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.226558][ T7630] netlink: 84 bytes leftover after parsing attributes in process `syz.2.344'. [ 128.432063][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030d79800: rx timeout, send abort [ 128.441787][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030d79c00: abort rx timeout. Force session deactivation [ 128.522129][ T7637] x_tables: duplicate underflow at hook 2 [ 128.852091][ T5847] Bluetooth: hci0: command tx timeout [ 128.940394][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030d79800: abort rx timeout. Force session deactivation [ 128.963474][ T7654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.350'. [ 128.979256][ T7654] netlink: 24 bytes leftover after parsing attributes in process `syz.3.350'. [ 129.031857][ T7431] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 129.075867][ T7431] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 129.152068][ T7431] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 129.221160][ T7431] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 129.466939][ T7667] netlink: 'syz.1.353': attribute type 1 has an invalid length. [ 129.554691][ T7675] netlink: 20 bytes leftover after parsing attributes in process `syz.4.355'. [ 129.613310][ T7675] netlink: 'syz.4.355': attribute type 1 has an invalid length. [ 129.663755][ T7431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.748560][ T7431] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.785304][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.792561][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.853027][ T6742] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.860161][ T6742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.954438][ T7431] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 129.982599][ T7431] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 130.189814][ T7704] delete_channel: no stack [ 130.418496][ T7719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.364'. [ 130.514373][ T7431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.611013][ T7431] veth0_vlan: entered promiscuous mode [ 130.630979][ T7431] veth1_vlan: entered promiscuous mode [ 130.645381][ T7725] netlink: 28 bytes leftover after parsing attributes in process `syz.1.365'. [ 130.661822][ T7726] Cannot find del_set index 3 as target [ 130.693345][ T7726] openvswitch: netlink: Key type 12049 is out of range max 32 [ 130.793890][ T7725] netlink: 32 bytes leftover after parsing attributes in process `syz.1.365'. [ 130.854204][ T7431] veth0_macvtap: entered promiscuous mode [ 130.933145][ T5847] Bluetooth: hci0: command tx timeout [ 130.952608][ T7431] veth1_macvtap: entered promiscuous mode [ 131.014759][ T7431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.044495][ T7431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.060906][ T7431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.086178][ T7431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.111728][ T7431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.145934][ T7431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.171757][ T7431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.188738][ T7431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.232742][ T7431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.240155][ T7734] tipc: Started in network mode [ 131.251810][ T7734] tipc: Node identity 000000000000405f0000000000000001, cluster identity 4711 [ 131.274037][ T7747] netlink: 28 bytes leftover after parsing attributes in process `syz.4.371'. [ 131.281821][ T7734] tipc: Enabling of bearer rejected, failed to enable media [ 131.310763][ T7431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.351499][ T7431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.391561][ T7431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.442032][ T7431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.487539][ T7431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.507429][ T7431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.517984][ T7431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.534830][ T7431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.547749][ T7431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.585484][ T7431] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.608171][ T7431] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.659385][ T7431] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.700034][ T7431] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.882601][ T7765] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 132.015039][ T7765] netlink: 28 bytes leftover after parsing attributes in process `syz.2.379'. [ 132.133633][ T7779] tipc: Started in network mode [ 132.170638][ T7779] tipc: Node identity 080211000001, cluster identity 4711 [ 132.209652][ T7779] tipc: Enabled bearer , priority 0 [ 132.251751][ T2988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.288172][ T2988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.333157][ T7789] IPVS: ip_vs_edit_dest(): server weight less than zero [ 132.391564][ T6742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.399340][ T7788] Cannot find set identified by id 752 to match [ 132.427573][ T6742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.028518][ T7820] netlink: 'syz.2.389': attribute type 1 has an invalid length. [ 133.138298][ T7832] __nla_validate_parse: 1 callbacks suppressed [ 133.138319][ T7832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.391'. [ 133.185905][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.202330][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.322629][ T6953] tipc: Node number set to 134418688 [ 133.508822][ T7846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.395'. [ 133.706630][ T6742] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.781129][ T6742] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.865946][ T6742] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.964680][ T6742] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.111087][ T6742] bridge_slave_1: left allmulticast mode [ 134.117531][ T6742] bridge_slave_1: left promiscuous mode [ 134.124529][ T6742] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.137783][ T6742] bridge_slave_0: left allmulticast mode [ 134.144136][ T6742] bridge_slave_0: left promiscuous mode [ 134.149884][ T6742] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.417274][ T7876] netlink: 244 bytes leftover after parsing attributes in process `syz.2.397'. [ 134.668043][ T7887] netlink: 'syz.1.400': attribute type 1 has an invalid length. [ 134.766770][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 134.792601][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 134.807965][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 134.840602][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 134.857563][ T5845] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 134.867101][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 134.874895][ T6742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.888293][ T6742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.902772][ T6742] bond0 (unregistering): Released all slaves [ 134.919166][ T7872] netlink: 28 bytes leftover after parsing attributes in process `syz.3.398'. [ 134.932877][ T7886] netlink: 'syz.1.400': attribute type 1 has an invalid length. [ 134.947211][ T7880] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 134.950356][ T7886] netlink: 'syz.1.400': attribute type 1 has an invalid length. [ 134.954821][ T7880] IPv6: NLM_F_CREATE should be set when creating new route [ 135.062307][ T7887] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.091885][ T7889] bond2: (slave gretap1): making interface the new active one [ 135.104043][ T7889] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 135.188007][ T7889] syz.1.400 (7889) used greatest stack depth: 18896 bytes left [ 135.298746][ T7895] macvlan2: entered promiscuous mode [ 135.394097][ T7899] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 135.852603][ T6742] hsr_slave_0: left promiscuous mode [ 135.891869][ T6742] hsr_slave_1: left promiscuous mode [ 135.897914][ T6742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.961285][ T6742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.977210][ T7926] netlink: 5 bytes leftover after parsing attributes in process `syz.1.408'. [ 136.012571][ T6742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.020799][ T6742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.139024][ T6742] veth1_macvtap: left promiscuous mode [ 136.158626][ T6742] veth0_macvtap: left promiscuous mode [ 136.164496][ T6742] veth1_vlan: left promiscuous mode [ 136.173920][ T6742] veth0_vlan: left promiscuous mode [ 136.910655][ T6742] team0 (unregistering): Port device team_slave_1 removed [ 136.939662][ T5847] Bluetooth: hci0: command tx timeout [ 136.968910][ T6742] team0 (unregistering): Port device team_slave_0 removed [ 137.834968][ T7888] chnl_net:caif_netlink_parms(): no params data found [ 137.896160][ T7975] netlink: 'syz.1.411': attribute type 29 has an invalid length. [ 138.219716][ T7990] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 138.307314][ T7888] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.346924][ T7888] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.364901][ T7888] bridge_slave_0: entered allmulticast mode [ 138.392869][ T7888] bridge_slave_0: entered promiscuous mode [ 138.419452][ T7996] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 138.465125][ T7888] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.493441][ T7888] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.500754][ T7888] bridge_slave_1: entered allmulticast mode [ 138.562096][ T7888] bridge_slave_1: entered promiscuous mode [ 138.597148][ T8009] netlink: 'syz.1.416': attribute type 1 has an invalid length. [ 138.615152][ T8010] IPVS: set_ctl: invalid protocol: 21 172.20.20.60:20003 [ 138.740712][ T8013] netlink: 'syz.1.416': attribute type 1 has an invalid length. [ 138.850302][ T8013] netlink: 140 bytes leftover after parsing attributes in process `syz.1.416'. [ 138.937820][ T8016] netlink: 132 bytes leftover after parsing attributes in process `syz.4.418'. [ 138.953720][ T7888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.990342][ T7888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.011893][ T5847] Bluetooth: hci0: command tx timeout [ 139.120003][ T7888] team0: Port device team_slave_0 added [ 139.137298][ T8026] netlink: 'syz.4.420': attribute type 13 has an invalid length. [ 139.174338][ T7888] team0: Port device team_slave_1 added [ 139.253524][ T8026] netlink: 28 bytes leftover after parsing attributes in process `syz.4.420'. [ 139.272200][ T8026] netlink: 28 bytes leftover after parsing attributes in process `syz.4.420'. [ 139.329982][ T7888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.350782][ T7888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.457646][ T7888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.496884][ T7888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.520492][ T7888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.552997][ T8049] siw: device registration error -23 [ 139.589284][ T7888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.804005][ T7888] hsr_slave_0: entered promiscuous mode [ 139.810547][ T7888] hsr_slave_1: entered promiscuous mode [ 139.916133][ T8060] netlink: 'syz.4.428': attribute type 20 has an invalid length. [ 139.935150][ T8063] gtp0: entered promiscuous mode [ 139.981583][ T8060] netlink: 24 bytes leftover after parsing attributes in process `syz.4.428'. [ 140.012179][ T8063] netlink: 24 bytes leftover after parsing attributes in process `syz.4.428'. [ 140.251561][ T8080] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5 [ 140.538905][ T8099] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.545771][ T8099] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.563186][ T8099] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.569639][ T8099] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.589905][ T8099] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.606728][ T8099] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.616863][ T8099] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.636354][ T8099] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.651869][ T8099] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.665860][ T8099] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.707327][ T8099] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.728727][ T8099] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.796151][ T8099] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.852584][ T8099] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.859831][ T8099] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.889508][ T8099] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.920412][ T8099] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.951738][ T8099] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.961696][ T8099] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.986821][ T8099] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.035855][ T8099] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.081726][ T8099] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.090059][ T8099] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.096794][ T5847] Bluetooth: hci0: command tx timeout [ 141.121687][ T8099] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.147915][ T8099] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.187475][ T8099] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.205681][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.441'. [ 141.212783][ T8119] netlink: 'syz.3.441': attribute type 4 has an invalid length. [ 141.248718][ T8122] netlink: 24 bytes leftover after parsing attributes in process `syz.3.441'. [ 141.248780][ T8099] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.273640][ T8118] netlink: 'syz.3.441': attribute type 4 has an invalid length. [ 141.311631][ T8099] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.318056][ T8099] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.322508][ T8119] xfrm1: entered allmulticast mode [ 141.572264][ T8132] netlink: 'syz.4.442': attribute type 1 has an invalid length. [ 141.633981][ T7888] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 141.665560][ T7888] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 141.703718][ T8132] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 141.718866][ T12] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 141.724973][ T8140] Cannot find del_set index 65531 as target [ 141.745915][ T8132] 8021q: adding VLAN 0 to HW filter on device bond2 [ 141.830857][ T7888] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 141.839300][ T137] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 141.878396][ T7888] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 142.200509][ T7888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.288320][ T7888] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.369521][ T6730] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.376760][ T6730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.460582][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.467828][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.648163][ T7888] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 142.735035][ T8169] ip6erspan0: entered promiscuous mode [ 143.158224][ T8189] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 143.194484][ T5847] Bluetooth: hci0: command tx timeout [ 143.224412][ T7888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.303925][ T7888] veth0_vlan: entered promiscuous mode [ 143.327655][ T7888] veth1_vlan: entered promiscuous mode [ 143.381836][ T7888] veth0_macvtap: entered promiscuous mode [ 143.396394][ T7888] veth1_macvtap: entered promiscuous mode [ 143.544820][ T7888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.609694][ T7888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.632360][ T7888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.649683][ T7888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.687248][ T7888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.721641][ T7888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.744461][ T7888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.777751][ T7888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.819906][ T7888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.887976][ T7888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.913933][ T7888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.951883][ T7888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.994198][ T7888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.019404][ T7888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.046497][ T7888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.076012][ T7888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.093680][ T8218] netlink: 'syz.2.462': attribute type 10 has an invalid length. [ 144.108684][ T7888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.137831][ T8222] atomic_op ffff88805ea50198 conn xmit_atomic 0000000000000000 [ 144.137848][ T7888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.164768][ T8223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.462'. [ 144.177942][ T8223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.214613][ T8223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.224481][ T8223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.236422][ T8223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.377021][ T7888] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.401647][ T7888] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.420189][ T7888] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.430870][ T7888] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.826744][ T8253] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x9 [ 144.924622][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.971524][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.054545][ T2988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.079063][ T2988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.259038][ T8274] netlink: 40 bytes leftover after parsing attributes in process `syz.3.472'. [ 145.691147][ T8293] .: renamed from bond0 (while UP) [ 145.900559][ T6734] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.944781][ T8303] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.482'. [ 145.965327][ T8303] openvswitch: netlink: Message has 44053 unknown bytes. [ 146.106315][ T6734] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.190579][ T6734] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.269317][ T6734] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.394044][ T6734] bridge_slave_1: left allmulticast mode [ 146.402803][ T6734] bridge_slave_1: left promiscuous mode [ 146.409767][ T6734] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.420218][ T6734] bridge_slave_0: left allmulticast mode [ 146.426507][ T6734] bridge_slave_0: left promiscuous mode [ 146.432639][ T6734] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.745395][ T6734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.782539][ T6734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.817573][ T6734] bond0 (unregistering): Released all slaves [ 147.133819][ T8329] netlink: 192 bytes leftover after parsing attributes in process `syz.3.488'. [ 147.171329][ T8328] netlink: 'syz.1.489': attribute type 15 has an invalid length. [ 147.670696][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.495'. [ 147.824886][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 147.841631][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 147.851329][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 147.860641][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 147.868970][ T5845] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 147.876768][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 147.891279][ T8360] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.497'. [ 148.027774][ T8375] Bluetooth: MGMT ver 1.23 [ 148.669220][ T6734] hsr_slave_0: left promiscuous mode [ 148.687544][ T6734] hsr_slave_1: left promiscuous mode [ 148.697850][ T6734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.721535][ T6734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.751261][ T6734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.769204][ T6734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.837744][ T6734] veth1_macvtap: left promiscuous mode [ 148.848239][ T6734] veth0_macvtap: left promiscuous mode [ 148.854911][ T6734] veth1_vlan: left promiscuous mode [ 148.860513][ T6734] veth0_vlan: left promiscuous mode [ 149.509320][ T6734] team0 (unregistering): Port device team_slave_1 removed [ 149.553974][ T6734] team0 (unregistering): Port device team_slave_0 removed [ 149.971612][ T5845] Bluetooth: hci0: command tx timeout [ 149.994218][ T8369] veth1_macvtap: left promiscuous mode [ 150.000114][ T8369] macsec0: entered promiscuous mode [ 150.022803][ T8357] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.497'. [ 150.252125][ T8384] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 150.501604][ T8392] netlink: 'syz.1.504': attribute type 15 has an invalid length. [ 150.550204][ T8405] netlink: 20 bytes leftover after parsing attributes in process `syz.1.504'. [ 150.571650][ T8392] netlink: 24 bytes leftover after parsing attributes in process `syz.1.504'. [ 150.811960][ T8420] netlink: 'syz.2.506': attribute type 1 has an invalid length. [ 150.838360][ T8420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.506'. [ 150.976792][ T8359] chnl_net:caif_netlink_parms(): no params data found [ 151.272175][ T8440] netlink: 36 bytes leftover after parsing attributes in process `syz.3.512'. [ 151.327772][ T8359] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.337588][ T8443] netlink: 'syz.4.513': attribute type 10 has an invalid length. [ 151.354380][ T8359] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.367107][ T8359] bridge_slave_0: entered allmulticast mode [ 151.376294][ T8359] bridge_slave_0: entered promiscuous mode [ 151.413211][ T8443] team0: Device ipvlan1 failed to register rx_handler [ 151.469508][ T8359] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.501951][ T8359] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.509376][ T8359] bridge_slave_1: entered allmulticast mode [ 151.530016][ T8443] syz.4.513 (8443) used greatest stack depth: 17616 bytes left [ 151.538961][ T8359] bridge_slave_1: entered promiscuous mode [ 151.662894][ T8359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.720744][ T8359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.743351][ T8460] netlink: 36 bytes leftover after parsing attributes in process `syz.4.518'. [ 152.061506][ T5845] Bluetooth: hci0: command tx timeout [ 152.242299][ T8359] team0: Port device team_slave_0 added [ 152.250127][ T8469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.520'. [ 152.269208][ T8359] team0: Port device team_slave_1 added [ 152.558117][ T8359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.577182][ T8359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.605081][ T8496] openvswitch: netlink: Tunnel attr 12262 out of range max 16 [ 152.684464][ T8359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.725044][ T8485] (unnamed net_device) (uninitialized): (slave batadv_slave_0): Device is not bonding slave [ 152.741690][ T8485] (unnamed net_device) (uninitialized): option active_slave: invalid value (batadv_slave_0) [ 152.784217][ T8359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.821604][ T8359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.827639][ T8503] netlink: 40 bytes leftover after parsing attributes in process `syz.4.525'. [ 152.909040][ T8359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.054784][ T8359] hsr_slave_0: entered promiscuous mode [ 153.061312][ T8359] hsr_slave_1: entered promiscuous mode [ 153.933187][ T8520] bridge0: port 3(gretap0) entered blocking state [ 153.960125][ T8520] bridge0: port 3(gretap0) entered disabled state [ 153.978306][ T8520] gretap0: entered allmulticast mode [ 154.003080][ T8520] gretap0: entered promiscuous mode [ 154.009159][ T8520] bridge0: port 3(gretap0) entered blocking state [ 154.016201][ T8520] bridge0: port 3(gretap0) entered forwarding state [ 154.118292][ T8533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.532'. [ 154.136670][ T5845] Bluetooth: hci0: command tx timeout [ 154.285701][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 154.312598][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 154.331593][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 154.352027][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 154.362018][ T5847] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 154.370472][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 154.389752][ T8540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.533'. [ 154.758422][ T8359] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 154.804696][ T8359] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 154.817986][ T8359] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 154.841780][ T8537] chnl_net:caif_netlink_parms(): no params data found [ 154.856705][ T8359] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 155.102889][ T8537] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.116986][ T8537] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.125171][ T8537] bridge_slave_0: entered allmulticast mode [ 155.134124][ T8537] bridge_slave_0: entered promiscuous mode [ 155.160220][ T8537] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.167893][ T8537] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.180268][ T8537] bridge_slave_1: entered allmulticast mode [ 155.189899][ T8537] bridge_slave_1: entered promiscuous mode [ 155.210374][ T8573] __nla_validate_parse: 1 callbacks suppressed [ 155.210396][ T8573] netlink: 48 bytes leftover after parsing attributes in process `syz.4.541'. [ 155.236933][ T8573] xt_CT: You must specify a L4 protocol and not use inversions on it [ 155.273579][ T8537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.309508][ T8537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.424235][ T8537] team0: Port device team_slave_0 added [ 155.450525][ T8359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.460833][ T8537] team0: Port device team_slave_1 added [ 155.551895][ T8537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.558890][ T8537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.612066][ T8537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.651794][ T8537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.661923][ T8537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.713245][ T8537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.799454][ T8359] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.912747][ T8537] hsr_slave_0: entered promiscuous mode [ 155.929539][ T8537] hsr_slave_1: entered promiscuous mode [ 155.943351][ T8537] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.964763][ T8537] Cannot create hsr debugfs directory [ 155.995414][ T6730] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.002634][ T6730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.146742][ T6730] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.153984][ T6730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.212057][ T5847] Bluetooth: hci0: command tx timeout [ 156.212340][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.451534][ T5847] Bluetooth: hci1: command tx timeout [ 156.805829][ T8639] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.844465][ T8537] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.851126][ T8641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.946855][ T8639] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 156.984682][ T8641] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 157.027377][ T8537] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.195897][ T8537] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.293413][ T8359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.403210][ T8537] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.591307][ T8359] veth0_vlan: entered promiscuous mode [ 157.633913][ T8662] syzkaller1: entered promiscuous mode [ 157.639468][ T8662] syzkaller1: entered allmulticast mode [ 157.712655][ T8673] netlink: 24 bytes leftover after parsing attributes in process `syz.4.560'. [ 157.748830][ T8359] veth1_vlan: entered promiscuous mode [ 157.824570][ T8537] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 157.889344][ T8537] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 157.939056][ T8537] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 157.986476][ T8537] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 158.009524][ T8359] veth0_macvtap: entered promiscuous mode [ 158.038281][ T8359] veth1_macvtap: entered promiscuous mode [ 158.111142][ T8359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.132681][ T8359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.156340][ T8359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.177182][ T8359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.194345][ T8359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.207786][ T8687] netlink: 216 bytes leftover after parsing attributes in process `syz.4.562'. [ 158.211095][ T8359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.237238][ T8359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.325116][ T8359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.365483][ T8359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.391484][ T8359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.411575][ T8359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.425229][ T8359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.463818][ T8691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.475091][ T8359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.512618][ T8359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.531603][ T5847] Bluetooth: hci1: command tx timeout [ 158.588966][ T8359] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.598979][ T8359] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.609355][ T8359] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.618397][ T8359] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.655493][ T8537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.670026][ T8702] netlink: 'syz.4.564': attribute type 10 has an invalid length. [ 158.698374][ T8704] netlink: 'syz.4.564': attribute type 10 has an invalid length. [ 158.747871][ T8702] vlan0: entered allmulticast mode [ 158.791081][ T8702] veth0_vlan: entered allmulticast mode [ 158.827469][ T8702] team0: Port device vlan0 added [ 158.844289][ T8537] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.858230][ T8704] veth0_vlan: left allmulticast mode [ 158.873670][ T8713] x_tables: duplicate underflow at hook 1 [ 159.003380][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.010583][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.029310][ T8717] openvswitch: netlink: Tunnel attr 123 out of range max 16 [ 159.084178][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.091437][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.322793][ T6742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.330693][ T6742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.390642][ T8537] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 159.456215][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.487839][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.602743][ T8737] netlink: 'syz.3.572': attribute type 1 has an invalid length. [ 159.635238][ T8737] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.724191][ T8741] bond1: (slave gretap1): making interface the new active one [ 159.736878][ T8741] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 160.175017][ T8770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.575'. [ 160.185937][ T8770] netlink: 24 bytes leftover after parsing attributes in process `syz.3.575'. [ 160.389763][ T6730] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.473202][ T8537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.600903][ T6730] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.621594][ T5847] Bluetooth: hci1: command tx timeout [ 160.682171][ T6730] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.759978][ T6730] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.775682][ T8537] veth0_vlan: entered promiscuous mode [ 160.808617][ T8537] veth1_vlan: entered promiscuous mode [ 160.896814][ T8537] veth0_macvtap: entered promiscuous mode [ 160.925429][ T8537] veth1_macvtap: entered promiscuous mode [ 160.992791][ T6730] bridge_slave_1: left allmulticast mode [ 160.998515][ T6730] bridge_slave_1: left promiscuous mode [ 161.028742][ T6730] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.038981][ T6730] bridge_slave_0: left allmulticast mode [ 161.053691][ T6730] bridge_slave_0: left promiscuous mode [ 161.060823][ T6730] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.416684][ T8805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.578'. [ 161.427198][ T8810] netlink: 'syz.3.577': attribute type 1 has an invalid length. [ 161.759707][ T8823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.580'. [ 161.796369][ T8823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.580'. [ 161.909213][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 161.920075][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 161.943175][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 161.962936][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 161.971027][ T5845] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 161.998774][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 162.006844][ T6730] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.035119][ T6730] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.045630][ T6730] bond0 (unregistering): Released all slaves [ 162.120551][ T8537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.161527][ T8537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.178598][ T8537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.191307][ T8830] netlink: 16 bytes leftover after parsing attributes in process `syz.2.581'. [ 162.209816][ T8537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.241280][ T8537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.258880][ T8537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.269293][ T8537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.283153][ T8537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.303839][ T8537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.365117][ T8537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.376378][ T8537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.386989][ T8537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.397957][ T8537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.407962][ T8537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.419175][ T8537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.429211][ T8537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.439906][ T8537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.461744][ T8537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.504986][ T8836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.583'. [ 162.548524][ T8838] x_tables: duplicate underflow at hook 1 [ 162.608549][ T8537] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.629389][ T8537] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.661500][ T8537] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.670272][ T8537] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.694657][ T5847] Bluetooth: hci1: command tx timeout [ 163.160465][ T8872] trusted_key: syz.3.589 sent an empty control message without MSG_MORE. [ 163.266938][ T6730] hsr_slave_0: left promiscuous mode [ 163.299992][ T6730] hsr_slave_1: left promiscuous mode [ 163.311088][ T6730] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.335990][ T6730] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.351255][ T6730] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.360460][ T6730] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.404257][ T6730] veth1_macvtap: left promiscuous mode [ 163.415443][ T6730] veth0_macvtap: left promiscuous mode [ 163.421250][ T6730] veth1_vlan: left promiscuous mode [ 163.429800][ T6730] veth0_vlan: left promiscuous mode [ 163.964701][ T6730] team0 (unregistering): Port device team_slave_1 removed [ 164.012155][ T6730] team0 (unregistering): Port device team_slave_0 removed [ 164.055759][ T5847] Bluetooth: hci0: command tx timeout [ 164.778972][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.837668][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.986945][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.001377][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.036502][ T8826] chnl_net:caif_netlink_parms(): no params data found [ 165.207814][ T8908] netlink: 24 bytes leftover after parsing attributes in process `syz.4.598'. [ 165.365556][ T8908] netlink: 'syz.4.598': attribute type 1 has an invalid length. [ 165.402633][ T8908] netlink: 'syz.4.598': attribute type 3 has an invalid length. [ 165.410357][ T8908] netlink: 224 bytes leftover after parsing attributes in process `syz.4.598'. [ 165.640907][ T8826] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.667457][ T8826] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.692226][ T8826] bridge_slave_0: entered allmulticast mode [ 165.699468][ T8826] bridge_slave_0: entered promiscuous mode [ 165.735736][ T8826] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.747239][ T8826] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.755342][ T8826] bridge_slave_1: entered allmulticast mode [ 165.793546][ T8826] bridge_slave_1: entered promiscuous mode [ 165.976889][ T8826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.985474][ T8938] netlink: 'syz.3.603': attribute type 1 has an invalid length. [ 166.018083][ T8938] netlink: 224 bytes leftover after parsing attributes in process `syz.3.603'. [ 166.035888][ T8826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.114705][ T6730] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.132973][ T5847] Bluetooth: hci0: command tx timeout [ 166.234216][ T8826] team0: Port device team_slave_0 added [ 166.273880][ T6730] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.335156][ T8826] team0: Port device team_slave_1 added [ 166.549023][ T8957] IPVS: set_ctl: invalid protocol: 0 172.30.0.4:0 [ 166.573942][ T6730] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.658881][ T8826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.678436][ T8826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.735638][ T8826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.945525][ T6730] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.970233][ T8967] netlink: 40 bytes leftover after parsing attributes in process `syz.4.607'. [ 166.990612][ T8826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.033914][ T8826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.074519][ T8826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.087803][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 167.099115][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 167.108706][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 167.117002][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 167.125035][ T5845] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 167.132685][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 167.265558][ T8826] hsr_slave_0: entered promiscuous mode [ 167.312887][ T8826] hsr_slave_1: entered promiscuous mode [ 167.468428][ T8980] netlink: 48 bytes leftover after parsing attributes in process `syz.2.610'. [ 167.657269][ T6730] bridge_slave_1: left allmulticast mode [ 167.686660][ T6730] bridge_slave_1: left promiscuous mode [ 167.723742][ T6730] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.772261][ T6730] bridge_slave_0: left allmulticast mode [ 167.779028][ T6730] bridge_slave_0: left promiscuous mode [ 167.786184][ T6730] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.213484][ T5847] Bluetooth: hci0: command tx timeout [ 168.396289][ T6730] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.407497][ T6730] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.418190][ T6730] bond0 (unregistering): Released all slaves [ 168.537095][ T8996] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.546842][ T8996] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.624503][ T8996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.640128][ T8996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.716941][ T8996] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.727520][ T8996] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.738248][ T8996] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.748131][ T8996] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.878439][ T9019] netlink: 24 bytes leftover after parsing attributes in process `syz.3.617'. [ 168.934480][ T9020] netlink: 52 bytes leftover after parsing attributes in process `syz.3.617'. [ 169.171620][ T5847] Bluetooth: hci1: command tx timeout [ 169.426752][ T9045] netlink: 60 bytes leftover after parsing attributes in process `syz.3.623'. [ 169.491861][ T5847] Bluetooth: hci2: command tx timeout [ 169.567557][ T9047] netlink: 'syz.4.621': attribute type 21 has an invalid length. [ 169.595504][ T9047] netlink: 'syz.4.621': attribute type 6 has an invalid length. [ 169.614986][ T9047] netlink: 132 bytes leftover after parsing attributes in process `syz.4.621'. [ 169.755993][ T6730] hsr_slave_0: left promiscuous mode [ 169.778658][ T6730] hsr_slave_1: left promiscuous mode [ 169.798076][ T6730] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.807292][ T6730] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.820261][ T6730] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.828503][ T6730] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.856624][ T6730] veth1_macvtap: left promiscuous mode [ 169.862481][ T6730] veth0_macvtap: left promiscuous mode [ 169.868079][ T6730] veth1_vlan: left promiscuous mode [ 169.873564][ T6730] veth0_vlan: left promiscuous mode [ 170.299235][ T5845] Bluetooth: hci0: command tx timeout [ 170.385947][ T6730] team0 (unregistering): Port device team_slave_1 removed [ 170.440071][ T6730] team0 (unregistering): Port device team_slave_0 removed [ 170.974227][ T8970] chnl_net:caif_netlink_parms(): no params data found [ 171.261940][ T5847] Bluetooth: hci1: command tx timeout [ 171.782446][ T8970] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.789657][ T8970] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.819203][ T8970] bridge_slave_0: entered allmulticast mode [ 171.852270][ T8970] bridge_slave_0: entered promiscuous mode [ 171.878005][ T8970] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.901695][ T8970] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.938159][ T8970] bridge_slave_1: entered allmulticast mode [ 171.959559][ T8970] bridge_slave_1: entered promiscuous mode [ 172.013003][ T9108] netlink: 'syz.3.635': attribute type 10 has an invalid length. [ 172.039956][ T9108] netlink: 40 bytes leftover after parsing attributes in process `syz.3.635'. [ 172.105249][ T9108] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.156492][ T9108] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.172206][ T9108] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.186937][ T9108] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.206280][ T9108] team0: Port device geneve0 added [ 172.222646][ T8970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.232611][ T9112] tipc: Enabled bearer , priority 10 [ 172.246402][ T8970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.385553][ T8970] team0: Port device team_slave_0 added [ 172.417561][ T8970] team0: Port device team_slave_1 added [ 172.518693][ T8970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.541570][ T8970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.610488][ T8970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.647623][ T8826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 172.677296][ T8970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.689888][ T8970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.724538][ T8970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.742273][ T8826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 172.754684][ T9121] netlink: 16 bytes leftover after parsing attributes in process `syz.3.638'. [ 172.857019][ T8970] hsr_slave_0: entered promiscuous mode [ 172.877770][ T8970] hsr_slave_1: entered promiscuous mode [ 172.887228][ T8970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.899345][ T8970] Cannot create hsr debugfs directory [ 172.905344][ T8826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 172.927735][ T8826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 173.332987][ T5847] Bluetooth: hci1: command tx timeout [ 173.799347][ T8826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.893063][ T9166] netlink: 'syz.2.647': attribute type 1 has an invalid length. [ 173.973535][ T9166] 8021q: adding VLAN 0 to HW filter on device bond2 [ 174.043449][ T8826] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.085324][ T9165] 8021q: adding VLAN 0 to HW filter on device bond2 [ 174.123320][ T9165] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 174.169169][ T9165] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 174.194548][ T9188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.652'. [ 174.254610][ T6730] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.261924][ T6730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.281984][ T8970] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 174.327154][ T8970] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 174.380113][ T8970] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 174.416436][ T6730] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.423684][ T6730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.478797][ T8970] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 174.699273][ T9201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.656'. [ 174.710531][ T9201] C: renamed from team_slave_0 (while UP) [ 174.719553][ T9201] netlink: 'syz.2.656': attribute type 1 has an invalid length. [ 174.728728][ T9201] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 174.880025][ T8970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.940296][ T8970] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.962458][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.969707][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.002492][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.009831][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.215994][ T9215] tipc: Enabling of bearer rejected, failed to enable media [ 175.248561][ T9215] netlink: 'syz.2.658': attribute type 4 has an invalid length. [ 175.263340][ T8826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.277296][ T9215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.658'. [ 175.412042][ T5847] Bluetooth: hci1: command tx timeout [ 175.435795][ T8826] veth0_vlan: entered promiscuous mode [ 175.548064][ T8970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.603307][ T8826] veth1_vlan: entered promiscuous mode [ 175.677886][ T9232] netlink: 'syz.2.661': attribute type 1 has an invalid length. [ 175.732355][ T8826] veth0_macvtap: entered promiscuous mode [ 175.735477][ T9232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.661'. [ 175.747011][ T8970] veth0_vlan: entered promiscuous mode [ 175.752849][ T9237] netlink: 52 bytes leftover after parsing attributes in process `syz.3.663'. [ 175.789276][ T8826] veth1_macvtap: entered promiscuous mode [ 175.837038][ T8970] veth1_vlan: entered promiscuous mode [ 175.918132][ T8826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.930971][ T8826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.944444][ T8826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.955850][ T8826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.968218][ T8826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.027298][ T8826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.051207][ T8826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.079180][ T8826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.105986][ T8826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.156684][ T8826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.196831][ T8826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.218967][ T8826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.276419][ T8826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.289076][ T9254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.668'. [ 176.291549][ T8826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.337344][ T8970] veth0_macvtap: entered promiscuous mode [ 176.388104][ T8970] veth1_macvtap: entered promiscuous mode [ 176.519848][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.581890][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.592683][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.631587][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.652672][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.677885][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.701301][ T8970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.786762][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.822364][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.843112][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.874820][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.907252][ T9282] x_tables: duplicate underflow at hook 1 [ 176.918131][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.930263][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.955902][ T8970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.969788][ T9284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.675'. [ 177.031924][ T8970] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.054387][ T8970] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.079853][ T8970] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.105108][ T8970] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.144005][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.166225][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.199601][ T9290] netlink: 76 bytes leftover after parsing attributes in process `syz.3.676'. [ 177.225298][ T9290] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 177.280618][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.297125][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.737941][ T6742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.766173][ T6742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.054674][ T6730] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.091556][ T6730] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.205508][ T9330] SET target dimension over the limit! [ 178.521302][ T53] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.738401][ T53] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.869300][ T53] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.067215][ T53] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.503365][ T53] bridge_slave_1: left allmulticast mode [ 179.548579][ T53] bridge_slave_1: left promiscuous mode [ 179.560539][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.619479][ T53] bridge_slave_0: left allmulticast mode [ 179.668279][ T53] bridge_slave_0: left promiscuous mode [ 179.712044][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.010010][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 180.024702][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 180.039229][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 180.048365][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 180.057911][ T5845] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 180.066976][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 180.172406][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 180.182460][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 180.191052][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 180.210495][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 180.219903][ T5847] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 180.231073][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 180.413945][ T9394] netlink: 'syz.2.691': attribute type 3 has an invalid length. [ 180.726350][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.738786][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.750442][ T53] bond0 (unregistering): Released all slaves [ 181.034384][ T9413] netlink: 36 bytes leftover after parsing attributes in process `syz.4.693'. [ 181.255826][ T9422] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 181.437029][ T53] hsr_slave_0: left promiscuous mode [ 181.457707][ T53] hsr_slave_1: left promiscuous mode [ 181.464073][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.471722][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.480090][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.488280][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.518661][ T53] veth1_macvtap: left promiscuous mode [ 181.524736][ T53] veth0_macvtap: left promiscuous mode [ 181.531215][ T53] veth1_vlan: left promiscuous mode [ 181.537542][ T53] veth0_vlan: left promiscuous mode [ 182.084153][ T53] team0 (unregistering): Port device team_slave_1 removed [ 182.132138][ T5845] Bluetooth: hci0: command tx timeout [ 182.133172][ T53] team0 (unregistering): Port device team_slave_0 removed [ 182.294501][ T5845] Bluetooth: hci1: command tx timeout [ 182.989385][ T9381] chnl_net:caif_netlink_parms(): no params data found [ 183.163950][ T9385] chnl_net:caif_netlink_parms(): no params data found [ 183.579810][ T9381] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.591795][ T9381] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.599105][ T9381] bridge_slave_0: entered allmulticast mode [ 183.622780][ T9381] bridge_slave_0: entered promiscuous mode [ 183.650495][ T9487] netlink: 64 bytes leftover after parsing attributes in process `syz.3.706'. [ 183.685773][ T9385] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.697065][ T9385] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.707762][ T9385] bridge_slave_0: entered allmulticast mode [ 183.723034][ T9385] bridge_slave_0: entered promiscuous mode [ 183.744037][ T9385] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.761623][ T9385] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.772608][ T9385] bridge_slave_1: entered allmulticast mode [ 183.786652][ T9385] bridge_slave_1: entered promiscuous mode [ 183.809886][ T9381] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.821595][ T9381] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.828919][ T9381] bridge_slave_1: entered allmulticast mode [ 183.862933][ T9381] bridge_slave_1: entered promiscuous mode [ 184.015115][ T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.085209][ T9381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.212290][ T5845] Bluetooth: hci0: command tx timeout [ 184.256559][ T53] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.317340][ T9381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.345231][ T9385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.371826][ T5845] Bluetooth: hci1: command tx timeout [ 184.393737][ T9385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.562767][ T9381] team0: Port device team_slave_0 added [ 184.673198][ T53] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.729211][ T9385] team0: Port device team_slave_0 added [ 184.755821][ T9381] team0: Port device team_slave_1 added [ 184.787047][ T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.827634][ T9385] team0: Port device team_slave_1 added [ 184.986191][ T9385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.993617][ T9385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.052638][ T9385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.088938][ T9385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.112152][ T9385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.139985][ T9385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.157134][ T9381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.167202][ T9381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.180063][ T9554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.721'. [ 185.194164][ T9381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.230938][ T9554] openvswitch: netlink: Flow key attr not present in new flow. [ 185.239729][ T9553] netlink: 53 bytes leftover after parsing attributes in process `syz.2.722'. [ 185.250127][ T9381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.257989][ T9381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.284516][ T9381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.408208][ T9385] hsr_slave_0: entered promiscuous mode [ 185.420135][ T9385] hsr_slave_1: entered promiscuous mode [ 185.586042][ T9381] hsr_slave_0: entered promiscuous mode [ 185.612982][ T9381] hsr_slave_1: entered promiscuous mode [ 185.626076][ T9381] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.645128][ T9381] Cannot create hsr debugfs directory [ 185.657010][ T9565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.741224][ T53] bridge_slave_1: left allmulticast mode [ 185.757936][ T53] bridge_slave_1: left promiscuous mode [ 185.771890][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.808867][ T53] bridge_slave_0: left allmulticast mode [ 185.817267][ T53] bridge_slave_0: left promiscuous mode [ 185.831655][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.291800][ T5845] Bluetooth: hci0: command tx timeout [ 186.455477][ T5845] Bluetooth: hci1: command tx timeout [ 186.536752][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.548137][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.559231][ T53] bond0 (unregistering): Released all slaves [ 186.623919][ T9582] netlink: 'syz.4.728': attribute type 12 has an invalid length. [ 186.642161][ T9582] netlink: 'syz.4.728': attribute type 29 has an invalid length. [ 186.657218][ T9582] netlink: 148 bytes leftover after parsing attributes in process `syz.4.728'. [ 186.683223][ T9582] netlink: 59 bytes leftover after parsing attributes in process `syz.4.728'. [ 186.834811][ T9585] erspan0: vlans aren't supported yet for dev_uc|mc_add() [ 187.283364][ T53] hsr_slave_0: left promiscuous mode [ 187.301774][ T53] hsr_slave_1: left promiscuous mode [ 187.310682][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.328882][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.343316][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.357647][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.416131][ T53] veth1_macvtap: left promiscuous mode [ 187.431083][ T53] veth0_macvtap: left promiscuous mode [ 187.437892][ T53] veth1_vlan: left promiscuous mode [ 187.443429][ T53] veth0_vlan: left promiscuous mode [ 188.146898][ T53] team0 (unregistering): Port device team_slave_1 removed [ 188.203238][ T53] team0 (unregistering): Port device team_slave_0 removed [ 188.378915][ T5845] Bluetooth: hci0: command tx timeout [ 188.535863][ T5845] Bluetooth: hci1: command tx timeout [ 188.791171][ T9622] bond_slave_1: entered promiscuous mode [ 189.131758][ T9635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.742'. [ 189.185929][ T9635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.742'. [ 189.623239][ T9645] netlink: 20 bytes leftover after parsing attributes in process `syz.2.744'. [ 189.627619][ T9385] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 189.666805][ T9385] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 189.699527][ T9385] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 189.766613][ T9385] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 190.154721][ T9665] vlan3: entered promiscuous mode [ 190.159997][ T9665] vlan3: entered allmulticast mode [ 190.165434][ T9665] hsr_slave_1: entered allmulticast mode [ 190.337207][ T9385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.435437][ T9385] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.472936][ T9381] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 190.485700][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.492934][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.503507][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.510672][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.524366][ T9381] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 190.567524][ T9381] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 190.588581][ T9381] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 190.799395][ T9381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.867225][ T9381] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.905556][ T6734] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.912835][ T6734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.941837][ T2988] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.949055][ T2988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.118151][ T9385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.311161][ T9385] veth0_vlan: entered promiscuous mode [ 191.375269][ T9385] veth1_vlan: entered promiscuous mode [ 191.453323][ T9703] netlink: 52 bytes leftover after parsing attributes in process `syz.4.755'. [ 191.516844][ T9385] veth0_macvtap: entered promiscuous mode [ 191.617874][ T9381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.649275][ T9385] veth1_macvtap: entered promiscuous mode [ 191.695174][ T9385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.728034][ T9385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.746325][ T9385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.759633][ T9385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.777632][ T9385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.875161][ T9713] IPv6: NLM_F_CREATE should be specified when creating new route [ 191.922679][ T9385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.955493][ T9385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.969708][ T9385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.985902][ T9385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.019804][ T9385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.035781][ T9381] veth0_vlan: entered promiscuous mode [ 192.061294][ T9722] netlink: 24 bytes leftover after parsing attributes in process `syz.3.760'. [ 192.066378][ T9385] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.077335][ T9725] netlink: 'syz.2.762': attribute type 2 has an invalid length. [ 192.093714][ T9385] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.103276][ T9385] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.112575][ T9385] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.130781][ T9381] veth1_vlan: entered promiscuous mode [ 192.141727][ T9725] netlink: 'syz.2.762': attribute type 1 has an invalid length. [ 192.276034][ T9381] veth0_macvtap: entered promiscuous mode [ 192.339903][ T9381] veth1_macvtap: entered promiscuous mode [ 192.383883][ T2988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.407839][ T2988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.481170][ T9381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.504283][ T9381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.523200][ T9381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.536902][ T9381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.547819][ T9381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.559399][ T9381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.572748][ T9381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.594322][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.598939][ T9381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.614768][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.618453][ T9381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.634090][ T9381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.645342][ T9381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.655976][ T9381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.668986][ T9381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.681672][ T9381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.737861][ T9381] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.751125][ T9381] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.783176][ T9381] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.811411][ T9381] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.046025][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.089456][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.111898][ T9743] netlink: 76 bytes leftover after parsing attributes in process `syz.4.767'. [ 193.223973][ T9750] netlink: 24 bytes leftover after parsing attributes in process `syz.3.769'. [ 193.242230][ T6734] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.250219][ T6734] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.368901][ T5883] IPVS: starting estimator thread 0... [ 193.455247][ T9759] netlink: 'syz.4.770': attribute type 10 has an invalid length. [ 193.471602][ T9755] IPVS: using max 20 ests per chain, 48000 per kthread [ 193.515146][ T9759] batman_adv: batadv0: Adding interface: wlan0 [ 193.551574][ T9759] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.607407][ T9759] batman_adv: batadv0: Interface activated: wlan0 [ 193.764961][ T9771] netlink: 'syz.3.771': attribute type 3 has an invalid length. [ 193.793986][ T9771] netlink: 'syz.3.771': attribute type 1 has an invalid length. [ 193.797246][ T6734] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.969985][ T6734] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.115363][ T6734] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.259360][ T6734] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.564603][ T6734] bridge_slave_1: left allmulticast mode [ 194.570427][ T6734] bridge_slave_1: left promiscuous mode [ 194.603209][ T6734] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.615049][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.622481][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.645416][ T6734] bridge_slave_0: left allmulticast mode [ 194.651160][ T6734] bridge_slave_0: left promiscuous mode [ 194.671600][ T6734] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.952085][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 194.960664][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 194.997594][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 195.019116][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 195.042335][ T5847] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 195.051442][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 195.285918][ T6734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.297124][ T6734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.312549][ T6734] bond0 (unregistering): Released all slaves [ 195.711754][ T9796] chnl_net:caif_netlink_parms(): no params data found [ 195.929420][ T9825] netlink: 48 bytes leftover after parsing attributes in process `syz.4.777'. [ 196.251691][ T9839] sctp: [Deprecated]: syz.3.780 (pid 9839) Use of int in max_burst socket option. [ 196.251691][ T9839] Use struct sctp_assoc_value instead [ 196.283311][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 196.295175][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 196.304370][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 196.315956][ T9796] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.325217][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 196.333256][ T5847] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 196.340713][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 196.396957][ T9796] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.443281][ T9796] bridge_slave_0: entered allmulticast mode [ 196.475605][ T9796] bridge_slave_0: entered promiscuous mode [ 196.494216][ T9796] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.516696][ T9796] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.530544][ T9796] bridge_slave_1: entered allmulticast mode [ 196.549995][ T9796] bridge_slave_1: entered promiscuous mode [ 196.694831][ T6734] hsr_slave_0: left promiscuous mode [ 196.714664][ T6734] hsr_slave_1: left promiscuous mode [ 196.741504][ T6734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.749223][ T6734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.777964][ T6734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.788971][ T6734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.801825][ T9862] ip6t_srh: unknown srh match flags 536B [ 196.836425][ T6734] veth1_macvtap: left promiscuous mode [ 196.851937][ T6734] veth0_macvtap: left promiscuous mode [ 196.857814][ T6734] veth1_vlan: left promiscuous mode [ 196.870127][ T6734] veth0_vlan: left promiscuous mode [ 196.950777][ T9867] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:20003 [ 197.092139][ T5845] Bluetooth: hci0: command tx timeout [ 197.654027][ T6734] team0 (unregistering): Port device team_slave_1 removed [ 197.707191][ T6734] team0 (unregistering): Port device team_slave_0 removed [ 198.312481][ T9796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.367071][ T9886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.788'. [ 198.391927][ T9884] hsr0: entered promiscuous mode [ 198.404737][ T9886] hsr_slave_0: left promiscuous mode [ 198.435641][ T9886] hsr_slave_1: left promiscuous mode [ 198.452290][ T5845] Bluetooth: hci1: command tx timeout [ 198.481844][ T9886] hsr0 (unregistering): left promiscuous mode [ 198.497653][ T9796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.579158][ T9888] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 198.589625][ T9888] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 198.670855][ T9796] team0: Port device team_slave_0 added [ 198.730973][ T9796] team0: Port device team_slave_1 added [ 198.857486][ T9796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.884923][ T9796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.948796][ T9796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.968092][ T9907] netlink: 256 bytes leftover after parsing attributes in process `syz.2.794'. [ 198.998393][ T9796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.011212][ T9796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.049427][ T9796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.172147][ T5845] Bluetooth: hci0: command tx timeout [ 199.298955][ T9796] hsr_slave_0: entered promiscuous mode [ 199.319266][ T9796] hsr_slave_1: entered promiscuous mode [ 199.470255][ T9925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.796'. [ 199.499788][ T9925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.796'. [ 199.502900][ T9836] chnl_net:caif_netlink_parms(): no params data found [ 199.554459][ T9928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.797'. [ 199.628211][ T9928] netlink: 24 bytes leftover after parsing attributes in process `syz.2.797'. [ 199.656608][ T9928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.797'. [ 199.861038][ T6734] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.909401][ T9930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.797'. [ 199.974974][ T9937] netlink: 132 bytes leftover after parsing attributes in process `syz.4.800'. [ 199.985715][ T9939] netlink: 'syz.4.800': attribute type 13 has an invalid length. [ 200.002070][ T9937] netlink: 'syz.4.800': attribute type 8 has an invalid length. [ 200.115097][ T6734] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.372940][ T6734] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.393956][ T9836] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.402552][ T9836] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.409891][ T9836] bridge_slave_0: entered allmulticast mode [ 200.417640][ T9836] bridge_slave_0: entered promiscuous mode [ 200.507075][ T9954] netlink: 'syz.4.805': attribute type 7 has an invalid length. [ 200.532025][ T5839] Bluetooth: hci1: command tx timeout [ 200.616720][ T6734] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.667275][ T9836] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.679066][ T9836] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.687331][ T9836] bridge_slave_1: entered allmulticast mode [ 200.702816][ T9836] bridge_slave_1: entered promiscuous mode [ 200.802740][ T9965] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.887325][ T9836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.998199][ T9836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.063232][ T9987] __nla_validate_parse: 2 callbacks suppressed [ 201.063256][ T9987] netlink: 80 bytes leftover after parsing attributes in process `syz.3.810'. [ 201.251827][ T5839] Bluetooth: hci0: command tx timeout [ 201.339811][ T9836] team0: Port device team_slave_0 added [ 201.352963][ T9836] team0: Port device team_slave_1 added [ 201.557135][T10001] netlink: 20 bytes leftover after parsing attributes in process `syz.3.813'. [ 201.679182][T10003] netlink: 72 bytes leftover after parsing attributes in process `syz.3.813'. [ 201.816103][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 201.822763][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 201.830407][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 202.611756][ T5148] Bluetooth: hci1: command tx timeout [ 203.335170][ T5148] Bluetooth: hci0: command tx timeout [ 203.677358][ T6734] bridge_slave_1: left allmulticast mode [ 203.684684][ T6734] bridge_slave_1: left promiscuous mode [ 203.690449][ T6734] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.719231][ T6734] bridge_slave_0: left allmulticast mode [ 203.731715][ T6734] bridge_slave_0: left promiscuous mode [ 203.747173][ T6734] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.170229][ T6734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.185289][ T6734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.198607][ T6734] bond0 (unregistering): Released all slaves [ 204.210079][T10002] netlink: 132 bytes leftover after parsing attributes in process `syz.4.814'. [ 204.375614][ T9836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.406989][ T9836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.439783][ T9836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.496929][T10016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.818'. [ 204.513162][ T9836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.520526][ T9836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.549407][ T9836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.637576][T10016] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 204.700134][ T5148] Bluetooth: hci1: command tx timeout [ 204.778968][ T9836] hsr_slave_0: entered promiscuous mode [ 204.812666][ T9836] hsr_slave_1: entered promiscuous mode [ 204.818992][ T9836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.878014][ T9836] Cannot create hsr debugfs directory [ 204.984984][ T9796] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 205.019091][T10033] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 205.127239][ T9796] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 205.154069][ T9796] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 205.234568][ T6734] hsr_slave_0: left promiscuous mode [ 205.251358][ T6734] hsr_slave_1: left promiscuous mode [ 205.269273][ T6734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.277452][ T6734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.289682][ T6734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.301510][ T6734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.346948][ T6734] veth1_macvtap: left promiscuous mode [ 205.353046][ T6734] veth0_macvtap: left promiscuous mode [ 205.358835][ T6734] veth1_vlan: left promiscuous mode [ 205.364554][ T6734] veth0_vlan: left promiscuous mode [ 205.854739][T10053] openvswitch: netlink: IP tunnel dst address not specified [ 206.075364][ T6734] team0 (unregistering): Port device team_slave_1 removed [ 206.121055][ T6734] team0 (unregistering): Port device team_slave_0 removed [ 206.615785][ T9796] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 207.172304][ T9796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.358910][ T9796] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.453114][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.460431][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.581153][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.589147][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.720530][ T9796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.923267][T10103] netlink: 29 bytes leftover after parsing attributes in process `syz.4.834'. [ 207.964980][ T9836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 208.034629][ T9836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 208.127808][ T9836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 208.177733][ T9836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 208.447995][T10128] netlink: 24 bytes leftover after parsing attributes in process `syz.4.839'. [ 208.485932][T10128] netlink: 'syz.4.839': attribute type 1 has an invalid length. [ 208.528189][ T9796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.605197][ T9836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.686518][ T9836] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.741519][ T6739] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.748780][ T6739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.810946][ T9796] veth0_vlan: entered promiscuous mode [ 208.834952][ T6739] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.843133][ T6739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.923868][T10139] netlink: 'syz.4.841': attribute type 12 has an invalid length. [ 208.938799][ T9796] veth1_vlan: entered promiscuous mode [ 208.983775][T10142] xt_limit: Overflow, try lower: 0/0 [ 208.999321][T10138] netlink: 'syz.4.841': attribute type 12 has an invalid length. [ 209.058647][T10146] netlink: 20 bytes leftover after parsing attributes in process `syz.3.842'. [ 209.252156][ T9796] veth0_macvtap: entered promiscuous mode [ 209.289835][ T9796] veth1_macvtap: entered promiscuous mode [ 209.329181][ T9796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.406359][ T9796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.434548][ T9796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.458267][ T9796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.514092][ T9796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.560645][ T9796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.571899][T10165] netlink: 'syz.4.847': attribute type 1 has an invalid length. [ 209.596639][ T9796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.627039][ T9796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.648390][ T9796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.678603][ T9796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.754182][ T9796] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.785667][ T9796] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.806046][ T9796] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.826381][ T9796] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.917513][ T9836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.007665][T10188] netlink: 228 bytes leftover after parsing attributes in process `syz.4.851'. [ 210.380665][ T9796] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 210.393474][ T9796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.442409][ T9836] veth0_vlan: entered promiscuous mode [ 210.460374][ T9836] veth1_vlan: entered promiscuous mode [ 210.533939][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.549583][ T9836] veth0_macvtap: entered promiscuous mode [ 210.576937][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.585514][T10200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.853'. [ 210.592406][ T9836] veth1_macvtap: entered promiscuous mode [ 210.689465][ T9836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.735525][ T9836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.756143][ T9836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.777998][ T9836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.790549][T10212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.856'. [ 210.819883][ T9836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.838856][ T9836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.870258][ T9836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.905221][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.855'. [ 210.925744][T10206] batadv_slave_0: entered promiscuous mode [ 210.996979][ T6739] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.997881][ T9836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.009772][ T6739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.079170][ T9836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.121718][ T9836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.153764][T10225] netlink: 52 bytes leftover after parsing attributes in process `syz.3.857'. [ 211.161526][ T9836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.205111][ T9836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.230406][ T9836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.247971][ T9836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.322418][ T9836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.340606][ T9836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.360722][ T9836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.382587][ T9836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.457696][T10234] netlink: 64 bytes leftover after parsing attributes in process `syz.4.859'. [ 211.561952][T10234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.582476][T10234] batadv_slave_1: entered promiscuous mode [ 211.843140][T10245] netlink: 28 bytes leftover after parsing attributes in process `syz.2.861'. [ 211.932617][ T9836] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 211.942614][ T9836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.148098][ T6739] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.296481][ T2988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.314797][ T2988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.337484][ T6739] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.382687][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.395883][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.424629][ T6739] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.525902][ T6739] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.620489][T10192] ------------[ cut here ]------------ [ 212.626712][T10192] refcount_t: underflow; use-after-free. [ 212.633037][T10192] WARNING: CPU: 1 PID: 10192 at lib/refcount.c:28 refcount_warn_saturate+0x15a/0x1d0 [ 212.642949][T10192] Modules linked in: [ 212.647242][T10192] CPU: 1 UID: 0 PID: 10192 Comm: kbnepd ÖŒ^ávˆ Not tainted 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0 [ 212.658501][T10192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 212.668886][T10192] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 212.675338][T10192] Code: 00 b6 80 8c e8 07 11 8c fc 90 0f 0b 90 90 eb 99 e8 4b 54 cc fc c6 05 a4 8a 31 0b 01 90 48 c7 c7 60 b6 80 8c e8 e7 10 8c fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 28 54 cc fc c6 05 7e 8a 31 0b 01 90 [ 212.695416][T10192] RSP: 0000:ffffc90002ed7720 EFLAGS: 00010246 [ 212.701607][T10192] RAX: 4b1c04ca62464300 RBX: ffff88807dc81878 RCX: ffff88806eeb9e00 [ 212.709611][T10192] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 212.717689][T10192] RBP: 0000000000000003 R08: ffffffff81819e52 R09: fffffbfff1d3a69c [ 212.726039][T10192] R10: dffffc0000000000 R11: fffffbfff1d3a69c R12: ffff88807dc81860 [ 212.734207][T10192] R13: 1ffff1100fb9030c R14: ffff88807dc81860 R15: ffffffff8638d000 [ 212.742600][T10192] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 212.751700][T10192] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 212.758342][T10192] CR2: 00007fc8874f70a0 CR3: 0000000065774000 CR4: 00000000003526f0 [ 212.766571][T10192] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 212.774886][T10192] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 212.782988][T10192] Call Trace: [ 212.786301][T10192] [ 212.789256][T10192] ? __warn+0x165/0x4d0 [ 212.793502][T10192] ? refcount_warn_saturate+0x15a/0x1d0 [ 212.799156][T10192] ? report_bug+0x2b3/0x500 [ 212.803770][T10192] ? refcount_warn_saturate+0x15a/0x1d0 [ 212.809356][T10192] ? handle_bug+0x60/0x90 [ 212.813795][T10192] ? exc_invalid_op+0x1a/0x50 [ 212.818648][T10192] ? asm_exc_invalid_op+0x1a/0x20 [ 212.823866][T10192] ? __pfx_klist_children_put+0x10/0x10 [ 212.829648][T10192] ? __warn_printk+0x292/0x360 [ 212.834765][T10192] ? refcount_warn_saturate+0x15a/0x1d0 [ 212.840345][T10192] klist_dec_and_del+0x3ec/0x3f0 [ 212.845730][T10192] ? __pfx_klist_children_put+0x10/0x10 [ 212.851539][T10192] klist_del+0xa7/0x110 [ 212.855735][T10192] device_del+0x2c9/0x9b0 [ 212.860104][T10192] ? __pfx_device_del+0x10/0x10 [ 212.865052][T10192] ? netdev_unregister_kobject+0x178/0x250 [ 212.871109][T10192] unregister_netdevice_many_notify+0x19b4/0x1f10 [ 212.878013][T10192] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 212.884901][T10192] ? trace_contention_end+0x3c/0x120 [ 212.890249][T10192] ? __mutex_lock+0x397/0x1010 [ 212.895269][T10192] ? rtnl_net_dev_lock+0x271/0x320 [ 212.900497][T10192] ? __pfx___mutex_lock+0x10/0x10 [ 212.905759][T10192] ? __pfx_lock_release+0x10/0x10 [ 212.910929][T10192] unregister_netdevice_queue+0x303/0x370 [ 212.916816][T10192] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 212.923472][T10192] ? rtnl_net_dev_lock+0x37/0x320 [ 212.928670][T10192] ? rtnl_net_dev_lock+0x302/0x320 [ 212.934262][T10192] ? rtnl_net_dev_lock+0x37/0x320 [ 212.939349][T10192] unregister_netdev+0x1f/0x60 [ 212.944248][T10192] bnep_session+0x2e4e/0x3040 [ 212.948986][T10192] ? __pfx_bnep_session+0x10/0x10 [ 212.954204][T10192] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 212.960159][T10192] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 212.966646][T10192] ? __pfx_woken_wake_function+0x10/0x10 [ 212.972584][T10192] ? __kthread_parkme+0x169/0x1d0 [ 212.977700][T10192] ? __pfx_bnep_session+0x10/0x10 [ 212.983105][T10192] kthread+0x7a9/0x920 [ 212.987211][T10192] ? __pfx_kthread+0x10/0x10 [ 212.992000][T10192] ? __pfx_bnep_session+0x10/0x10 [ 212.997097][T10192] ? __pfx_kthread+0x10/0x10 [ 213.001833][T10192] ? __pfx_kthread+0x10/0x10 [ 213.006739][T10192] ? __pfx_kthread+0x10/0x10 [ 213.011705][T10192] ? _raw_spin_unlock_irq+0x23/0x50 [ 213.016971][T10192] ? lockdep_hardirqs_on+0x99/0x150 [ 213.022289][T10192] ? __pfx_kthread+0x10/0x10 [ 213.026900][T10192] ret_from_fork+0x4b/0x80 [ 213.031466][T10192] ? __pfx_kthread+0x10/0x10 [ 213.036081][T10192] ret_from_fork_asm+0x1a/0x30 [ 213.040904][T10192] [ 213.044049][T10192] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 213.051435][T10192] CPU: 1 UID: 0 PID: 10192 Comm: kbnepd ÖŒ^ávˆ Not tainted 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0 [ 213.062788][T10192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 213.072851][T10192] Call Trace: [ 213.076139][T10192] [ 213.079112][T10192] dump_stack_lvl+0x241/0x360 [ 213.084039][T10192] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.089319][T10192] ? __pfx__printk+0x10/0x10 [ 213.094125][T10192] ? _printk+0xd5/0x120 [ 213.098337][T10192] ? __init_begin+0x41000/0x41000 [ 213.103526][T10192] ? vscnprintf+0x5d/0x90 [ 213.107903][T10192] panic+0x349/0x880 [ 213.111835][T10192] ? __warn+0x174/0x4d0 [ 213.116035][T10192] ? __pfx_panic+0x10/0x10 [ 213.120540][T10192] ? ret_from_fork_asm+0x1a/0x30 [ 213.126752][T10192] __warn+0x344/0x4d0 [ 213.130869][T10192] ? refcount_warn_saturate+0x15a/0x1d0 [ 213.136456][T10192] report_bug+0x2b3/0x500 [ 213.140812][T10192] ? refcount_warn_saturate+0x15a/0x1d0 [ 213.146558][T10192] handle_bug+0x60/0x90 [ 213.150749][T10192] exc_invalid_op+0x1a/0x50 [ 213.155275][T10192] asm_exc_invalid_op+0x1a/0x20 [ 213.160145][T10192] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 213.166416][T10192] Code: 00 b6 80 8c e8 07 11 8c fc 90 0f 0b 90 90 eb 99 e8 4b 54 cc fc c6 05 a4 8a 31 0b 01 90 48 c7 c7 60 b6 80 8c e8 e7 10 8c fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 28 54 cc fc c6 05 7e 8a 31 0b 01 90 [ 213.186606][T10192] RSP: 0000:ffffc90002ed7720 EFLAGS: 00010246 [ 213.192826][T10192] RAX: 4b1c04ca62464300 RBX: ffff88807dc81878 RCX: ffff88806eeb9e00 [ 213.200856][T10192] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 213.209033][T10192] RBP: 0000000000000003 R08: ffffffff81819e52 R09: fffffbfff1d3a69c [ 213.217114][T10192] R10: dffffc0000000000 R11: fffffbfff1d3a69c R12: ffff88807dc81860 [ 213.225097][T10192] R13: 1ffff1100fb9030c R14: ffff88807dc81860 R15: ffffffff8638d000 [ 213.233442][T10192] ? __pfx_klist_children_put+0x10/0x10 [ 213.239124][T10192] ? __warn_printk+0x292/0x360 [ 213.244119][T10192] klist_dec_and_del+0x3ec/0x3f0 [ 213.249623][T10192] ? __pfx_klist_children_put+0x10/0x10 [ 213.255241][T10192] klist_del+0xa7/0x110 [ 213.259529][T10192] device_del+0x2c9/0x9b0 [ 213.263907][T10192] ? __pfx_device_del+0x10/0x10 [ 213.268811][T10192] ? netdev_unregister_kobject+0x178/0x250 [ 213.274652][T10192] unregister_netdevice_many_notify+0x19b4/0x1f10 [ 213.281136][T10192] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 213.287984][T10192] ? trace_contention_end+0x3c/0x120 [ 213.293331][T10192] ? __mutex_lock+0x397/0x1010 [ 213.298245][T10192] ? rtnl_net_dev_lock+0x271/0x320 [ 213.303517][T10192] ? __pfx___mutex_lock+0x10/0x10 [ 213.308694][T10192] ? __pfx_lock_release+0x10/0x10 [ 213.313781][T10192] unregister_netdevice_queue+0x303/0x370 [ 213.319613][T10192] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 213.325898][T10192] ? rtnl_net_dev_lock+0x37/0x320 [ 213.330981][T10192] ? rtnl_net_dev_lock+0x302/0x320 [ 213.336125][T10192] ? rtnl_net_dev_lock+0x37/0x320 [ 213.341208][T10192] unregister_netdev+0x1f/0x60 [ 213.346208][T10192] bnep_session+0x2e4e/0x3040 [ 213.350950][T10192] ? __pfx_bnep_session+0x10/0x10 [ 213.356277][T10192] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 213.362231][T10192] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 213.368699][T10192] ? __pfx_woken_wake_function+0x10/0x10 [ 213.374369][T10192] ? __kthread_parkme+0x169/0x1d0 [ 213.379440][T10192] ? __pfx_bnep_session+0x10/0x10 [ 213.384500][T10192] kthread+0x7a9/0x920 [ 213.388623][T10192] ? __pfx_kthread+0x10/0x10 [ 213.393303][T10192] ? __pfx_bnep_session+0x10/0x10 [ 213.398472][T10192] ? __pfx_kthread+0x10/0x10 [ 213.403101][T10192] ? __pfx_kthread+0x10/0x10 [ 213.407745][T10192] ? __pfx_kthread+0x10/0x10 [ 213.412456][T10192] ? _raw_spin_unlock_irq+0x23/0x50 [ 213.417666][T10192] ? lockdep_hardirqs_on+0x99/0x150 [ 213.422876][T10192] ? __pfx_kthread+0x10/0x10 [ 213.427527][T10192] ret_from_fork+0x4b/0x80 [ 213.431993][T10192] ? __pfx_kthread+0x10/0x10 [ 213.436613][T10192] ret_from_fork_asm+0x1a/0x30 [ 213.441403][T10192] [ 214.572834][T10192] Shutting down cpus with NMI [ 214.577903][T10192] Kernel Offset: disabled [ 214.582484][T10192] Rebooting in 86400 seconds..