last executing test programs: 1m39.32756892s ago: executing program 3 (id=47): r0 = socket$kcm(0x2, 0x1000000000000005, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x80, 0x40, 0x4f, 0x5, {{0xd, 0x4, 0x0, 0x1c, 0x34, 0x67, 0x0, 0x4, 0x2f, 0x0, @remote, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0xc2, 0x3, 0x6, [{@broadcast}, {@rand_addr=0x64010101, 0x1}, {@multicast2, 0xa46}]}, @noop]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@getqdisc={0x44, 0x26, 0x4, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6, 0x6}, {0x2, 0x7}, {0x9, 0xffff}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x200060c4}, 0x20004000) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000c40)="56ae", 0x2}], 0x1, &(0x7f0000000b80)=[@ip_tos_u8={{0x11, 0x34000, 0x11}}, @ip_retopts={{0x10, 0x84}}], 0x28}, 0x4dc) 1m23.667021532s ago: executing program 3 (id=47): r0 = socket$kcm(0x2, 0x1000000000000005, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x80, 0x40, 0x4f, 0x5, {{0xd, 0x4, 0x0, 0x1c, 0x34, 0x67, 0x0, 0x4, 0x2f, 0x0, @remote, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0xc2, 0x3, 0x6, [{@broadcast}, {@rand_addr=0x64010101, 0x1}, {@multicast2, 0xa46}]}, @noop]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@getqdisc={0x44, 0x26, 0x4, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6, 0x6}, {0x2, 0x7}, {0x9, 0xffff}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x200060c4}, 0x20004000) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000c40)="56ae", 0x2}], 0x1, &(0x7f0000000b80)=[@ip_tos_u8={{0x11, 0x34000, 0x11}}, @ip_retopts={{0x10, 0x84}}], 0x28}, 0x4dc) 1m23.161029472s ago: executing program 0 (id=714): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_team\x00', &(0x7f0000000080)=@ethtool_modinfo={0x42, 0x8, 0x8}}) 1m21.914866156s ago: executing program 4 (id=1072): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000003c00072301fcffffff00000003"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001e004b05000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r0], 0x28}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001e004b05000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r0], 0x28}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x140c, 0x400, 0x70bd2b, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x20001840) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x38, 0x5, 0x3fe00, 0x0, 0xffffffffffffffff, 0x9000000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3, 0x2, @void, @value, @void, @value}, 0x50) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000b00)=@filter={'filter\x00', 0x42, 0x4, 0x368, 0xffffffff, 0x0, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x4ca, 0xb, [0x10, 0x2a, 0x36, 0xe, 0x6, 0xf, 0xb, 0x22, 0x39, 0x12, 0x17, 0x36, 0x6, 0xe, 0xa, 0x10], 0x0, 0xb, 0x681}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x4, 0x4, 0x4, 0x1, 0x4, 0x7], 0x0, 0x2}}}, @common=@ttl={{0x28}, {0x0, 0x80}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) (async) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000b00)=@filter={'filter\x00', 0x42, 0x4, 0x368, 0xffffffff, 0x0, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x4ca, 0xb, [0x10, 0x2a, 0x36, 0xe, 0x6, 0xf, 0xb, 0x22, 0x39, 0x12, 0x17, 0x36, 0x6, 0xe, 0xa, 0x10], 0x0, 0xb, 0x681}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x4, 0x4, 0x4, 0x1, 0x4, 0x7], 0x0, 0x2}}}, @common=@ttl={{0x28}, {0x0, 0x80}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0x42, 0x4, 0x328, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'pimreg\x00', 'syz_tun\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}, 0x6}, @common=@unspec=@devgroup={{0x38}}]}, @REJECT={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "aae9"}}, @common=@ttl={{0x28}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x4, 0x2, 0x5}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x30a8, 0x2ab, 0x2, 0x20010, r3, 0x7ff, '\x00', 0x0, r5, 0x0, 0x0, 0x0, 0x9, @void, @value, @void, @value}, 0x50) r7 = socket$netlink(0x10, 0x3, 0x12) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r5) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000f00)={0x330, r8, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xad}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x22}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xc68, @private2, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @empty}}}}]}, @TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x96}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x846d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2000}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x160, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x102, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "9181b331a57093c9ad1cee5b63718d474adbc2559c3edf612be992c400f4cf14209c30"}}]}]}, 0x330}, 0x1, 0x0, 0x0, 0x40004}, 0x240008c0) (async) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000f00)={0x330, r8, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xad}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x22}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xc68, @private2, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @empty}}}}]}, @TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x96}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x846d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2000}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x160, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x102, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "9181b331a57093c9ad1cee5b63718d474adbc2559c3edf612be992c400f4cf14209c30"}}]}]}, 0x330}, 0x1, 0x0, 0x0, 0x40004}, 0x240008c0) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r12) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r14, @ANYBLOB="5b00330080000000ffffffffffff0802110000005050505050500000000000000000000000000000000602020202020203010004060000000000000104083c040002000072060303030303037606000000000000000400cd00"], 0x7c}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r14, @ANYBLOB="5b00330080000000ffffffffffff0802110000005050505050500000000000000000000000000000000602020202020203010004060000000000000104083c040002000072060303030303037606000000000000000400cd00"], 0x7c}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x38, r11, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x0, 0x5f}}}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x40}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xe}]}, 0x38}, 0x1, 0x0, 0x0, 0x200040d4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x25, @void, @value}, 0x94) 1m8.556371517s ago: executing program 0 (id=714): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_team\x00', &(0x7f0000000080)=@ethtool_modinfo={0x42, 0x8, 0x8}}) 1m7.674387084s ago: executing program 4 (id=1072): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000003c00072301fcffffff00000003"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001e004b05000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r0], 0x28}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001e004b05000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r0], 0x28}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x140c, 0x400, 0x70bd2b, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x20001840) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x38, 0x5, 0x3fe00, 0x0, 0xffffffffffffffff, 0x9000000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3, 0x2, @void, @value, @void, @value}, 0x50) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000b00)=@filter={'filter\x00', 0x42, 0x4, 0x368, 0xffffffff, 0x0, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x4ca, 0xb, [0x10, 0x2a, 0x36, 0xe, 0x6, 0xf, 0xb, 0x22, 0x39, 0x12, 0x17, 0x36, 0x6, 0xe, 0xa, 0x10], 0x0, 0xb, 0x681}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x4, 0x4, 0x4, 0x1, 0x4, 0x7], 0x0, 0x2}}}, @common=@ttl={{0x28}, {0x0, 0x80}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) (async) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000b00)=@filter={'filter\x00', 0x42, 0x4, 0x368, 0xffffffff, 0x0, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x4ca, 0xb, [0x10, 0x2a, 0x36, 0xe, 0x6, 0xf, 0xb, 0x22, 0x39, 0x12, 0x17, 0x36, 0x6, 0xe, 0xa, 0x10], 0x0, 0xb, 0x681}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x4, 0x4, 0x4, 0x1, 0x4, 0x7], 0x0, 0x2}}}, @common=@ttl={{0x28}, {0x0, 0x80}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0x42, 0x4, 0x328, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'pimreg\x00', 'syz_tun\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}, 0x6}, @common=@unspec=@devgroup={{0x38}}]}, @REJECT={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "aae9"}}, @common=@ttl={{0x28}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x4, 0x2, 0x5}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x30a8, 0x2ab, 0x2, 0x20010, r3, 0x7ff, '\x00', 0x0, r5, 0x0, 0x0, 0x0, 0x9, @void, @value, @void, @value}, 0x50) r7 = socket$netlink(0x10, 0x3, 0x12) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r5) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000f00)={0x330, r8, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xad}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x22}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xc68, @private2, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @empty}}}}]}, @TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x96}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x846d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2000}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x160, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x102, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "9181b331a57093c9ad1cee5b63718d474adbc2559c3edf612be992c400f4cf14209c30"}}]}]}, 0x330}, 0x1, 0x0, 0x0, 0x40004}, 0x240008c0) (async) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000f00)={0x330, r8, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xad}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x22}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xc68, @private2, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @empty}}}}]}, @TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x96}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x846d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2000}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x160, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x102, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "9181b331a57093c9ad1cee5b63718d474adbc2559c3edf612be992c400f4cf14209c30"}}]}]}, 0x330}, 0x1, 0x0, 0x0, 0x40004}, 0x240008c0) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r12) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r14, @ANYBLOB="5b00330080000000ffffffffffff0802110000005050505050500000000000000000000000000000000602020202020203010004060000000000000104083c040002000072060303030303037606000000000000000400cd00"], 0x7c}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r14, @ANYBLOB="5b00330080000000ffffffffffff0802110000005050505050500000000000000000000000000000000602020202020203010004060000000000000104083c040002000072060303030303037606000000000000000400cd00"], 0x7c}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x38, r11, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x0, 0x5f}}}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x40}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xe}]}, 0x38}, 0x1, 0x0, 0x0, 0x200040d4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x25, @void, @value}, 0x94) 1m7.31109171s ago: executing program 3 (id=47): r0 = socket$kcm(0x2, 0x1000000000000005, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x80, 0x40, 0x4f, 0x5, {{0xd, 0x4, 0x0, 0x1c, 0x34, 0x67, 0x0, 0x4, 0x2f, 0x0, @remote, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0xc2, 0x3, 0x6, [{@broadcast}, {@rand_addr=0x64010101, 0x1}, {@multicast2, 0xa46}]}, @noop]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@getqdisc={0x44, 0x26, 0x4, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6, 0x6}, {0x2, 0x7}, {0x9, 0xffff}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x200060c4}, 0x20004000) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000c40)="56ae", 0x2}], 0x1, &(0x7f0000000b80)=[@ip_tos_u8={{0x11, 0x34000, 0x11}}, @ip_retopts={{0x10, 0x84}}], 0x28}, 0x4dc) 52.464231226s ago: executing program 4 (id=1072): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000003c00072301fcffffff00000003"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001e004b05000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r0], 0x28}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001e004b05000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r0], 0x28}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x140c, 0x400, 0x70bd2b, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x20001840) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x38, 0x5, 0x3fe00, 0x0, 0xffffffffffffffff, 0x9000000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3, 0x2, @void, @value, @void, @value}, 0x50) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000b00)=@filter={'filter\x00', 0x42, 0x4, 0x368, 0xffffffff, 0x0, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x4ca, 0xb, [0x10, 0x2a, 0x36, 0xe, 0x6, 0xf, 0xb, 0x22, 0x39, 0x12, 0x17, 0x36, 0x6, 0xe, 0xa, 0x10], 0x0, 0xb, 0x681}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x4, 0x4, 0x4, 0x1, 0x4, 0x7], 0x0, 0x2}}}, @common=@ttl={{0x28}, {0x0, 0x80}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) (async) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000b00)=@filter={'filter\x00', 0x42, 0x4, 0x368, 0xffffffff, 0x0, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x4ca, 0xb, [0x10, 0x2a, 0x36, 0xe, 0x6, 0xf, 0xb, 0x22, 0x39, 0x12, 0x17, 0x36, 0x6, 0xe, 0xa, 0x10], 0x0, 0xb, 0x681}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x4, 0x4, 0x4, 0x1, 0x4, 0x7], 0x0, 0x2}}}, @common=@ttl={{0x28}, {0x0, 0x80}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0x42, 0x4, 0x328, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'pimreg\x00', 'syz_tun\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}, 0x6}, @common=@unspec=@devgroup={{0x38}}]}, @REJECT={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "aae9"}}, @common=@ttl={{0x28}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x4, 0x2, 0x5}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x30a8, 0x2ab, 0x2, 0x20010, r3, 0x7ff, '\x00', 0x0, r5, 0x0, 0x0, 0x0, 0x9, @void, @value, @void, @value}, 0x50) r7 = socket$netlink(0x10, 0x3, 0x12) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r5) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000f00)={0x330, r8, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xad}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x22}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xc68, @private2, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @empty}}}}]}, @TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x96}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x846d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2000}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x160, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x102, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "9181b331a57093c9ad1cee5b63718d474adbc2559c3edf612be992c400f4cf14209c30"}}]}]}, 0x330}, 0x1, 0x0, 0x0, 0x40004}, 0x240008c0) (async) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000f00)={0x330, r8, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xad}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x22}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xc68, @private2, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @empty}}}}]}, @TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x96}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x846d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2000}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x160, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x102, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "9181b331a57093c9ad1cee5b63718d474adbc2559c3edf612be992c400f4cf14209c30"}}]}]}, 0x330}, 0x1, 0x0, 0x0, 0x40004}, 0x240008c0) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r12) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r14, @ANYBLOB="5b00330080000000ffffffffffff0802110000005050505050500000000000000000000000000000000602020202020203010004060000000000000104083c040002000072060303030303037606000000000000000400cd00"], 0x7c}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r14, @ANYBLOB="5b00330080000000ffffffffffff0802110000005050505050500000000000000000000000000000000602020202020203010004060000000000000104083c040002000072060303030303037606000000000000000400cd00"], 0x7c}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x38, r11, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x0, 0x5f}}}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x40}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xe}]}, 0x38}, 0x1, 0x0, 0x0, 0x200040d4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x25, @void, @value}, 0x94) 51.823635807s ago: executing program 0 (id=714): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_team\x00', &(0x7f0000000080)=@ethtool_modinfo={0x42, 0x8, 0x8}}) 28.548242889s ago: executing program 4 (id=1072): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000003c00072301fcffffff00000003"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001e004b05000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r0], 0x28}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001e004b05000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r0], 0x28}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x140c, 0x400, 0x70bd2b, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x20001840) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x38, 0x5, 0x3fe00, 0x0, 0xffffffffffffffff, 0x9000000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3, 0x2, @void, @value, @void, @value}, 0x50) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000b00)=@filter={'filter\x00', 0x42, 0x4, 0x368, 0xffffffff, 0x0, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x4ca, 0xb, [0x10, 0x2a, 0x36, 0xe, 0x6, 0xf, 0xb, 0x22, 0x39, 0x12, 0x17, 0x36, 0x6, 0xe, 0xa, 0x10], 0x0, 0xb, 0x681}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x4, 0x4, 0x4, 0x1, 0x4, 0x7], 0x0, 0x2}}}, @common=@ttl={{0x28}, {0x0, 0x80}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) (async) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000b00)=@filter={'filter\x00', 0x42, 0x4, 0x368, 0xffffffff, 0x0, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x4ca, 0xb, [0x10, 0x2a, 0x36, 0xe, 0x6, 0xf, 0xb, 0x22, 0x39, 0x12, 0x17, 0x36, 0x6, 0xe, 0xa, 0x10], 0x0, 0xb, 0x681}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x4, 0x4, 0x4, 0x1, 0x4, 0x7], 0x0, 0x2}}}, @common=@ttl={{0x28}, {0x0, 0x80}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0x42, 0x4, 0x328, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'pimreg\x00', 'syz_tun\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}, 0x6}, @common=@unspec=@devgroup={{0x38}}]}, @REJECT={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "aae9"}}, @common=@ttl={{0x28}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x4, 0x2, 0x5}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x30a8, 0x2ab, 0x2, 0x20010, r3, 0x7ff, '\x00', 0x0, r5, 0x0, 0x0, 0x0, 0x9, @void, @value, @void, @value}, 0x50) r7 = socket$netlink(0x10, 0x3, 0x12) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r5) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000f00)={0x330, r8, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xad}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x22}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xc68, @private2, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @empty}}}}]}, @TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x96}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x846d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2000}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x160, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x102, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "9181b331a57093c9ad1cee5b63718d474adbc2559c3edf612be992c400f4cf14209c30"}}]}]}, 0x330}, 0x1, 0x0, 0x0, 0x40004}, 0x240008c0) (async) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000f00)={0x330, r8, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xad}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x22}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xc68, @private2, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @empty}}}}]}, @TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x96}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x846d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2000}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x160, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x102, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "9181b331a57093c9ad1cee5b63718d474adbc2559c3edf612be992c400f4cf14209c30"}}]}]}, 0x330}, 0x1, 0x0, 0x0, 0x40004}, 0x240008c0) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r12) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r14, @ANYBLOB="5b00330080000000ffffffffffff0802110000005050505050500000000000000000000000000000000602020202020203010004060000000000000104083c040002000072060303030303037606000000000000000400cd00"], 0x7c}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r14, @ANYBLOB="5b00330080000000ffffffffffff0802110000005050505050500000000000000000000000000000000602020202020203010004060000000000000104083c040002000072060303030303037606000000000000000400cd00"], 0x7c}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x38, r11, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x0, 0x5f}}}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x40}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xe}]}, 0x38}, 0x1, 0x0, 0x0, 0x200040d4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x25, @void, @value}, 0x94) 28.548192871s ago: executing program 0 (id=714): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_team\x00', &(0x7f0000000080)=@ethtool_modinfo={0x42, 0x8, 0x8}}) 28.548135831s ago: executing program 3 (id=47): r0 = socket$kcm(0x2, 0x1000000000000005, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x80, 0x40, 0x4f, 0x5, {{0xd, 0x4, 0x0, 0x1c, 0x34, 0x67, 0x0, 0x4, 0x2f, 0x0, @remote, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0xc2, 0x3, 0x6, [{@broadcast}, {@rand_addr=0x64010101, 0x1}, {@multicast2, 0xa46}]}, @noop]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@getqdisc={0x44, 0x26, 0x4, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6, 0x6}, {0x2, 0x7}, {0x9, 0xffff}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x200060c4}, 0x20004000) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000c40)="56ae", 0x2}], 0x1, &(0x7f0000000b80)=[@ip_tos_u8={{0x11, 0x34000, 0x11}}, @ip_retopts={{0x10, 0x84}}], 0x28}, 0x4dc) 28.548127774s ago: executing program 0 (id=714): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_team\x00', &(0x7f0000000080)=@ethtool_modinfo={0x42, 0x8, 0x8}}) 28.519735524s ago: executing program 3 (id=47): r0 = socket$kcm(0x2, 0x1000000000000005, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x80, 0x40, 0x4f, 0x5, {{0xd, 0x4, 0x0, 0x1c, 0x34, 0x67, 0x0, 0x4, 0x2f, 0x0, @remote, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0xc2, 0x3, 0x6, [{@broadcast}, {@rand_addr=0x64010101, 0x1}, {@multicast2, 0xa46}]}, @noop]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@getqdisc={0x44, 0x26, 0x4, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6, 0x6}, {0x2, 0x7}, {0x9, 0xffff}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x200060c4}, 0x20004000) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000c40)="56ae", 0x2}], 0x1, &(0x7f0000000b80)=[@ip_tos_u8={{0x11, 0x34000, 0x11}}, @ip_retopts={{0x10, 0x84}}], 0x28}, 0x4dc) 28.492247548s ago: executing program 4 (id=1072): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000003c00072301fcffffff00000003"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001e004b05000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r0], 0x28}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001e004b05000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r0], 0x28}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x140c, 0x400, 0x70bd2b, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x20001840) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x38, 0x5, 0x3fe00, 0x0, 0xffffffffffffffff, 0x9000000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3, 0x2, @void, @value, @void, @value}, 0x50) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000b00)=@filter={'filter\x00', 0x42, 0x4, 0x368, 0xffffffff, 0x0, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x4ca, 0xb, [0x10, 0x2a, 0x36, 0xe, 0x6, 0xf, 0xb, 0x22, 0x39, 0x12, 0x17, 0x36, 0x6, 0xe, 0xa, 0x10], 0x0, 0xb, 0x681}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x4, 0x4, 0x4, 0x1, 0x4, 0x7], 0x0, 0x2}}}, @common=@ttl={{0x28}, {0x0, 0x80}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) (async) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000b00)=@filter={'filter\x00', 0x42, 0x4, 0x368, 0xffffffff, 0x0, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x4ca, 0xb, [0x10, 0x2a, 0x36, 0xe, 0x6, 0xf, 0xb, 0x22, 0x39, 0x12, 0x17, 0x36, 0x6, 0xe, 0xa, 0x10], 0x0, 0xb, 0x681}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x4, 0x4, 0x4, 0x1, 0x4, 0x7], 0x0, 0x2}}}, @common=@ttl={{0x28}, {0x0, 0x80}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0x42, 0x4, 0x328, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'pimreg\x00', 'syz_tun\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}, 0x6}, @common=@unspec=@devgroup={{0x38}}]}, @REJECT={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "aae9"}}, @common=@ttl={{0x28}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x4, 0x2, 0x5}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x30a8, 0x2ab, 0x2, 0x20010, r3, 0x7ff, '\x00', 0x0, r5, 0x0, 0x0, 0x0, 0x9, @void, @value, @void, @value}, 0x50) r7 = socket$netlink(0x10, 0x3, 0x12) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r5) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000f00)={0x330, r8, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xad}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x22}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xc68, @private2, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @empty}}}}]}, @TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x96}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x846d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2000}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x160, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x102, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "9181b331a57093c9ad1cee5b63718d474adbc2559c3edf612be992c400f4cf14209c30"}}]}]}, 0x330}, 0x1, 0x0, 0x0, 0x40004}, 0x240008c0) (async) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000f00)={0x330, r8, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xad}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x22}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xc68, @private2, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @empty}}}}]}, @TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x96}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x846d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2000}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x160, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x102, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "9181b331a57093c9ad1cee5b63718d474adbc2559c3edf612be992c400f4cf14209c30"}}]}]}, 0x330}, 0x1, 0x0, 0x0, 0x40004}, 0x240008c0) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r12) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r14, @ANYBLOB="5b00330080000000ffffffffffff0802110000005050505050500000000000000000000000000000000602020202020203010004060000000000000104083c040002000072060303030303037606000000000000000400cd00"], 0x7c}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r14, @ANYBLOB="5b00330080000000ffffffffffff0802110000005050505050500000000000000000000000000000000602020202020203010004060000000000000104083c040002000072060303030303037606000000000000000400cd00"], 0x7c}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x38, r11, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x0, 0x5f}}}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x40}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xe}]}, 0x38}, 0x1, 0x0, 0x0, 0x200040d4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x25, @void, @value}, 0x94) 14.177701647s ago: executing program 3 (id=47): r0 = socket$kcm(0x2, 0x1000000000000005, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x80, 0x40, 0x4f, 0x5, {{0xd, 0x4, 0x0, 0x1c, 0x34, 0x67, 0x0, 0x4, 0x2f, 0x0, @remote, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0xc2, 0x3, 0x6, [{@broadcast}, {@rand_addr=0x64010101, 0x1}, {@multicast2, 0xa46}]}, @noop]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@getqdisc={0x44, 0x26, 0x4, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6, 0x6}, {0x2, 0x7}, {0x9, 0xffff}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x200060c4}, 0x20004000) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000c40)="56ae", 0x2}], 0x1, &(0x7f0000000b80)=[@ip_tos_u8={{0x11, 0x34000, 0x11}}, @ip_retopts={{0x10, 0x84}}], 0x28}, 0x4dc) 12.930989228s ago: executing program 0 (id=714): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_team\x00', &(0x7f0000000080)=@ethtool_modinfo={0x42, 0x8, 0x8}}) 11.804525808s ago: executing program 4 (id=1072): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000003c00072301fcffffff00000003"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001e004b05000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r0], 0x28}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001e004b05000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r0], 0x28}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x140c, 0x400, 0x70bd2b, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x20001840) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x38, 0x5, 0x3fe00, 0x0, 0xffffffffffffffff, 0x9000000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3, 0x2, @void, @value, @void, @value}, 0x50) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000b00)=@filter={'filter\x00', 0x42, 0x4, 0x368, 0xffffffff, 0x0, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x4ca, 0xb, [0x10, 0x2a, 0x36, 0xe, 0x6, 0xf, 0xb, 0x22, 0x39, 0x12, 0x17, 0x36, 0x6, 0xe, 0xa, 0x10], 0x0, 0xb, 0x681}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x4, 0x4, 0x4, 0x1, 0x4, 0x7], 0x0, 0x2}}}, @common=@ttl={{0x28}, {0x0, 0x80}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) (async) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000b00)=@filter={'filter\x00', 0x42, 0x4, 0x368, 0xffffffff, 0x0, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x4ca, 0xb, [0x10, 0x2a, 0x36, 0xe, 0x6, 0xf, 0xb, 0x22, 0x39, 0x12, 0x17, 0x36, 0x6, 0xe, 0xa, 0x10], 0x0, 0xb, 0x681}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x4, 0x4, 0x4, 0x1, 0x4, 0x7], 0x0, 0x2}}}, @common=@ttl={{0x28}, {0x0, 0x80}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0x42, 0x4, 0x328, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'pimreg\x00', 'syz_tun\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}, 0x6}, @common=@unspec=@devgroup={{0x38}}]}, @REJECT={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "aae9"}}, @common=@ttl={{0x28}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x4, 0x2, 0x5}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x30a8, 0x2ab, 0x2, 0x20010, r3, 0x7ff, '\x00', 0x0, r5, 0x0, 0x0, 0x0, 0x9, @void, @value, @void, @value}, 0x50) r7 = socket$netlink(0x10, 0x3, 0x12) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r5) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000f00)={0x330, r8, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xad}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x22}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xc68, @private2, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @empty}}}}]}, @TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x96}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x846d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2000}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x160, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x102, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "9181b331a57093c9ad1cee5b63718d474adbc2559c3edf612be992c400f4cf14209c30"}}]}]}, 0x330}, 0x1, 0x0, 0x0, 0x40004}, 0x240008c0) (async) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000f00)={0x330, r8, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xad}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x22}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xc68, @private2, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @empty}}}}]}, @TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x96}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x846d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2000}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x160, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x102, 0x3, "74328331ca9c0889efc9cee9d0920ce17a82e840fb2c8c987b1998cf6db7a1bc39cb78ac26846fcf75fbc42695747ff2c435637bb011220e0ce3b2ddb572c9b80ce96ca61b4b09210c061dd0f8e5aff7e6e7a54a6264609616fd55d068d5a43f3db82ec059144337f8ead5001100f4348d045a68e8a89c131d905f0c408993f7bb002aa8b0be076890584157d8d5efa52b88aa8cb68fe2eb3d31520a8806cb140a1df07eb29047a02ee5b1d23e52ca4efa75ccd1d3e1e1c214352df8212a731ac488294d49a3ac444231ede4bd8bda4b06aa8720bb83f993b74965f4216d99f5c47015b9cac9e3f1fd8f6cedd0116ce90a53e171d3b00c98852bd7762b8a"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "9181b331a57093c9ad1cee5b63718d474adbc2559c3edf612be992c400f4cf14209c30"}}]}]}, 0x330}, 0x1, 0x0, 0x0, 0x40004}, 0x240008c0) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r12) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r14, @ANYBLOB="5b00330080000000ffffffffffff0802110000005050505050500000000000000000000000000000000602020202020203010004060000000000000104083c040002000072060303030303037606000000000000000400cd00"], 0x7c}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r14, @ANYBLOB="5b00330080000000ffffffffffff0802110000005050505050500000000000000000000000000000000602020202020203010004060000000000000104083c040002000072060303030303037606000000000000000400cd00"], 0x7c}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x38, r11, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x0, 0x5f}}}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x40}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xe}]}, 0x38}, 0x1, 0x0, 0x0, 0x200040d4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x25, @void, @value}, 0x94) 1.17676244s ago: executing program 2 (id=1497): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1400, &(0x7f0000000080)=[{&(0x7f0000000040)="140000001d000b63d25a80648c2594f90524fc60", 0x14}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x4c, r4, 0x1, 0x0, 0x25dfdbfb, {0x41}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffecd}, {0x8, 0x87}}]}, 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r4, 0x20, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x44}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x3}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8048800}, 0x0) 1.176152583s ago: executing program 1 (id=1498): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x34}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x2c}}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f00000001c0)=0x80000002, 0x4) listen(r2, 0xea) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000000)=0x1) syz_emit_ethernet(0x13e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x108, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x1c, "9595f429ae08a565c9a41d413270a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c69205625466855101cf44d89d9f6ee47d77c0d4e53e34b67c542fc6f6f6c60139c43b78286f5bb8f4f11d164af24e2633a45bf4ed944b0ef6a7b7167f73cf54e78686ac09402659c29eb0ce380654c1bb0f61d255b1556b7a311096b7aab867396997ffab76abca01185b08d1e29ee14d8fe61245487104b1c5205c6adc794ba413b92d2d208b86f40983c4819c33b59c1abe2a4b0aa661fcb54e0855d6bb5dd267878ff59bcfc6079e7a5"}]}}}}}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0x401c5820, &(0x7f00000004c0)={0x0, 0x0, 0x5}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r6, 0x0, 0x13, &(0x7f0000000340)=0x2, 0x4) writev(r2, &(0x7f0000000500)=[{&(0x7f0000000380)="c8913dc005d929e2b60d3e44dd2eba0cd15f1de6dd05e58ec15668e513994334114a2267bd4346be25e09c659c1fd9ed0ec0e3c1dc93e96294a5c8dac198225b25ead47667fcb4ab14682cfa630339cb8051573bc5ac729a71b863cc45475f06e01c723a1e9c8961b0c1a7ae4f9935a2bbe7eff6baba2a2f5c63ec611bac90095caa03b590f35bb3cd04d2f050347d128cb0e7357a1e08753236c83839be3e1cfe9b008d0ca84f4a8b148636ef436dd40e0fde02c11d1b4ee51360356b135f2e180c672273e4c56dcc9054fdfeaa43312b9c843ffa2cdb4e120822cf3fa8a365d60c340f0b3982e383ccc3d0", 0xec}, {&(0x7f0000000140)='qL~', 0x3}, {&(0x7f00000005c0)="7ccb85f6163dc2db3cc5cff167b3cd9adfe80a40b880e63a59abbd6e14fa4381f17f26d85f56e2525c0eeb9b6db63d17612ef73a2d2f694f6ebd2e514892c2a87c647790d5e2d15f0ad62adf8ba85f6295b6a798fdaaf9f7f3007559e7dce1d4a297e931c241366cf7adc80d91b99628e19190c64c995306bf61c0632966f54c4949d62ef0c5f0fab0d8a283c7c073108b3cec80fc8a64a58ec0efabe8a09bc84be69494eede7d8b10561f69c5f81d7d766484f7294c7b4cf5224fe0c198c60c6f174d36de149b98639b2e517e037c791d8d003f3b9966302c195b", 0xdb}, {&(0x7f0000000280)="2d171d87ac981df235215c91de690a063c02517fa19a216d8fd232ede3e1f32c2eef61f24242954073a53a50808ead2f2dba5f644737a08e4c8c479b41e7cbb93050318e3f0ba2dbf3b8e5b575ded8a1", 0x50}, {&(0x7f00000006c0)="6c9d48fa0718274cc7e945fc76eab8bdb832d400d9e74d9e29b02a693d5af514d56659fffaa2712a1eaa82487540bfb193d38d7b2a193534e0c80797a8e2bafd844ef670071f6426047f282a77969b0d7053e72e32acec49f4730b8691233893076eb6ca556210d39de76367889d07faeed09148d74cfcc7eae5d9805f08977cf7fafcc0e94181c5dcd671c101becaef11d53c5af691c2abfb026c52fbb66295d0c70fdd8d6435cd0556154075bd36a44de9632b9db413c03676", 0xba}], 0x5) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x3, 0x0, @remote, 0x2}], 0x1c) r7 = socket$inet6(0x10, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x7, 0x0, 0x20, 0x0, @in={0x2, 0x0, @rand_addr=0x64010101}}, @sadb_ident={0x2, 0xa, 0x2, 0x0, 0x1}]}, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) sendto$inet6(r7, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000240), 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x58}}, 0x0) 1.026003845s ago: executing program 2 (id=1499): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000380)) 946.533923ms ago: executing program 1 (id=1500): r0 = socket$netlink(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8044) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0xff05, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x40}}, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x1, '\x00', r6, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r7 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) (async) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x1, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) (async) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) (async) r8 = socket$tipc(0x1e, 0x5, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d008fbd983247f07251ca60bc24eab556a71a251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e450998530000000080bcc7f874", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) (async) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000680)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, &(0x7f00000000c0), {[{{@arp={@remote, @private=0xa010102, 0xff, 0xff000000, 0xc, 0xb, {@mac, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0xf27, 0x6, 0xc, 0x2e6, 0x6, 0xdb, 'syzkaller0\x00', 'batadv_slave_1\x00', {}, {0xff}, 0x0, 0x40}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0x4, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @rand_addr=0x64010101, @empty, 0x8, 0xffffffff}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, 0x0, 0xff, 0xe, 0x10, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x3ff, 0xfff, 0xfe6, 0x2, 0x46ab, 0xa, 'wg2\x00', 'netpci0\x00', {0xff}, {0xff}, 0x0, 0x61}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000080)={0x40, 0x4, 0x3}, 0x10) 831.35722ms ago: executing program 2 (id=1501): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000100)='i', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x0) 811.442561ms ago: executing program 1 (id=1502): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6}}}}]}, 0x38}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e23}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) r4 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000000000007111b600000000008510000002000000850000002a00000095000000000000009500a505000000008d8d72a4d2b0e866647a5563580154525990a711faae6b5efa82c515c097c645d4a49869490531e6fc004371de6a0e2aeb39db28a841fee433ca770c6799b28945ba973ff15b71d81a48f65b229efa31eb19c4d6945c8db59bf97ce0d74761c6ededcdebebfcd90759bd2cfe8b4253a9468fe5b0759b99a37a189ddd91f7bf447837"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}]}}}, @IFLA_TXQLEN={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x4c}}, 0x0) 630.969361ms ago: executing program 2 (id=1503): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES16=r0], 0x38}, 0x1, 0x0, 0x0, 0x28040044}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x9c, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_OBJREF_SET_ID={0x8}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DESC={0x24, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}]}]}]}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xe0}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r7, @ANYBLOB="0a0001"], 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x200000000000011, 0x2, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES16=r0], 0x38}, 0x1, 0x0, 0x0, 0x28040044}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) accept4(r3, 0x0, 0x0, 0x800) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x9c, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_OBJREF_SET_ID={0x8}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DESC={0x24, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}]}]}]}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xe0}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) (async) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) (async) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r7, @ANYBLOB="0a0001"], 0x48}}, 0x0) (async) 447.217087ms ago: executing program 1 (id=1504): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="210900000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="0c0023800600030066000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="210900000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="0c0023800600030066000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x40}, 0x1, 0x7}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r5, &(0x7f0000000640)={&(0x7f0000000300)=@hci={0x1f, 0xffffffffffffffff, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000000000000001"], 0x20}, 0x8000) socket(0x40000000015, 0x5, 0x0) (async) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet(r6, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) (async) bind$inet(r6, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r6, &(0x7f00000003c0)={0xa, 0x4e22, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c) (async) connect$inet6(r6, &(0x7f00000003c0)={0xa, 0x4e22, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) getsockopt(r4, 0x1c6a, 0x350, &(0x7f0000000100)=""/63, &(0x7f0000000140)=0x3f) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x64, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2e, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0x3, 0xa1, 0x9}}, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_HIDDEN_SSID={0x8}]}, 0x64}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x64, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2e, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0x3, 0xa1, 0x9}}, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_HIDDEN_SSID={0x8}]}, 0x64}}, 0x0) 322.22356ms ago: executing program 2 (id=1505): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmmsg$sock(r0, &(0x7f0000000500)=[{{&(0x7f00000000c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000000200)="80c2fc06ff275689d2df033671526cb8d0bff8373ca3a3657b0650e62da2aaf8fd1d71d7fc4ad48aba623978886e85f0c2037384aaf5bf01192857d2459c6550957560aeb387a36d54d9976cfe195d18e200e9a2328cca8dd3dc3b184ef3d44e2f551b745eea0c3745f9c069570a8bc3c1ebb32cf91c6368e00770ce077af2bd2564591886c6edf539a91bce7704a0e005a581708047dd012de5f8d1d9ad87e4be7c14050ca0058abca50b92ba70e601b9d82b5939b19fe3c9", 0xb9}], 0x2}}, {{&(0x7f0000000140)=@llc={0x1a, 0x200, 0x0, 0x0, 0x9, 0x4, @local}, 0x80, &(0x7f0000000340)=[{&(0x7f00000002c0)="1b6d67b339da8ba69ca69780926340ae94e57ff785f2267bc1738ebf269801430a464eaa3b123a19f663dce1759dfca91221a219ca3e43703a74c959ea6b8ec1be9d5081be9d3ad36a5b2cbffac41d9273011ec3d6179774a3f0ffea8e53585807fd47c0f47de888c411ad97d753943003c2b148bc118e48", 0x78}], 0x1, &(0x7f0000000380)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0xff}}, @timestamping={{0x14, 0x1, 0x25, 0x80}}], 0x60}}], 0x2, 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000000)={0x0, 0x2710}, 0x10) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) shutdown(r1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x97}, [@func={0x85, 0x0, 0x1, 0x0, 0x100002}, @call, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, r0, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) mmap$xdp(&(0x7f000012c000/0x1000)=nil, 0x1000, 0x0, 0x4010, 0xffffffffffffffff, 0x100000000) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0), 0x4) 187.492961ms ago: executing program 1 (id=1506): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8}, @NFTA_HASH_LEN={0x8}, @NFTA_HASH_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}]}, 0x20}}, 0x0) connect$pppoe(r0, &(0x7f00000003c0)={0x18, 0x0, {0x4, @random="e9e165625ac2", 'wlan0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)="4d6a8e5f266763535e29028024a075d799918837b1ce898accb1bd81d3d6ad30eb2b348e07336d95ddc03834f443161776fb68ae2f33215b4f38549e4ed3dd4f7c46919b6bf621b5bf2f919b11730c87397768de17bcaa914b636c9a832140ac7213afd2a76f61385e1787b9b884891c308c39da340c676ea955c41e7b8e59d3b362091266737f24ea0bf42baaa146d2bb9b3421417b109c02872462907cd18c09fa3ea4e9bb43593f53a6eb5d38f0279e2356de5c5bccefdd281a2bc345e604341b31c4fac14216d1fced23985eae0b", 0xd0}, {&(0x7f00000001c0)="35c03e56a415218a1ee3ef938b20d40f6b4237e816e8e265b4d7c1bba071df94449df3079a8dac114978e4f2fb0dcbf764feb5988601", 0x36}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004940)=ANY=[@ANYBLOB], 0x1010}}, {{&(0x7f0000005980)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @multicast1}, 0x2}}, 0x80, &(0x7f0000006bc0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="10000000000000000201000009000000a800000000000000110100000a00000091982b8e37383ad91959f94a03b8566edab0a4738156af267d895ebc54e403dde8d246e8c34b1602ec51f86793ae92d5cad09736b96c5b206a7b699030e3cc1ed17f1b0d022576d45b98d01bd0aaefe71938c56cab510d87529d48cf11f6bf3420a6a7838a2d68a8988633327fe865c402829a60cf8ca37142bd6ef74b46ad54b8050cdab2085ed2eee6ae59b5e3af1c7dd0000000000000733b6b815507b1b4e8e982c9"], 0xb8}}], 0x4, 0x20000800) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x58, 0xc, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004004}, 0x20000040) 107.811331ms ago: executing program 2 (id=1507): r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'dvmrp1\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e00f9000280080001000800000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x0) 0s ago: executing program 1 (id=1508): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000efff71124000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000000), 0x4) kernel console output (not intermixed with test programs): 233.114996][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.143445][ T8515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.166781][ T8515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.210770][ T8514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.227884][ T8514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.370643][ T36] bridge_slave_1: left allmulticast mode [ 233.385639][ T36] bridge_slave_1: left promiscuous mode [ 233.392175][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.427979][ T36] bridge_slave_0: left allmulticast mode [ 233.434783][ T36] bridge_slave_0: left promiscuous mode [ 233.441167][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.482584][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 233.492215][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 233.501621][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 233.512198][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 233.520502][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 233.991315][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.009595][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.020442][ T36] bond0 (unregistering): Released all slaves [ 234.170268][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 234.179969][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 234.191011][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 234.203153][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 234.213174][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 234.432384][ T36] hsr_slave_0: left promiscuous mode [ 234.449500][ T36] hsr_slave_1: left promiscuous mode [ 234.457067][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.464501][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.473928][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.481614][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.509595][ T36] veth1_macvtap: left promiscuous mode [ 234.515198][ T36] veth0_macvtap: left promiscuous mode [ 234.521667][ T36] veth1_vlan: left promiscuous mode [ 234.527356][ T36] veth0_vlan: left promiscuous mode [ 234.908930][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 234.919265][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 234.928679][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 234.937796][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 234.947587][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 235.124983][ T36] team0 (unregistering): Port device team_slave_1 removed [ 235.167262][ T36] team0 (unregistering): Port device team_slave_0 removed [ 235.546016][ T5840] Bluetooth: hci0: command tx timeout [ 236.144287][T10626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1214'. [ 236.236072][T10626] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1214'. [ 236.266573][ T5840] Bluetooth: hci2: command tx timeout [ 236.312380][T10601] chnl_net:caif_netlink_parms(): no params data found [ 236.332653][T10573] chnl_net:caif_netlink_parms(): no params data found [ 236.349539][T10633] netlink: 'syz.1.1216': attribute type 4 has an invalid length. [ 236.808241][T10659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1221'. [ 236.850302][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.868739][T10590] chnl_net:caif_netlink_parms(): no params data found [ 236.898086][T10601] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.905608][T10601] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.913299][T10601] bridge_slave_0: entered allmulticast mode [ 236.921133][T10601] bridge_slave_0: entered promiscuous mode [ 236.987502][ T5840] Bluetooth: hci3: command tx timeout [ 237.070050][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.093002][T10601] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.101126][T10601] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.115588][T10601] bridge_slave_1: entered allmulticast mode [ 237.124394][T10601] bridge_slave_1: entered promiscuous mode [ 237.133266][T10573] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.143331][T10669] netlink: 'syz.2.1223': attribute type 13 has an invalid length. [ 237.176737][T10573] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.185247][T10573] bridge_slave_0: entered allmulticast mode [ 237.204232][T10573] bridge_slave_0: entered promiscuous mode [ 237.218696][T10573] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.248921][T10573] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.258547][T10573] bridge_slave_1: entered allmulticast mode [ 237.279427][T10573] bridge_slave_1: entered promiscuous mode [ 237.392450][T10666] bridge0: port 3(batadv_slave_0) entered blocking state [ 237.400879][T10666] bridge0: port 3(batadv_slave_0) entered disabled state [ 237.408911][T10666] batadv_slave_0: entered allmulticast mode [ 237.423178][T10666] batadv_slave_0: entered promiscuous mode [ 237.461451][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.586813][T10601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.628273][ T5840] Bluetooth: hci0: command tx timeout [ 237.667155][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.696703][T10682] netlink: 'syz.2.1226': attribute type 13 has an invalid length. [ 237.715067][T10573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.746368][T10601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.755738][T10682] lo: entered promiscuous mode [ 237.760542][T10682] lo: entered allmulticast mode [ 237.766958][T10682] tunl0: entered promiscuous mode [ 237.772297][T10682] tunl0: entered allmulticast mode [ 237.785714][T10682] gre0: entered promiscuous mode [ 237.790689][T10682] gre0: entered allmulticast mode [ 237.802780][T10682] gretap0: entered promiscuous mode [ 237.808299][T10682] gretap0: entered allmulticast mode [ 237.814017][T10682] gretap0: refused to change device tx_queue_len [ 237.821234][T10682] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 237.852665][T10573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.927618][T10573] team0: Port device team_slave_0 added [ 238.020968][T10573] team0: Port device team_slave_1 added [ 238.072466][T10601] team0: Port device team_slave_0 added [ 238.098825][T10573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.108191][T10573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.137666][T10573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.150045][T10573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.157468][T10573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.183839][T10573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.197658][T10601] team0: Port device team_slave_1 added [ 238.205554][T10590] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.213108][T10590] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.220900][T10590] bridge_slave_0: entered allmulticast mode [ 238.228574][T10590] bridge_slave_0: entered promiscuous mode [ 238.290983][T10590] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.299422][T10590] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.307207][T10590] bridge_slave_1: entered allmulticast mode [ 238.314477][T10590] bridge_slave_1: entered promiscuous mode [ 238.348169][ T5840] Bluetooth: hci2: command tx timeout [ 238.369415][T10601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.388220][T10601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.420617][T10601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.483776][T10601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.490854][T10601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.532773][T10601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.570059][T10573] hsr_slave_0: entered promiscuous mode [ 238.576831][T10573] hsr_slave_1: entered promiscuous mode [ 238.583299][T10573] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.596743][T10573] Cannot create hsr debugfs directory [ 238.619410][T10590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.632288][T10590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.668318][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.712460][T10707] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1233'. [ 238.729382][T10708] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1233'. [ 238.789663][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.816410][T10590] team0: Port device team_slave_0 added [ 238.827091][T10590] team0: Port device team_slave_1 added [ 238.954452][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.991574][T10713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1235'. [ 239.031406][T10601] hsr_slave_0: entered promiscuous mode [ 239.038538][T10601] hsr_slave_1: entered promiscuous mode [ 239.044949][T10601] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.052636][T10601] Cannot create hsr debugfs directory [ 239.065431][ T5840] Bluetooth: hci3: command tx timeout [ 239.129223][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.174834][T10590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.192109][T10590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.235399][T10590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.290177][T10590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.304095][T10590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.334773][T10590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.484604][T10590] hsr_slave_0: entered promiscuous mode [ 239.492425][T10590] hsr_slave_1: entered promiscuous mode [ 239.499233][T10590] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.507284][T10590] Cannot create hsr debugfs directory [ 239.706188][ T5840] Bluetooth: hci0: command tx timeout [ 239.941913][ T36] bridge_slave_1: left allmulticast mode [ 239.942243][T10731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1239'. [ 239.949943][ T36] bridge_slave_1: left promiscuous mode [ 239.971346][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.982340][ T36] bridge_slave_0: left allmulticast mode [ 239.994582][ T36] bridge_slave_0: left promiscuous mode [ 240.000857][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.021705][ T36] bridge_slave_1: left allmulticast mode [ 240.029635][ T36] bridge_slave_1: left promiscuous mode [ 240.035781][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.048367][ T36] bridge_slave_0: left allmulticast mode [ 240.054151][ T36] bridge_slave_0: left promiscuous mode [ 240.060020][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.241021][T10738] netlink: 424 bytes leftover after parsing attributes in process `syz.1.1242'. [ 240.435614][ T5840] Bluetooth: hci2: command tx timeout [ 240.500677][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.512261][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.523281][ T36] bond0 (unregistering): Released all slaves [ 240.793002][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.804281][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.814735][ T36] bond0 (unregistering): Released all slaves [ 241.155892][ T5840] Bluetooth: hci3: command tx timeout [ 241.331647][T10756] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1248'. [ 241.554033][ T36] hsr_slave_0: left promiscuous mode [ 241.569549][ T36] hsr_slave_1: left promiscuous mode [ 241.585727][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.593201][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.618730][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.644444][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.672798][ T36] hsr_slave_0: left promiscuous mode [ 241.680883][ T36] hsr_slave_1: left promiscuous mode [ 241.687801][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.695527][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.703726][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.719499][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.760760][ T36] veth1_macvtap: left promiscuous mode [ 241.766735][ T36] veth0_macvtap: left promiscuous mode [ 241.772373][ T36] veth1_vlan: left promiscuous mode [ 241.777812][ T36] veth0_vlan: left promiscuous mode [ 241.784733][ T36] veth1_macvtap: left promiscuous mode [ 241.790447][ T5840] Bluetooth: hci0: command tx timeout [ 241.796823][ T36] veth0_macvtap: left promiscuous mode [ 241.800187][T10771] Bluetooth: MGMT ver 1.23 [ 241.802512][ T36] veth1_vlan: left promiscuous mode [ 241.812560][ T36] veth0_vlan: left promiscuous mode [ 242.393575][ T36] team0 (unregistering): Port device team_slave_1 removed [ 242.434746][ T36] team0 (unregistering): Port device team_slave_0 removed [ 242.505812][ T5840] Bluetooth: hci2: command tx timeout [ 243.098835][ T36] team0 (unregistering): Port device team_slave_1 removed [ 243.140660][ T36] team0 (unregistering): Port device team_slave_0 removed [ 243.228146][ T5840] Bluetooth: hci3: command tx timeout [ 243.644749][T10778] netlink: 'syz.1.1256': attribute type 4 has an invalid length. [ 243.914543][T10601] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 243.938496][T10601] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 244.011688][T10601] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 244.031755][T10601] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 244.347646][T10601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.357784][T10803] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1260'. [ 244.386523][T10804] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20000 [ 244.480339][T10590] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 244.492648][T10590] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 244.503760][T10590] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 244.521845][T10590] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 244.542861][T10601] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.630040][ T7893] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.637235][ T7893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.660274][ T7893] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.667467][ T7893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.703864][T10573] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 244.722188][T10573] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 244.753811][T10573] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 244.768212][T10573] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 244.888667][T10590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.934605][T10590] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.959675][ T8514] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.966936][ T8514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.001876][ T8515] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.009153][ T8515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.223457][T10573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.264378][T10573] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.324827][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.332004][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.405059][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.412322][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.508887][T10601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.840839][T10590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.979946][T10590] veth0_vlan: entered promiscuous mode [ 246.023693][T10590] veth1_vlan: entered promiscuous mode [ 246.164209][T10573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.177436][T10590] veth0_macvtap: entered promiscuous mode [ 246.193474][T10590] veth1_macvtap: entered promiscuous mode [ 246.262494][T10590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.297103][T10590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.342356][T10590] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.364837][T10590] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.374266][T10590] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.383304][T10590] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.409398][T10573] veth0_vlan: entered promiscuous mode [ 246.476215][T10573] veth1_vlan: entered promiscuous mode [ 246.582848][T10601] veth0_vlan: entered promiscuous mode [ 246.630398][T10573] veth0_macvtap: entered promiscuous mode [ 246.662103][T10601] veth1_vlan: entered promiscuous mode [ 246.714924][T10573] veth1_macvtap: entered promiscuous mode [ 246.765169][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.799527][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.868345][T10573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.892235][T10601] veth0_macvtap: entered promiscuous mode [ 246.926111][ T8514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.947926][T10573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.966124][ T8514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.997444][T10601] veth1_macvtap: entered promiscuous mode [ 247.004608][T10898] pimreg: left allmulticast mode [ 247.051618][T10573] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.070444][T10573] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.095394][T10573] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.115635][T10573] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.214111][T10601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.261349][T10906] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1281'. [ 247.340000][T10601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.352721][T10601] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.371725][T10601] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.381658][T10601] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.393339][T10601] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.415672][T10909] syzkaller1: entered promiscuous mode [ 247.421485][T10909] syzkaller1: entered allmulticast mode [ 247.521657][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.536208][T10914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1283'. [ 247.551858][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.667345][ T8514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.676261][ T8514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.804612][ T1318] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.848701][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.862921][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.938543][ T8515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.952648][ T8515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.056460][ T1318] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.581339][ T1318] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.779053][ T1318] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.905179][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 248.914358][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 248.930494][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 248.939342][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 248.946494][T10929] TCP: TCP_TX_DELAY enabled [ 248.952267][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 249.046548][T10931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1287'. [ 249.202865][ T1318] bridge_slave_1: left allmulticast mode [ 249.209865][ T1318] bridge_slave_1: left promiscuous mode [ 249.216266][ T1318] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.229292][ T1318] bridge_slave_0: left allmulticast mode [ 249.234976][ T1318] bridge_slave_0: left promiscuous mode [ 249.241355][ T1318] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.323793][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 249.341689][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 249.351305][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 249.361649][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 249.372271][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 249.624256][ T1318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.637701][ T1318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.648468][ T1318] bond0 (unregistering): Released all slaves [ 250.011447][ T1318] hsr_slave_0: left promiscuous mode [ 250.017864][ T1318] hsr_slave_1: left promiscuous mode [ 250.024704][ T1318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.046125][ T1318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.054003][ T1318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.063021][ T1318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.086657][ T1318] veth1_macvtap: left promiscuous mode [ 250.092240][ T1318] veth0_macvtap: left promiscuous mode [ 250.098365][ T1318] veth1_vlan: left promiscuous mode [ 250.104185][ T1318] veth0_vlan: left promiscuous mode [ 250.238599][T10945] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1289'. [ 250.553963][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 250.568789][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 250.577269][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 250.587468][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 250.600820][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 250.788205][ T1318] team0 (unregistering): Port device team_slave_1 removed [ 250.830792][ T1318] team0 (unregistering): Port device team_slave_0 removed [ 250.985985][ T5840] Bluetooth: hci0: command tx timeout [ 251.270655][T10949] macvtap1: entered promiscuous mode [ 251.288371][T10949] vlan0: entered promiscuous mode [ 251.293939][T10949] macvtap1: entered allmulticast mode [ 251.308119][T10949] vlan0: entered allmulticast mode [ 251.322771][T10950] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 251.340275][T10926] chnl_net:caif_netlink_parms(): no params data found [ 251.374856][T10958] IPv6: NLM_F_CREATE should be specified when creating new route [ 251.380154][T10933] chnl_net:caif_netlink_parms(): no params data found [ 251.466427][ T5840] Bluetooth: hci2: command tx timeout [ 251.554319][T10960] bridge0: port 4(veth0_to_bridge) entered blocking state [ 251.585740][T10960] bridge0: port 4(veth0_to_bridge) entered disabled state [ 251.599598][T10960] veth0_to_bridge: entered allmulticast mode [ 251.616662][T10960] veth0_to_bridge: entered promiscuous mode [ 251.784401][T10970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1296'. [ 251.913118][T10926] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.921497][T10926] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.930205][T10978] netlink: 'syz.1.1297': attribute type 1 has an invalid length. [ 251.930230][T10926] bridge_slave_0: entered allmulticast mode [ 251.946069][T10926] bridge_slave_0: entered promiscuous mode [ 251.953852][T10926] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.961445][T10926] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.968866][T10926] bridge_slave_1: entered allmulticast mode [ 251.978305][T10926] bridge_slave_1: entered promiscuous mode [ 251.994303][T10933] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.008384][T10933] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.018827][T10933] bridge_slave_0: entered allmulticast mode [ 252.033106][T10933] bridge_slave_0: entered promiscuous mode [ 252.063677][T10978] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1297'. [ 252.123850][T10978] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1297'. [ 252.143592][T10979] 8021q: adding VLAN 0 to HW filter on device bond4 [ 252.152700][T10979] bond3: (slave bond4): making interface the new active one [ 252.160694][T10979] bond3: (slave bond4): Enslaving as an active interface with an up link [ 252.174054][T10933] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.185286][T10933] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.192548][T10933] bridge_slave_1: entered allmulticast mode [ 252.204975][T10933] bridge_slave_1: entered promiscuous mode [ 252.229384][T10926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.243389][T10978] 8021q: adding VLAN 0 to HW filter on device bond3 [ 252.286253][T10933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.299254][T10926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.341068][T10933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.665643][ T5840] Bluetooth: hci3: command tx timeout [ 253.065965][ T5840] Bluetooth: hci0: command tx timeout [ 253.081651][T10926] team0: Port device team_slave_0 added [ 253.119858][T10995] bridge9: entered promiscuous mode [ 253.125097][T10995] bridge9: entered allmulticast mode [ 253.167597][T10933] team0: Port device team_slave_0 added [ 253.180244][T10926] team0: Port device team_slave_1 added [ 253.363876][ T1318] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.397607][T10933] team0: Port device team_slave_1 added [ 253.449451][T10953] chnl_net:caif_netlink_parms(): no params data found [ 253.488839][T10933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.502199][T10933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.533947][T10933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.548651][ T5840] Bluetooth: hci2: command tx timeout [ 253.580191][ T1318] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.610694][T10926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.620370][T10926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.648816][T10926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.683856][T10933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.731160][T10933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.935324][T10933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.042140][ T1318] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.080698][T10926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.089291][T10926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.124644][T10926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.223425][T10933] hsr_slave_0: entered promiscuous mode [ 254.230404][T10933] hsr_slave_1: entered promiscuous mode [ 254.271368][ T1318] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.464857][T10926] hsr_slave_0: entered promiscuous mode [ 254.471928][T10926] hsr_slave_1: entered promiscuous mode [ 254.478310][T10926] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.486910][T10926] Cannot create hsr debugfs directory [ 254.507029][T11035] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 254.530419][T11031] netem: change failed [ 254.720946][T10953] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.729227][T10953] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.736938][T10953] bridge_slave_0: entered allmulticast mode [ 254.744971][T10953] bridge_slave_0: entered promiscuous mode [ 254.754689][ T5840] Bluetooth: hci3: command tx timeout [ 254.904201][T10953] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.919212][T10953] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.926975][T10953] bridge_slave_1: entered allmulticast mode [ 254.934923][T10953] bridge_slave_1: entered promiscuous mode [ 255.112308][T10953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.138380][T10953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.146459][ T5840] Bluetooth: hci0: command tx timeout [ 255.178122][T11055] dvmrp0: entered allmulticast mode [ 255.272692][ T1318] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.319212][T10953] team0: Port device team_slave_0 added [ 255.343520][T10953] team0: Port device team_slave_1 added [ 255.441737][ T1318] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.471508][T10953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.478677][T10953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.507551][T10953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.557005][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.574546][ T1318] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.603527][T10953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.610970][T10953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.637392][ T5840] Bluetooth: hci2: command tx timeout [ 255.647815][T10953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.681632][ T1318] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.751578][T10953] hsr_slave_0: entered promiscuous mode [ 255.761974][T10953] hsr_slave_1: entered promiscuous mode [ 255.776161][T10953] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.783741][T10953] Cannot create hsr debugfs directory [ 255.984942][ T1318] bridge_slave_1: left allmulticast mode [ 255.991165][ T1318] bridge_slave_1: left promiscuous mode [ 256.004136][ T1318] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.020890][ T1318] bridge_slave_0: left allmulticast mode [ 256.028274][ T1318] bridge_slave_0: left promiscuous mode [ 256.034374][ T1318] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.053812][ T1318] bridge_slave_1: left allmulticast mode [ 256.059995][ T1318] bridge_slave_1: left promiscuous mode [ 256.068003][ T1318] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.081992][ T1318] bridge_slave_0: left allmulticast mode [ 256.088408][ T1318] bridge_slave_0: left promiscuous mode [ 256.094226][ T1318] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.578464][ T1318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.589537][ T1318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.601769][ T1318] bond0 (unregistering): Released all slaves [ 256.829452][ T5840] Bluetooth: hci3: command tx timeout [ 256.878169][ T1318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.889305][ T1318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.910094][ T1318] bond0 (unregistering): Released all slaves [ 257.170644][T11094] xt_TCPMSS: Only works on TCP SYN packets [ 257.180961][T11092] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1326'. [ 257.228489][ T5840] Bluetooth: hci0: command tx timeout [ 257.471190][T11105] netlink: 'syz.1.1329': attribute type 1 has an invalid length. [ 257.471190][T11106] netlink: 'syz.1.1329': attribute type 1 has an invalid length. [ 257.515147][T11106] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 257.529665][ T8514] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 257.546635][T11106] 8021q: adding VLAN 0 to HW filter on device bond5 [ 257.597885][T11106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1329'. [ 257.611385][T11105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1329'. [ 257.658033][ T8514] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 257.672115][T11105] veth5: entered promiscuous mode [ 257.686691][T11105] bond5: (slave veth5): Enslaving as a backup interface with a down link [ 257.716208][ T5840] Bluetooth: hci2: command tx timeout [ 257.770987][ T1318] hsr_slave_0: left promiscuous mode [ 257.790003][ T1318] hsr_slave_1: left promiscuous mode [ 257.808190][ T1318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.816204][ T1318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.826874][ T1318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.834335][ T1318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.865911][ T1318] hsr_slave_0: left promiscuous mode [ 257.874092][ T1318] hsr_slave_1: left promiscuous mode [ 257.881459][ T1318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.890375][ T1318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.906106][ T1318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.913553][ T1318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.989809][ T1318] veth1_macvtap: left promiscuous mode [ 258.007695][ T1318] veth0_macvtap: left promiscuous mode [ 258.013432][ T1318] veth1_vlan: left promiscuous mode [ 258.025940][ T1318] veth0_vlan: left promiscuous mode [ 258.033716][ T1318] veth1_macvtap: left promiscuous mode [ 258.039719][ T1318] veth0_macvtap: left promiscuous mode [ 258.053176][ T1318] veth1_vlan: left promiscuous mode [ 258.063024][ T1318] veth0_vlan: left promiscuous mode [ 258.580394][ T1318] team0 (unregistering): Port device team_slave_1 removed [ 258.623702][ T1318] team0 (unregistering): Port device team_slave_0 removed [ 258.917162][ T5840] Bluetooth: hci3: command tx timeout [ 259.291690][ T1318] team0 (unregistering): Port device team_slave_1 removed [ 259.331697][ T1318] team0 (unregistering): Port device team_slave_0 removed [ 259.718574][T10933] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 259.817409][T10933] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 259.856906][T10933] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 259.905703][T10933] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 260.172797][T10933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.252719][T11149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1340'. [ 260.284813][T11149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1340'. [ 260.297624][T11149] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 260.305153][T11149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.307822][T10933] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.432240][T10926] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 260.469584][T10926] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 260.493017][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.500214][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.598689][T10926] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 260.611050][T10926] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 260.643834][ T7893] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.651092][ T7893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.677065][T11163] raw_sendmsg: syz.1.1345 forgot to set AF_INET. Fix it! [ 260.700086][T11165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1344'. [ 261.055035][T10926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.138432][T10926] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.151473][ T1318] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.158709][ T1318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.193477][T10953] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 261.215995][ T1318] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.217209][T11187] openvswitch: netlink: Message has 199 unknown bytes. [ 261.223173][ T1318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.238664][T11187] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.295678][T10953] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 261.322633][T10953] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 261.354018][T10953] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 261.533769][T10933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.699069][T10953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.723957][T10926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.786986][T10953] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.822561][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.829755][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.883865][ T1318] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.891135][ T1318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.020467][T10933] veth0_vlan: entered promiscuous mode [ 262.029427][T10926] veth0_vlan: entered promiscuous mode [ 262.089658][T10926] veth1_vlan: entered promiscuous mode [ 262.120485][T10933] veth1_vlan: entered promiscuous mode [ 262.191438][T10926] veth0_macvtap: entered promiscuous mode [ 262.204886][T10926] veth1_macvtap: entered promiscuous mode [ 262.244685][T10933] veth0_macvtap: entered promiscuous mode [ 262.262320][T10933] veth1_macvtap: entered promiscuous mode [ 262.302401][T10933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.334197][T10933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.353366][T10926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.390747][T10926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.413254][T10933] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.431263][T10933] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.441459][T10933] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.450999][T10933] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.467237][T10926] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.483398][T10926] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.503158][T10926] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.525357][T10926] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.554608][T11242] mac80211_hwsim hwsim9 ÿ: renamed from wlan1 (while UP) [ 262.706572][T10953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.732891][T11245] pimreg: left allmulticast mode [ 262.897564][ T7893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.918573][ T7893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.945606][ T7877] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.953477][ T7877] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.963792][T10953] veth0_vlan: entered promiscuous mode [ 263.050583][T10953] veth1_vlan: entered promiscuous mode [ 263.068952][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.093116][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.142080][ T1318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.165199][ T1318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.229033][T10953] veth0_macvtap: entered promiscuous mode [ 263.253552][T10953] veth1_macvtap: entered promiscuous mode [ 263.299941][T11259] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1365'. [ 263.330532][T11259] netlink: 576 bytes leftover after parsing attributes in process `syz.2.1365'. [ 263.332009][T10953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.371993][T11255] xt_CT: No such helper "syz0" [ 263.390172][T10953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.416030][T10953] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.429639][T10953] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.440264][T10953] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.453962][T10953] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.831311][ T1168] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.928398][ T8515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.955532][ T8515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.972695][ T1168] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.148851][ T1168] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.181331][ T1318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.190410][ T1318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.262089][ T1168] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.621956][ T1168] bridge_slave_1: left allmulticast mode [ 264.632682][ T1168] bridge_slave_1: left promiscuous mode [ 264.643156][ T1168] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.655863][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 264.656340][ T1168] bridge_slave_0: left allmulticast mode [ 264.664520][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 264.678322][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 264.687488][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 264.695566][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 264.696325][ T1168] bridge_slave_0: left promiscuous mode [ 264.713804][ T1168] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.373840][ T1168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.389255][ T1168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.408051][ T1168] bond0 (unregistering): Released all slaves [ 265.418105][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 265.429023][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 265.437320][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 265.447512][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 265.460430][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 265.733397][ T1168] hsr_slave_0: left promiscuous mode [ 265.739685][ T1168] hsr_slave_1: left promiscuous mode [ 265.745744][ T1168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.753420][ T1168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.762270][ T1168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.770459][ T1168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.792581][ T1168] veth1_macvtap: left promiscuous mode [ 265.798362][ T1168] veth0_macvtap: left promiscuous mode [ 265.804007][ T1168] veth1_vlan: left promiscuous mode [ 265.809796][ T1168] veth0_vlan: left promiscuous mode [ 266.223640][ T1168] team0 (unregistering): Port device team_slave_1 removed [ 266.264797][ T1168] team0 (unregistering): Port device team_slave_0 removed [ 266.325788][T11289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1373'. [ 266.670306][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 266.685594][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 266.694392][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 266.706856][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 266.719180][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 266.756382][ T5840] Bluetooth: hci0: command tx timeout [ 267.132396][T11273] chnl_net:caif_netlink_parms(): no params data found [ 267.315362][T11281] chnl_net:caif_netlink_parms(): no params data found [ 267.434740][T11273] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.442323][T11273] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.452319][T11273] bridge_slave_0: entered allmulticast mode [ 267.460764][T11273] bridge_slave_0: entered promiscuous mode [ 267.503358][T11273] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.511168][T11273] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.519185][T11273] bridge_slave_1: entered allmulticast mode [ 267.528250][T11273] bridge_slave_1: entered promiscuous mode [ 267.545841][ T5840] Bluetooth: hci2: command tx timeout [ 267.680960][T11273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.704250][T11273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.722143][T11281] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.730282][T11281] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.738801][T11281] bridge_slave_0: entered allmulticast mode [ 267.747453][T11281] bridge_slave_0: entered promiscuous mode [ 267.814266][T11281] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.823101][T11281] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.831216][T11281] bridge_slave_1: entered allmulticast mode [ 267.840396][T11281] bridge_slave_1: entered promiscuous mode [ 267.893209][T11273] team0: Port device team_slave_0 added [ 267.907773][T11273] team0: Port device team_slave_1 added [ 267.986743][T11281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.000128][T11281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.066392][T11273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.073412][T11273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.101466][T11273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.139140][T11281] team0: Port device team_slave_0 added [ 268.146618][T11273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.153586][T11273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.183822][T11273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.201662][T11292] chnl_net:caif_netlink_parms(): no params data found [ 268.233902][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.252857][T11281] team0: Port device team_slave_1 added [ 268.324800][T11281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.332065][T11281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.360331][T11281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.392375][T11273] hsr_slave_0: entered promiscuous mode [ 268.399594][T11273] hsr_slave_1: entered promiscuous mode [ 268.422345][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.459339][T11281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.467097][T11281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.493485][T11281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.543118][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.687588][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.709233][T11292] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.716592][T11292] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.724757][T11292] bridge_slave_0: entered allmulticast mode [ 268.732563][T11292] bridge_slave_0: entered promiscuous mode [ 268.740544][T11292] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.750647][T11292] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.757900][ T5840] Bluetooth: hci3: command tx timeout [ 268.765482][T11292] bridge_slave_1: entered allmulticast mode [ 268.772736][T11292] bridge_slave_1: entered promiscuous mode [ 268.788601][T11281] hsr_slave_0: entered promiscuous mode [ 268.794894][T11281] hsr_slave_1: entered promiscuous mode [ 268.803117][T11281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.810802][T11281] Cannot create hsr debugfs directory [ 268.826627][ T5840] Bluetooth: hci0: command tx timeout [ 268.890205][T11292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.934223][T11292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.013089][T11292] team0: Port device team_slave_0 added [ 269.067351][T11292] team0: Port device team_slave_1 added [ 269.181896][T11292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.189492][T11292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.217905][T11292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.263815][T11292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.271352][T11292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.297958][T11292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.348278][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.451501][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.511425][T11292] hsr_slave_0: entered promiscuous mode [ 269.518484][T11292] hsr_slave_1: entered promiscuous mode [ 269.524716][T11292] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.532471][T11292] Cannot create hsr debugfs directory [ 269.582783][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.625812][ T5840] Bluetooth: hci2: command tx timeout [ 269.681892][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.768212][T11273] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 269.792191][T11273] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 269.826953][T11273] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 269.854950][T11273] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 269.934823][ T36] bridge_slave_1: left allmulticast mode [ 269.941538][ T36] bridge_slave_1: left promiscuous mode [ 269.949840][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.963250][ T36] bridge_slave_0: left allmulticast mode [ 269.969473][ T36] bridge_slave_0: left promiscuous mode [ 269.975284][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.987413][ T36] bridge_slave_1: left allmulticast mode [ 269.993120][ T36] bridge_slave_1: left promiscuous mode [ 269.999341][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.013231][ T36] bridge_slave_0: left allmulticast mode [ 270.019748][ T36] bridge_slave_0: left promiscuous mode [ 270.025819][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.399971][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.410893][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.423038][ T36] bond0 (unregistering): Released all slaves [ 270.700816][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.713261][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.723625][ T36] bond0 (unregistering): Released all slaves [ 270.826447][ T5840] Bluetooth: hci3: command tx timeout [ 270.906767][ T5840] Bluetooth: hci0: command tx timeout [ 271.014615][T11273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.103200][T11273] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.140903][ T7892] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.148110][ T7892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.231354][ T7877] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.238603][ T7877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.448061][T11281] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 271.483774][T11281] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 271.500737][ T36] hsr_slave_0: left promiscuous mode [ 271.507049][ T36] hsr_slave_1: left promiscuous mode [ 271.513025][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.523579][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.533083][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.540774][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.552734][ T36] hsr_slave_0: left promiscuous mode [ 271.559844][ T36] hsr_slave_1: left promiscuous mode [ 271.566284][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.573758][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.582060][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.590191][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.623122][ T36] veth1_macvtap: left promiscuous mode [ 271.629647][ T36] veth0_macvtap: left promiscuous mode [ 271.636100][ T36] veth1_vlan: left promiscuous mode [ 271.641447][ T36] veth0_vlan: left promiscuous mode [ 271.648721][ T36] veth1_macvtap: left promiscuous mode [ 271.654275][ T36] veth0_macvtap: left promiscuous mode [ 271.660332][ T36] veth1_vlan: left promiscuous mode [ 271.666541][ T36] veth0_vlan: left promiscuous mode [ 271.705601][ T5840] Bluetooth: hci2: command tx timeout [ 272.222079][ T36] team0 (unregistering): Port device team_slave_1 removed [ 272.265120][ T36] team0 (unregistering): Port device team_slave_0 removed [ 272.905561][ T5840] Bluetooth: hci3: command tx timeout [ 272.974632][ T36] team0 (unregistering): Port device team_slave_1 removed [ 272.985620][ T5840] Bluetooth: hci0: command tx timeout [ 273.025959][ T36] team0 (unregistering): Port device team_slave_0 removed [ 273.403851][T11281] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 273.423538][T11281] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 273.707253][T11281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.762922][T11281] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.794932][T11273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.807668][ T5840] Bluetooth: hci2: command tx timeout [ 273.822557][ T1318] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.829727][ T1318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.840386][ T1318] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.848127][ T1318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.919124][T11292] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 273.967774][T11292] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 273.979408][T11292] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 274.003739][T11292] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 274.201577][T11292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.233593][T11292] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.249225][ T7877] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.256411][ T7877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.288422][ T7877] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.295627][ T7877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.488641][T11273] veth0_vlan: entered promiscuous mode [ 274.501458][T11281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.524969][T11273] veth1_vlan: entered promiscuous mode [ 274.609542][T11273] veth0_macvtap: entered promiscuous mode [ 274.620837][T11273] veth1_macvtap: entered promiscuous mode [ 274.654279][T11281] veth0_vlan: entered promiscuous mode [ 274.668221][T11273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.688713][T11292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.697836][T11273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.714539][T11281] veth1_vlan: entered promiscuous mode [ 274.728905][T11273] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.738973][T11273] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.749235][T11273] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.758308][T11273] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.844144][T11281] veth0_macvtap: entered promiscuous mode [ 274.883302][T11281] veth1_macvtap: entered promiscuous mode [ 274.904204][ T7892] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.910559][T11292] veth0_vlan: entered promiscuous mode [ 274.920494][ T7892] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.964154][T11281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.982252][ T1318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.990273][T11281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.997699][T11292] veth1_vlan: entered promiscuous mode [ 274.998385][ T5840] Bluetooth: hci3: command tx timeout [ 275.014433][T11281] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.022762][ T1318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.026689][T11281] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.040519][T11281] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.050162][T11281] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.152203][T11292] veth0_macvtap: entered promiscuous mode [ 275.202323][T11292] veth1_macvtap: entered promiscuous mode [ 275.251526][T11292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.289498][T11292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.298835][ T7892] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.309337][T11292] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.312679][ T7892] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.325697][T11292] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.325732][T11292] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.325761][T11292] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.386109][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.394006][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.502590][ T1318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.529625][ T1318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.585122][ T7892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.600310][ T7892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.850956][ T8515] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.007795][ T8515] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.112756][ T8515] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.193378][ T8515] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.342919][ T8515] bridge_slave_1: left allmulticast mode [ 276.352769][ T8515] bridge_slave_1: left promiscuous mode [ 276.359281][ T8515] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.369569][ T8515] bridge_slave_0: left allmulticast mode [ 276.375978][ T8515] bridge_slave_0: left promiscuous mode [ 276.381757][ T8515] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.976330][ T8515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.998760][ T8515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.018426][ T8515] bond0 (unregistering): Released all slaves [ 277.063035][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 277.094212][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 277.115154][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 277.125826][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 277.142492][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 277.452650][ T8515] hsr_slave_0: left promiscuous mode [ 277.459003][ T8515] hsr_slave_1: left promiscuous mode [ 277.465121][ T8515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.475052][ T8515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.483458][ T8515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.492877][ T8515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.517246][ T8515] veth1_macvtap: left promiscuous mode [ 277.522833][ T8515] veth0_macvtap: left promiscuous mode [ 277.531753][ T8515] veth1_vlan: left promiscuous mode [ 277.537256][ T8515] veth0_vlan: left promiscuous mode [ 277.598723][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 277.607884][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 277.616611][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 277.626091][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 277.634597][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 278.007188][ T8515] team0 (unregistering): Port device team_slave_1 removed [ 278.046315][ T8515] team0 (unregistering): Port device team_slave_0 removed [ 278.563578][T11366] chnl_net:caif_netlink_parms(): no params data found [ 278.778724][T11366] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.792245][T11366] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.800045][T11366] bridge_slave_0: entered allmulticast mode [ 278.812346][T11366] bridge_slave_0: entered promiscuous mode [ 278.848335][T11366] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.861072][T11366] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.868799][T11366] bridge_slave_1: entered allmulticast mode [ 278.881875][T11366] bridge_slave_1: entered promiscuous mode [ 278.993430][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 279.009584][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 279.019140][T11366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.030360][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 279.038493][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 279.042833][T11366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.059995][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 279.083039][T11369] chnl_net:caif_netlink_parms(): no params data found [ 279.130245][ T8515] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.172672][T11366] team0: Port device team_slave_0 added [ 279.191480][T11366] team0: Port device team_slave_1 added [ 279.225515][ T5840] Bluetooth: hci0: command tx timeout [ 279.275791][ T8515] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.294451][T11366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.302064][T11366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.329889][T11366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.357746][T11366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.364721][T11366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.396616][T11366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.447225][ T8515] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.520718][ T8515] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.578469][T11369] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.586552][T11369] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.593727][T11369] bridge_slave_0: entered allmulticast mode [ 279.601805][T11369] bridge_slave_0: entered promiscuous mode [ 279.611962][T11369] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.619588][T11369] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.627577][T11369] bridge_slave_1: entered allmulticast mode [ 279.636628][T11369] bridge_slave_1: entered promiscuous mode [ 279.672190][T11366] hsr_slave_0: entered promiscuous mode [ 279.678927][T11366] hsr_slave_1: entered promiscuous mode [ 279.716027][ T5840] Bluetooth: hci2: command tx timeout [ 279.741467][T11369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.759644][T11369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.813707][T11369] team0: Port device team_slave_0 added [ 279.852639][T11369] team0: Port device team_slave_1 added [ 279.961454][T11369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.973657][T11369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.002352][T11369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.042823][T11369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.050195][T11369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.078153][T11369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.164614][ T8515] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.260689][T11369] hsr_slave_0: entered promiscuous mode [ 280.267563][T11369] hsr_slave_1: entered promiscuous mode [ 280.273905][T11369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 280.281941][T11369] Cannot create hsr debugfs directory [ 280.302559][ T8515] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.345008][T11381] chnl_net:caif_netlink_parms(): no params data found [ 280.390290][ T8515] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.473546][ T8515] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.642783][T11381] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.650999][T11381] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.661050][T11381] bridge_slave_0: entered allmulticast mode [ 280.669707][T11381] bridge_slave_0: entered promiscuous mode [ 280.714624][T11381] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.722827][T11381] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.731785][T11381] bridge_slave_1: entered allmulticast mode [ 280.741821][T11381] bridge_slave_1: entered promiscuous mode [ 280.853725][T11381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.875054][T11381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.886721][ T8515] bridge_slave_1: left allmulticast mode [ 280.892411][ T8515] bridge_slave_1: left promiscuous mode [ 280.899536][ T8515] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.910060][ T8515] bridge_slave_0: left allmulticast mode [ 280.916104][ T8515] bridge_slave_0: left promiscuous mode [ 280.921825][ T8515] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.934483][ T8515] bridge_slave_1: left allmulticast mode [ 280.940291][ T8515] bridge_slave_1: left promiscuous mode [ 280.946965][ T8515] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.958632][ T8515] bridge_slave_0: left allmulticast mode [ 280.964297][ T8515] bridge_slave_0: left promiscuous mode [ 280.970427][ T8515] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.147042][ T5840] Bluetooth: hci3: command tx timeout [ 281.309013][ T5837] Bluetooth: hci0: command tx timeout [ 281.330296][ T8515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.342509][ T8515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.352769][ T8515] bond0 (unregistering): Released all slaves [ 281.605920][ T8515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.620385][ T8515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.630587][ T8515] bond0 (unregistering): Released all slaves [ 281.760009][T11381] team0: Port device team_slave_0 added [ 281.779877][T11381] team0: Port device team_slave_1 added [ 281.796148][ T5837] Bluetooth: hci2: command tx timeout [ 281.856987][T11381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.863969][T11381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.893084][T11381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.919693][T11381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.926780][T11381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.954353][T11381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.060180][T11381] hsr_slave_0: entered promiscuous mode [ 282.067193][T11381] hsr_slave_1: entered promiscuous mode [ 282.073474][T11381] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.082177][T11381] Cannot create hsr debugfs directory [ 282.260095][T11366] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 282.284161][T11366] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 282.294124][T11366] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 282.332287][T11366] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 282.388384][ T8515] hsr_slave_0: left promiscuous mode [ 282.394237][ T8515] hsr_slave_1: left promiscuous mode [ 282.402369][ T8515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.412097][ T8515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.422183][ T8515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.433500][ T8515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.447305][ T8515] hsr_slave_0: left promiscuous mode [ 282.453179][ T8515] hsr_slave_1: left promiscuous mode [ 282.459759][ T8515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.467390][ T8515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.475479][ T8515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.482937][ T8515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.514187][ T8515] veth1_macvtap: left promiscuous mode [ 282.519862][ T8515] veth0_macvtap: left promiscuous mode [ 282.526030][ T8515] veth1_vlan: left promiscuous mode [ 282.531330][ T8515] veth0_vlan: left promiscuous mode [ 282.539254][ T8515] veth1_macvtap: left promiscuous mode [ 282.544788][ T8515] veth0_macvtap: left promiscuous mode [ 282.550574][ T8515] veth1_vlan: left promiscuous mode [ 282.556833][ T8515] veth0_vlan: left promiscuous mode [ 283.041074][ T8515] team0 (unregistering): Port device team_slave_1 removed [ 283.078876][ T8515] team0 (unregistering): Port device team_slave_0 removed [ 283.227935][ T5837] Bluetooth: hci3: command tx timeout [ 283.385843][ T5837] Bluetooth: hci0: command tx timeout [ 283.742822][ T8515] team0 (unregistering): Port device team_slave_1 removed [ 283.784845][ T8515] team0 (unregistering): Port device team_slave_0 removed [ 283.867293][ T5837] Bluetooth: hci2: command tx timeout [ 284.162128][T11369] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 284.179596][T11369] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 284.197497][T11369] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 284.209087][T11369] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 284.442419][T11366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.500963][T11369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.521414][T11366] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.546214][ T1318] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.553396][ T1318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.574539][ T1318] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.581667][ T1318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.612952][T11369] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.668326][ T7877] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.675520][ T7877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.694752][ T7877] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.701896][ T7877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.779974][T11381] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 284.792393][T11381] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 284.803219][T11381] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 284.824790][T11381] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 285.054430][T11381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.087558][T11381] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.103847][ T8515] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.111087][ T8515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.143847][ T8515] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.151105][ T8515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.230443][T11369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.262266][T11366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.306072][ T5837] Bluetooth: hci3: command tx timeout [ 285.392639][T11369] veth0_vlan: entered promiscuous mode [ 285.426037][T11369] veth1_vlan: entered promiscuous mode [ 285.465484][ T5837] Bluetooth: hci0: command tx timeout [ 285.509356][T11369] veth0_macvtap: entered promiscuous mode [ 285.563209][T11369] veth1_macvtap: entered promiscuous mode [ 285.601410][T11381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.616744][T11369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.667453][T11369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.689202][T11369] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.699307][T11369] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.708788][T11369] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.717846][T11369] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.808064][T11381] veth0_vlan: entered promiscuous mode [ 285.850328][ T8515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.856477][T11381] veth1_vlan: entered promiscuous mode [ 285.869681][ T8515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.874916][T11366] veth0_vlan: entered promiscuous mode [ 285.928837][T11366] veth1_vlan: entered promiscuous mode [ 285.945906][ T5837] Bluetooth: hci2: command tx timeout [ 285.947526][T11381] veth0_macvtap: entered promiscuous mode [ 285.975652][ T8514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.984382][ T8514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.985474][T11381] veth1_macvtap: entered promiscuous mode [ 286.058146][T11366] veth0_macvtap: entered promiscuous mode [ 286.071359][T11381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.089635][T11366] veth1_macvtap: entered promiscuous mode [ 286.110590][T11381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.150269][T11381] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.162211][T11381] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.171148][T11381] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.182410][T11381] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.211257][T11366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.231345][T11366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.263120][T11366] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.281972][T11366] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.291998][T11366] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.301659][T11366] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.368775][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.377906][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.473015][ T1318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.485157][ T1318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.487548][ T8515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.512370][ T8515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.566343][ T1318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.580350][ T1318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.942949][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.492446][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.898191][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.070292][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.112339][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 288.123288][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 288.130838][ T5156] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 288.139660][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 288.142712][ T5156] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 288.154026][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 288.154865][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 288.163103][ T5156] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 288.180204][ T5156] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 288.197672][ T5156] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 288.392200][ T36] bridge_slave_1: left allmulticast mode [ 288.398172][ T36] bridge_slave_1: left promiscuous mode [ 288.403942][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.456461][ T36] bridge_slave_0: left allmulticast mode [ 288.474324][ T36] bridge_slave_0: left promiscuous mode [ 288.480667][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.485827][T11443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1383'. [ 288.826941][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 288.836093][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 288.859910][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 288.871585][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 288.880199][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 289.034630][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.046387][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.056995][ T36] bond0 (unregistering): Released all slaves [ 289.569575][T11436] chnl_net:caif_netlink_parms(): no params data found [ 289.632572][T11473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1389'. [ 289.647484][ T36] hsr_slave_0: left promiscuous mode [ 289.659053][ T36] hsr_slave_1: left promiscuous mode [ 289.665190][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.673056][T11472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1389'. [ 289.682491][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.691647][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.699228][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.726507][ T36] veth1_macvtap: left promiscuous mode [ 289.732360][ T36] veth0_macvtap: left promiscuous mode [ 289.738567][ T36] veth1_vlan: left promiscuous mode [ 289.744015][ T36] veth0_vlan: left promiscuous mode [ 290.163600][ T36] team0 (unregistering): Port device team_slave_1 removed [ 290.198064][ T51] Bluetooth: hci0: command tx timeout [ 290.206924][ T36] team0 (unregistering): Port device team_slave_0 removed [ 290.265745][ T51] Bluetooth: hci2: command tx timeout [ 290.664178][T11434] chnl_net:caif_netlink_parms(): no params data found [ 290.787242][T11483] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1390'. [ 290.814464][T11436] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.824437][T11436] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.847750][T11436] bridge_slave_0: entered allmulticast mode [ 290.867268][T11436] bridge_slave_0: entered promiscuous mode [ 290.910612][ T51] Bluetooth: hci3: command tx timeout [ 290.948154][T11436] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.955842][T11436] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.963079][T11436] bridge_slave_1: entered allmulticast mode [ 290.970954][T11436] bridge_slave_1: entered promiscuous mode [ 291.062656][T11436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.091462][T11436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.194084][T11436] team0: Port device team_slave_0 added [ 291.204466][T11453] chnl_net:caif_netlink_parms(): no params data found [ 291.235131][T11434] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.250245][T11434] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.260934][T11434] bridge_slave_0: entered allmulticast mode [ 291.279207][T11434] bridge_slave_0: entered promiscuous mode [ 291.292460][T11436] team0: Port device team_slave_1 added [ 291.392008][T11434] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.401756][T11434] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.410059][T11434] bridge_slave_1: entered allmulticast mode [ 291.418104][T11434] bridge_slave_1: entered promiscuous mode [ 291.426747][T11436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.434084][T11436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.462572][T11436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.476991][T11436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.484194][T11436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.510648][T11436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.702333][T11434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.740820][T11511] netlink: 6840 bytes leftover after parsing attributes in process `syz.2.1394'. [ 291.743988][T11436] hsr_slave_0: entered promiscuous mode [ 291.776470][T11436] hsr_slave_1: entered promiscuous mode [ 291.782829][T11436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 291.791322][T11436] Cannot create hsr debugfs directory [ 291.848648][T11434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.950256][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.982752][T11453] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.005610][T11453] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.012874][T11453] bridge_slave_0: entered allmulticast mode [ 292.029532][T11453] bridge_slave_0: entered promiscuous mode [ 292.043580][T11434] team0: Port device team_slave_0 added [ 292.089446][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.121770][T11453] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.132991][T11453] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.148575][T11453] bridge_slave_1: entered allmulticast mode [ 292.159974][T11453] bridge_slave_1: entered promiscuous mode [ 292.196268][T11434] team0: Port device team_slave_1 added [ 292.240687][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.265369][ T51] Bluetooth: hci0: command tx timeout [ 292.281915][T11453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.345461][ T51] Bluetooth: hci2: command tx timeout [ 292.395639][T11434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.402714][T11434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.445640][T11434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.462521][T11453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.497543][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.521040][T11434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.534182][T11434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.568356][T11434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.739449][T11453] team0: Port device team_slave_0 added [ 292.752106][T11453] team0: Port device team_slave_1 added [ 292.930293][T11434] hsr_slave_0: entered promiscuous mode [ 292.937031][T11434] hsr_slave_1: entered promiscuous mode [ 292.943534][T11434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.951491][T11434] Cannot create hsr debugfs directory [ 292.967510][T11453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.974487][T11453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.007836][ T51] Bluetooth: hci3: command tx timeout [ 293.013975][T11453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.065776][T11453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.074692][T11453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.102347][T11453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.259316][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.332058][T11453] hsr_slave_0: entered promiscuous mode [ 293.339658][T11453] hsr_slave_1: entered promiscuous mode [ 293.347833][T11453] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.355641][T11453] Cannot create hsr debugfs directory [ 293.392522][T11550] openvswitch: netlink: Flow key attr not present in new flow. [ 293.469424][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.540074][T11554] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1409'. [ 293.629789][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.769345][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.801552][T11561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1411'. [ 294.135017][T11436] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 294.236866][T11436] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 294.291781][T11436] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 294.355462][ T51] Bluetooth: hci0: command tx timeout [ 294.362403][T11436] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 294.414195][ T36] bridge_slave_1: left allmulticast mode [ 294.420592][ T36] bridge_slave_1: left promiscuous mode [ 294.426942][ T51] Bluetooth: hci2: command tx timeout [ 294.432673][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.452555][ T36] bridge_slave_0: left allmulticast mode [ 294.459769][ T36] bridge_slave_0: left promiscuous mode [ 294.466657][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.481338][ T36] bridge_slave_1: left allmulticast mode [ 294.488096][ T36] bridge_slave_1: left promiscuous mode [ 294.494016][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.503699][ T36] bridge_slave_0: left allmulticast mode [ 294.509933][ T36] bridge_slave_0: left promiscuous mode [ 294.515870][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.949264][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.965057][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.976739][ T36] bond0 (unregistering): Released all slaves [ 295.065365][ T51] Bluetooth: hci3: command tx timeout [ 295.274171][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.285535][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.299875][ T36] bond0 (unregistering): Released all slaves [ 295.336549][T11582] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 295.546328][T11598] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1418'. [ 295.784097][T11434] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 295.920562][T11434] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 295.965104][T11434] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 296.033418][T11434] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 296.041521][T11610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1422'. [ 296.176706][T11436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.286360][ T36] hsr_slave_0: left promiscuous mode [ 296.293438][ T36] hsr_slave_1: left promiscuous mode [ 296.316307][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.323744][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.332678][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.340198][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.362081][ T36] hsr_slave_0: left promiscuous mode [ 296.368891][ T36] hsr_slave_1: left promiscuous mode [ 296.374986][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.382844][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.407297][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.414756][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.425801][ T51] Bluetooth: hci0: command tx timeout [ 296.505566][ T51] Bluetooth: hci2: command tx timeout [ 296.527418][ T36] veth1_macvtap: left promiscuous mode [ 296.533026][ T36] veth0_macvtap: left promiscuous mode [ 296.551477][ T36] veth1_vlan: left promiscuous mode [ 296.572080][ T36] veth0_vlan: left promiscuous mode [ 296.584677][ T36] veth1_macvtap: left promiscuous mode [ 296.594664][ T36] veth0_macvtap: left promiscuous mode [ 296.608768][ T36] veth1_vlan: left promiscuous mode [ 296.614234][ T36] veth0_vlan: left promiscuous mode [ 297.145900][ T51] Bluetooth: hci3: command tx timeout [ 297.233643][ T36] team0 (unregistering): Port device team_slave_1 removed [ 297.274598][ T36] team0 (unregistering): Port device team_slave_0 removed [ 297.439211][T11636] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 298.003901][ T36] team0 (unregistering): Port device team_slave_1 removed [ 298.048461][ T36] team0 (unregistering): Port device team_slave_0 removed [ 298.490074][T11622] veth0_to_bridge: left allmulticast mode [ 298.512903][T11622] veth0_to_bridge: left promiscuous mode [ 298.521295][T11622] bridge0: port 4(veth0_to_bridge) entered disabled state [ 298.538253][T11622] bridge_slave_0: left allmulticast mode [ 298.544031][T11622] bridge_slave_0: left promiscuous mode [ 298.550756][T11622] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.561300][T11622] bridge_slave_1: left allmulticast mode [ 298.567765][T11622] bridge_slave_1: left promiscuous mode [ 298.573538][T11622] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.584443][T11622] bond0: (slave bond_slave_0): Releasing backup interface [ 298.600556][T11622] bond0: (slave bond_slave_1): Releasing backup interface [ 298.617797][T11622] team0: Port device team_slave_0 removed [ 298.628623][T11622] team0: Port device team_slave_1 removed [ 298.635100][T11622] batadv_slave_0: left allmulticast mode [ 298.641612][T11622] batadv_slave_0: left promiscuous mode [ 298.647696][T11622] bridge0: port 3(batadv_slave_0) entered disabled state [ 298.667740][T11622] bond0: (slave ÿ): Releasing backup interface [ 298.694925][T11627] team0: Mode changed to "activebackup" [ 298.702132][T11632] tipc: Started in network mode [ 298.712367][T11632] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 298.720897][T11632] tipc: Enabled bearer , priority 0 [ 298.771151][T11436] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.847160][ T8515] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.854371][ T8515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.938095][ T8515] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.945353][ T8515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.121818][T11453] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 299.167254][T11453] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 299.220665][T11453] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 299.252445][T11453] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 299.288027][T11434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.412007][T11635] infiniband syz0: set down [ 299.421935][T11635] infiniband syz0: added ipvlan0 [ 299.423427][T11434] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.430513][T11635] syz0: rxe_create_cq: returned err = -12 [ 299.472575][T11635] infiniband syz0: Couldn't create ib_mad CQ [ 299.481570][ T7877] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.488847][ T7877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.507294][T11635] infiniband syz0: Couldn't open port 1 [ 299.591202][T11635] RDS/IB: syz0: added [ 299.602547][T11635] smc: adding ib device syz0 with port count 1 [ 299.622648][T11635] smc: ib device syz0 port 1 has pnetid [ 299.631275][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.638500][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.718379][ T5895] tipc: Node number set to 11578026 [ 299.871592][T11436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.879747][T11662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1431'. [ 300.014009][T11453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.110393][T11453] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.192125][ T8519] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.199384][ T8519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.315945][T11436] veth0_vlan: entered promiscuous mode [ 300.413805][ T8519] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.421053][ T8519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.500927][T11436] veth1_vlan: entered promiscuous mode [ 300.700745][T11453] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 300.754526][T11436] veth0_macvtap: entered promiscuous mode [ 300.787115][T11436] veth1_macvtap: entered promiscuous mode [ 300.810657][T11436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.830635][T11434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.854889][T11436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.910843][T11436] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.922728][T11436] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.945338][T11436] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.954733][T11436] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.087368][T11700] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 301.173923][T11434] veth0_vlan: entered promiscuous mode [ 301.223029][T11434] veth1_vlan: entered promiscuous mode [ 301.314563][ T7893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.336480][ T7893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.340052][T11453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.407792][T11434] veth0_macvtap: entered promiscuous mode [ 301.448932][T11434] veth1_macvtap: entered promiscuous mode [ 301.482265][ T7893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.505547][ T7893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.564175][T11434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.616053][T11434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.650322][T11434] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.674141][T11434] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.704500][T11434] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.725636][T11434] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.850214][T11712] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 301.882284][T11714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1438'. [ 302.029127][ T8514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.055496][ T8514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.155633][T11718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1439'. [ 302.176551][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.380709][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.453857][T11453] veth0_vlan: entered promiscuous mode [ 302.469326][ T8519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.498271][ T8519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.510898][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.543352][T11453] veth1_vlan: entered promiscuous mode [ 302.611625][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.656472][T11453] veth0_macvtap: entered promiscuous mode [ 302.740744][T11453] veth1_macvtap: entered promiscuous mode [ 302.791344][T11453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.850650][T11453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.883763][T11453] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.898958][T11453] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.912472][T11453] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.927161][T11453] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.059028][ T13] bridge_slave_1: left allmulticast mode [ 303.064783][ T13] bridge_slave_1: left promiscuous mode [ 303.095936][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.107633][ T13] bridge_slave_0: left allmulticast mode [ 303.113325][ T13] bridge_slave_0: left promiscuous mode [ 303.131768][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.525428][ T5156] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 303.540448][ T5156] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 303.558601][ T5156] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 303.575891][ T5156] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 303.583670][ T5156] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 303.638483][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.649492][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.660313][ T13] bond0 (unregistering): Released all slaves [ 303.842891][ T7894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.857647][ T7894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.919188][ T7894] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.940463][ T7894] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.758174][ T13] hsr_slave_0: left promiscuous mode [ 304.776807][ T13] hsr_slave_1: left promiscuous mode [ 304.782866][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.790811][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.799386][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.807466][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.833500][ T13] veth1_macvtap: left promiscuous mode [ 304.839648][ T13] veth0_macvtap: left promiscuous mode [ 304.851288][ T13] veth1_vlan: left promiscuous mode [ 304.856761][ T13] veth0_vlan: left promiscuous mode [ 304.935035][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 304.943659][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 304.952077][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 304.961393][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 304.970672][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 305.337978][ T13] team0 (unregistering): Port device team_slave_1 removed [ 305.377742][ T13] team0 (unregistering): Port device team_slave_0 removed [ 305.625879][ T51] Bluetooth: hci0: command tx timeout [ 305.638628][T11739] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 305.848663][ T5156] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 305.890393][ T5156] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 305.905943][ T5156] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 305.919329][ T5156] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 305.933865][ T5156] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 306.140638][T11721] chnl_net:caif_netlink_parms(): no params data found [ 306.443944][T11749] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 306.465671][T11749] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 306.644567][T11721] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.668411][T11755] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1448'. [ 306.685393][T11721] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.692683][T11721] bridge_slave_0: entered allmulticast mode [ 306.722039][T11721] bridge_slave_0: entered promiscuous mode [ 306.743973][T11721] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.768359][T11721] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.778536][T11721] bridge_slave_1: entered allmulticast mode [ 306.788991][T11721] bridge_slave_1: entered promiscuous mode [ 306.896809][T11721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.010325][T11721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.065656][ T5156] Bluetooth: hci2: command tx timeout [ 307.156092][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.173827][T11770] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1453'. [ 307.291715][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.344747][T11772] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.353557][T11772] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.362372][T11772] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.370948][T11772] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.423669][T11721] team0: Port device team_slave_0 added [ 307.475508][T11775] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1455'. [ 307.503133][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.523280][T11721] team0: Port device team_slave_1 added [ 307.557571][T11777] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 307.562429][T11779] netlink: 'syz.1.1456': attribute type 1 has an invalid length. [ 307.651614][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.670677][T11721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.682474][T11721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.715478][ T5156] Bluetooth: hci0: command tx timeout [ 307.723925][T11721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.745751][T11721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.752727][T11721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.779486][T11721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.832750][T11786] netlink: 'syz.1.1458': attribute type 10 has an invalid length. [ 307.915184][T11786] team0: Device veth1_macvtap failed to register rx_handler [ 308.011114][T11721] hsr_slave_0: entered promiscuous mode [ 308.027369][T11721] hsr_slave_1: entered promiscuous mode [ 308.035494][ T5156] Bluetooth: hci3: command tx timeout [ 308.499844][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.573605][T11740] chnl_net:caif_netlink_parms(): no params data found [ 308.675049][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.739500][T11816] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1467'. [ 308.762470][T11731] chnl_net:caif_netlink_parms(): no params data found [ 308.844507][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.887684][T11822] netlink: 'syz.1.1468': attribute type 4 has an invalid length. [ 308.937501][T11818] netlink: 'syz.1.1468': attribute type 4 has an invalid length. [ 309.128367][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.145443][ T5156] Bluetooth: hci2: command tx timeout [ 309.219404][T11740] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.233772][T11740] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.241209][T11740] bridge_slave_0: entered allmulticast mode [ 309.260672][T11740] bridge_slave_0: entered promiscuous mode [ 309.327895][T11731] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.335021][T11731] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.348877][T11731] bridge_slave_0: entered allmulticast mode [ 309.357421][T11731] bridge_slave_0: entered promiscuous mode [ 309.385949][T11838] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1473'. [ 309.405708][T11740] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.412879][T11740] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.431578][T11740] bridge_slave_1: entered allmulticast mode [ 309.442684][T11740] bridge_slave_1: entered promiscuous mode [ 309.473011][T11843] vxcan1: tx address claim with dlc 0 [ 309.481938][T11731] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.489366][T11731] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.496933][T11731] bridge_slave_1: entered allmulticast mode [ 309.504279][T11731] bridge_slave_1: entered promiscuous mode [ 309.511135][T11838] tipc: Enabling of bearer rejected, failed to enable media [ 309.535956][T11843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1475'. [ 309.573046][T11740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.656400][T11740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.722271][T11731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.746171][T11731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.785523][ T5156] Bluetooth: hci0: command tx timeout [ 309.833611][T11740] team0: Port device team_slave_0 added [ 309.958837][T11740] team0: Port device team_slave_1 added [ 309.969817][T11857] netlink: 'syz.2.1480': attribute type 2 has an invalid length. [ 309.982641][T11857] netlink: 'syz.2.1480': attribute type 2 has an invalid length. [ 310.012500][T11731] team0: Port device team_slave_0 added [ 310.105471][ T5156] Bluetooth: hci3: command tx timeout [ 310.117713][T11731] team0: Port device team_slave_1 added [ 310.155960][ T13] bridge_slave_1: left allmulticast mode [ 310.161672][ T13] bridge_slave_1: left promiscuous mode [ 310.167969][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.193054][ T13] bridge_slave_0: left allmulticast mode [ 310.199476][ T13] bridge_slave_0: left promiscuous mode [ 310.206636][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.220578][ T13] bridge_slave_1: left allmulticast mode [ 310.226768][ T13] bridge_slave_1: left promiscuous mode [ 310.232454][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.243753][ T13] bridge_slave_0: left allmulticast mode [ 310.250048][ T13] bridge_slave_0: left promiscuous mode [ 310.256276][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.359887][T11869] IPVS: wrr: UDP 224.0.0.2:20004 - no destination available [ 310.670958][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.683051][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.693743][ T13] bond0 (unregistering): Released all slaves [ 310.985183][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.001028][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.017854][ T13] bond0 (unregistering): Released all slaves [ 311.034579][T11740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.041974][T11740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.072457][T11740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.101270][T11740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.114917][T11740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.142372][T11740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.183318][T11731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.199870][T11731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.230054][T11731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.236115][ T5156] Bluetooth: hci2: command tx timeout [ 311.253802][T11868] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 311.331266][T11872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1483'. [ 311.369928][T11731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.380343][T11731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.413071][T11731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.436462][T11721] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 311.447238][T11721] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 311.457612][T11721] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 311.503791][T11872] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1483'. [ 311.633067][T11721] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 311.698087][T11880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1484'. [ 311.728720][T11731] hsr_slave_0: entered promiscuous mode [ 311.735113][T11731] hsr_slave_1: entered promiscuous mode [ 311.743656][T11731] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.751415][T11731] Cannot create hsr debugfs directory [ 311.769987][T11740] hsr_slave_0: entered promiscuous mode [ 311.776696][T11740] hsr_slave_1: entered promiscuous mode [ 311.782756][T11740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.791372][T11740] Cannot create hsr debugfs directory [ 311.866855][ T5156] Bluetooth: hci0: command tx timeout [ 312.199840][ T5156] Bluetooth: hci3: command tx timeout [ 312.384092][T11913] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 312.824896][T11918] openvswitch: netlink: ct_state flags ffffffff unsupported [ 312.995161][ T13] hsr_slave_0: left promiscuous mode [ 313.001288][ T13] hsr_slave_1: left promiscuous mode [ 313.014118][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.024755][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.036061][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.043504][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.060219][ T13] hsr_slave_0: left promiscuous mode [ 313.068730][ T13] hsr_slave_1: left promiscuous mode [ 313.074655][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.082760][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.091105][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.100180][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.135802][ T13] veth1_macvtap: left promiscuous mode [ 313.141405][ T13] veth0_macvtap: left promiscuous mode [ 313.149729][ T13] veth1_vlan: left promiscuous mode [ 313.155093][ T13] veth0_vlan: left promiscuous mode [ 313.163518][ T13] veth1_macvtap: left promiscuous mode [ 313.169715][ T13] veth0_macvtap: left promiscuous mode [ 313.175474][ T13] veth1_vlan: left promiscuous mode [ 313.180833][ T13] veth0_vlan: left promiscuous mode [ 313.305458][ T5156] Bluetooth: hci2: command tx timeout [ 313.725124][ T13] team0 (unregistering): Port device team_slave_1 removed [ 313.768233][ T13] team0 (unregistering): Port device team_slave_0 removed [ 314.268711][ T5156] Bluetooth: hci3: command tx timeout [ 314.482509][ T13] team0 (unregistering): Port device team_slave_1 removed [ 314.527064][ T13] team0 (unregistering): Port device team_slave_0 removed [ 314.909240][T11922] pimreg: entered allmulticast mode [ 315.017783][T11721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.076992][T11927] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1497'. [ 315.100934][T11721] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.114605][T11925] netlink: 71 bytes leftover after parsing attributes in process `syz.1.1498'. [ 315.149828][ T8519] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.157044][ T8519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.277267][ T8519] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.284466][ T8519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.421305][T11721] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 315.498832][T11939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1502'. [ 315.542020][T11939] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 315.577750][T11939] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 315.591419][T11939] gretap0: entered promiscuous mode [ 315.605618][T11939] gretap0: entered allmulticast mode [ 315.688168][T11942] bridge0: port 1(batadv0) entered blocking state [ 315.694847][T11942] bridge0: port 1(batadv0) entered disabled state [ 315.708594][T11942] batadv0: entered allmulticast mode [ 315.731926][T11942] batadv0: entered promiscuous mode [ 315.971436][T11740] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 316.019926][T11721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.029139][T11740] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 316.075524][T11740] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 316.124649][T11740] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 316.165900][T11957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1507'. [ 316.194827][ T3505] ================================================================== [ 316.202933][ T3505] BUG: KASAN: slab-use-after-free in br_multicast_has_router_adjacent+0x401/0x4e0 [ 316.212175][ T3505] Read of size 8 at addr ffff8880584e11b0 by task kworker/u8:7/3505 [ 316.220180][ T3505] [ 316.222554][ T3505] CPU: 0 UID: 0 PID: 3505 Comm: kworker/u8:7 Not tainted 6.16.0-rc2-syzkaller-00161-g714db279942b #0 PREEMPT(full) [ 316.222579][ T3505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 316.222592][ T3505] Workqueue: bat_events batadv_mcast_mla_update [ 316.222631][ T3505] Call Trace: [ 316.222643][ T3505] [ 316.222653][ T3505] dump_stack_lvl+0x189/0x250 [ 316.222686][ T3505] ? __virt_addr_valid+0x1c8/0x5c0 [ 316.222707][ T3505] ? rcu_is_watching+0x15/0xb0 [ 316.222738][ T3505] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.222769][ T3505] ? rcu_is_watching+0x15/0xb0 [ 316.222799][ T3505] ? lock_release+0x4b/0x3e0 [ 316.222829][ T3505] ? __virt_addr_valid+0x1c8/0x5c0 [ 316.222850][ T3505] ? __virt_addr_valid+0x4a5/0x5c0 [ 316.222871][ T3505] print_report+0xd2/0x2b0 [ 316.222897][ T3505] ? br_multicast_has_router_adjacent+0x401/0x4e0 [ 316.222919][ T3505] kasan_report+0x118/0x150 [ 316.222941][ T3505] ? br_multicast_has_router_adjacent+0x401/0x4e0 [ 316.222967][ T3505] ? br_multicast_has_router_adjacent+0x24/0x4e0 [ 316.222989][ T3505] ? __pfx_br_handle_frame+0x10/0x10 [ 316.223012][ T3505] br_multicast_has_router_adjacent+0x401/0x4e0 [ 316.223037][ T3505] batadv_mcast_mla_update+0x598/0x3670 [ 316.223061][ T3505] ? batadv_mcast_mla_update+0x176/0x3670 [ 316.223083][ T3505] ? do_raw_spin_lock+0x121/0x290 [ 316.223103][ T3505] ? look_up_lock_class+0x74/0x170 [ 316.223136][ T3505] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 316.223159][ T3505] ? __lock_acquire+0xab9/0xd20 [ 316.223196][ T3505] ? _raw_spin_unlock_irq+0x23/0x50 [ 316.223223][ T3505] ? process_scheduled_works+0x9ef/0x17b0 [ 316.223260][ T3505] ? process_scheduled_works+0x9ef/0x17b0 [ 316.223288][ T3505] process_scheduled_works+0xae1/0x17b0 [ 316.223330][ T3505] ? __pfx_process_scheduled_works+0x10/0x10 [ 316.223366][ T3505] worker_thread+0x8a0/0xda0 [ 316.223395][ T3505] kthread+0x70e/0x8a0 [ 316.223425][ T3505] ? __pfx_worker_thread+0x10/0x10 [ 316.223451][ T3505] ? __pfx_kthread+0x10/0x10 [ 316.223472][ T3505] ? _raw_spin_unlock_irq+0x23/0x50 [ 316.223496][ T3505] ? lockdep_hardirqs_on+0x9c/0x150 [ 316.223521][ T3505] ? __pfx_kthread+0x10/0x10 [ 316.223541][ T3505] ret_from_fork+0x3f9/0x770 [ 316.223568][ T3505] ? __pfx_ret_from_fork+0x10/0x10 [ 316.223595][ T3505] ? __switch_to_asm+0x39/0x70 [ 316.223612][ T3505] ? __switch_to_asm+0x33/0x70 [ 316.223630][ T3505] ? __pfx_kthread+0x10/0x10 [ 316.223650][ T3505] ret_from_fork_asm+0x1a/0x30 [ 316.223677][ T3505] [ 316.223684][ T3505] [ 316.464610][ T3505] Allocated by task 5849: [ 316.468956][ T3505] kasan_save_track+0x3e/0x80 [ 316.473749][ T3505] __kasan_kmalloc+0x93/0xb0 [ 316.478349][ T3505] __kmalloc_cache_noprof+0x230/0x3d0 [ 316.483734][ T3505] new_nbp+0x188/0x440 [ 316.487808][ T3505] br_add_if+0x28e/0xec0 [ 316.492057][ T3505] do_set_master+0x533/0x6d0 [ 316.496665][ T3505] do_setlink+0xcf0/0x41c0 [ 316.501100][ T3505] rtnl_newlink+0x160b/0x1c70 [ 316.505787][ T3505] rtnetlink_rcv_msg+0x7cf/0xb70 [ 316.510730][ T3505] netlink_rcv_skb+0x205/0x470 [ 316.515589][ T3505] netlink_unicast+0x758/0x8d0 [ 316.520390][ T3505] netlink_sendmsg+0x805/0xb30 [ 316.525340][ T3505] __sock_sendmsg+0x219/0x270 [ 316.530050][ T3505] __sys_sendto+0x3bd/0x520 [ 316.534568][ T3505] __x64_sys_sendto+0xde/0x100 [ 316.539347][ T3505] do_syscall_64+0xfa/0x3b0 [ 316.543868][ T3505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.549777][ T3505] [ 316.552111][ T3505] Freed by task 23: [ 316.555917][ T3505] kasan_save_track+0x3e/0x80 [ 316.560611][ T3505] kasan_save_free_info+0x46/0x50 [ 316.565649][ T3505] __kasan_slab_free+0x62/0x70 [ 316.570419][ T3505] kfree+0x18e/0x440 [ 316.574324][ T3505] kobject_put+0x22b/0x480 [ 316.578754][ T3505] rcu_core+0xca5/0x1710 [ 316.583010][ T3505] handle_softirqs+0x286/0x870 [ 316.587797][ T3505] run_ksoftirqd+0x9b/0x100 [ 316.592311][ T3505] smpboot_thread_fn+0x53f/0xa60 [ 316.597435][ T3505] kthread+0x70e/0x8a0 [ 316.601539][ T3505] ret_from_fork+0x3f9/0x770 [ 316.606193][ T3505] ret_from_fork_asm+0x1a/0x30 [ 316.610971][ T3505] [ 316.613309][ T3505] Last potentially related work creation: [ 316.619048][ T3505] kasan_save_stack+0x3e/0x60 [ 316.623755][ T3505] kasan_record_aux_stack+0xbd/0xd0 [ 316.628975][ T3505] call_rcu+0x142/0x990 [ 316.633140][ T3505] br_del_if+0x146/0x320 [ 316.637411][ T3505] do_set_master+0x30f/0x6d0 [ 316.642023][ T3505] do_setlink+0xcf0/0x41c0 [ 316.646452][ T3505] rtnl_newlink+0x149f/0x1c70 [ 316.651139][ T3505] rtnetlink_rcv_msg+0x7cf/0xb70 [ 316.656087][ T3505] netlink_rcv_skb+0x205/0x470 [ 316.660879][ T3505] netlink_unicast+0x758/0x8d0 [ 316.665753][ T3505] netlink_sendmsg+0x805/0xb30 [ 316.670538][ T3505] __sock_sendmsg+0x219/0x270 [ 316.675238][ T3505] ____sys_sendmsg+0x505/0x830 [ 316.680040][ T3505] ___sys_sendmsg+0x21f/0x2a0 [ 316.684726][ T3505] __x64_sys_sendmsg+0x19b/0x260 [ 316.689760][ T3505] do_syscall_64+0xfa/0x3b0 [ 316.694274][ T3505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.700178][ T3505] [ 316.702505][ T3505] The buggy address belongs to the object at ffff8880584e1000 [ 316.702505][ T3505] which belongs to the cache kmalloc-1k of size 1024 [ 316.716576][ T3505] The buggy address is located 432 bytes inside of [ 316.716576][ T3505] freed 1024-byte region [ffff8880584e1000, ffff8880584e1400) [ 316.730468][ T3505] [ 316.732800][ T3505] The buggy address belongs to the physical page: [ 316.739239][ T3505] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880584e6800 pfn:0x584e0 [ 316.749313][ T3505] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 316.757910][ T3505] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 316.766451][ T3505] page_type: f5(slab) [ 316.770454][ T3505] raw: 00fff00000000240 ffff88801a441dc0 ffffea0001f4b610 ffffea0001f43610 [ 316.779048][ T3505] raw: ffff8880584e6800 000000000010000b 00000000f5000000 0000000000000000 [ 316.787645][ T3505] head: 00fff00000000240 ffff88801a441dc0 ffffea0001f4b610 ffffea0001f43610 [ 316.796329][ T3505] head: ffff8880584e6800 000000000010000b 00000000f5000000 0000000000000000 [ 316.805018][ T3505] head: 00fff00000000003 ffffea0001613801 00000000ffffffff 00000000ffffffff [ 316.813690][ T3505] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 316.822386][ T3505] page dumped because: kasan: bad access detected [ 316.828813][ T3505] page_owner tracks the page as allocated [ 316.834701][ T3505] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5849, tgid 5849 (syz-executor), ts 81278653145, free_ts 27530166521 [ 316.855464][ T3505] post_alloc_hook+0x240/0x2a0 [ 316.860239][ T3505] get_page_from_freelist+0x21e4/0x22c0 [ 316.865880][ T3505] __alloc_frozen_pages_noprof+0x181/0x370 [ 316.871699][ T3505] alloc_pages_mpol+0x232/0x4a0 [ 316.876555][ T3505] allocate_slab+0x8a/0x3b0 [ 316.881073][ T3505] ___slab_alloc+0xbfc/0x1480 [ 316.885759][ T3505] __kmalloc_node_track_caller_noprof+0x2f8/0x4e0 [ 316.892182][ T3505] kmalloc_reserve+0x136/0x290 [ 316.896976][ T3505] __alloc_skb+0x142/0x2d0 [ 316.901399][ T3505] br_info_notify+0x105/0x260 [ 316.906087][ T3505] br_add_if+0xbd9/0xec0 [ 316.910336][ T3505] do_set_master+0x533/0x6d0 [ 316.914936][ T3505] do_setlink+0xcf0/0x41c0 [ 316.919379][ T3505] rtnl_newlink+0x160b/0x1c70 [ 316.924060][ T3505] rtnetlink_rcv_msg+0x7cf/0xb70 [ 316.929010][ T3505] netlink_rcv_skb+0x205/0x470 [ 316.933780][ T3505] page last free pid 1 tgid 1 stack trace: [ 316.940106][ T3505] __free_frozen_pages+0xc71/0xe70 [ 316.945236][ T3505] free_contig_range+0x1bd/0x4a0 [ 316.950196][ T3505] destroy_args+0x7e/0x5d0 [ 316.954618][ T3505] debug_vm_pgtable+0x412/0x450 [ 316.959477][ T3505] do_one_initcall+0x233/0x820 [ 316.964244][ T3505] do_initcall_level+0x137/0x1f0 [ 316.969191][ T3505] do_initcalls+0x69/0xd0 [ 316.973524][ T3505] kernel_init_freeable+0x3d9/0x570 [ 316.978730][ T3505] kernel_init+0x1d/0x1d0 [ 316.983063][ T3505] ret_from_fork+0x3f9/0x770 [ 316.987668][ T3505] ret_from_fork_asm+0x1a/0x30 [ 316.992443][ T3505] [ 316.994771][ T3505] Memory state around the buggy address: [ 317.000418][ T3505] ffff8880584e1080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 317.008482][ T3505] ffff8880584e1100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 317.016632][ T3505] >ffff8880584e1180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 317.024694][ T3505] ^ [ 317.030329][ T3505] ffff8880584e1200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 317.038406][ T3505] ffff8880584e1280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 317.046490][ T3505] ================================================================== [ 317.083083][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.116384][ T3505] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 317.123636][ T3505] CPU: 0 UID: 0 PID: 3505 Comm: kworker/u8:7 Not tainted 6.16.0-rc2-syzkaller-00161-g714db279942b #0 PREEMPT(full) [ 317.135821][ T3505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 317.146362][ T3505] Workqueue: bat_events batadv_mcast_mla_update [ 317.152665][ T3505] Call Trace: [ 317.155997][ T3505] [ 317.158976][ T3505] dump_stack_lvl+0x99/0x250 [ 317.163629][ T3505] ? __asan_memcpy+0x40/0x70 [ 317.168285][ T3505] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.173543][ T3505] ? __pfx__printk+0x10/0x10 [ 317.178181][ T3505] panic+0x2db/0x790 [ 317.182133][ T3505] ? __pfx_panic+0x10/0x10 [ 317.186604][ T3505] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 317.192549][ T3505] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 317.198924][ T3505] ? print_memory_metadata+0x314/0x400 [ 317.204947][ T3505] ? br_multicast_has_router_adjacent+0x401/0x4e0 [ 317.211382][ T3505] check_panic_on_warn+0x89/0xb0 [ 317.216350][ T3505] ? br_multicast_has_router_adjacent+0x401/0x4e0 [ 317.222779][ T3505] end_report+0x78/0x160 [ 317.227053][ T3505] kasan_report+0x129/0x150 [ 317.231573][ T3505] ? br_multicast_has_router_adjacent+0x401/0x4e0 [ 317.238002][ T3505] ? br_multicast_has_router_adjacent+0x24/0x4e0 [ 317.244352][ T3505] ? __pfx_br_handle_frame+0x10/0x10 [ 317.249671][ T3505] br_multicast_has_router_adjacent+0x401/0x4e0 [ 317.256967][ T3505] batadv_mcast_mla_update+0x598/0x3670 [ 317.262536][ T3505] ? batadv_mcast_mla_update+0x176/0x3670 [ 317.268273][ T3505] ? do_raw_spin_lock+0x121/0x290 [ 317.273322][ T3505] ? look_up_lock_class+0x74/0x170 [ 317.278458][ T3505] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 317.284449][ T3505] ? __lock_acquire+0xab9/0xd20 [ 317.289349][ T3505] ? _raw_spin_unlock_irq+0x23/0x50 [ 317.294566][ T3505] ? process_scheduled_works+0x9ef/0x17b0 [ 317.300304][ T3505] ? process_scheduled_works+0x9ef/0x17b0 [ 317.306146][ T3505] process_scheduled_works+0xae1/0x17b0 [ 317.311737][ T3505] ? __pfx_process_scheduled_works+0x10/0x10 [ 317.317752][ T3505] worker_thread+0x8a0/0xda0 [ 317.322366][ T3505] kthread+0x70e/0x8a0 [ 317.326452][ T3505] ? __pfx_worker_thread+0x10/0x10 [ 317.331592][ T3505] ? __pfx_kthread+0x10/0x10 [ 317.336194][ T3505] ? _raw_spin_unlock_irq+0x23/0x50 [ 317.341409][ T3505] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.346626][ T3505] ? __pfx_kthread+0x10/0x10 [ 317.351231][ T3505] ret_from_fork+0x3f9/0x770 [ 317.355838][ T3505] ? __pfx_ret_from_fork+0x10/0x10 [ 317.360980][ T3505] ? __switch_to_asm+0x39/0x70 [ 317.365772][ T3505] ? __switch_to_asm+0x33/0x70 [ 317.370568][ T3505] ? __pfx_kthread+0x10/0x10 [ 317.375200][ T3505] ret_from_fork_asm+0x1a/0x30 [ 317.380013][ T3505] [ 317.383435][ T3505] Kernel Offset: disabled [ 317.387780][ T3505] Rebooting in 86400 seconds..