last executing test programs: 1m7.87372574s ago: executing program 2 (id=280): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/54, 0x36}], 0x1, &(0x7f0000000200)=""/153, 0x99}, 0xffffffff}], 0x1, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000000)={&(0x7f0000000c00)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, 0x0}, 0xc1) r1 = accept(r0, &(0x7f0000000040)=@qipcrtr, &(0x7f0000000100)=0x80) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f00000004c0)=0xe8) r4 = gettid() r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r8}, @typed={0x8, 0x9f, 0x0, 0x0, @pid=r7}, @nested={0x4, 0x1}]}, 0x24}], 0x1}, 0x0) r9 = getgid() r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0xef, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000780)=0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@private}}, &(0x7f00000008c0)=0xe8) r13 = getgid() r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="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", @ANYRES16=r15, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000001400038004000400080002000900000004000100"], 0x40}}, 0x8044) r16 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r17 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r17, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x280}, @IFLA_BOND_UPDELAY={0x8}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x2000000}]}}}]}, 0x4c}}, 0x0) r18 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r18, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r19 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r19, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000120001032cbd700000000000000000004e234e240be50000feffffff00000000000000009e3ff2c1a91200"/56, @ANYRES32=0x0, @ANYBLOB="000000000000000000100000040000000800030011"], 0x54}}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000e40)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000e80)={{{@in6=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000001040)=[{{&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000001c0), 0x0, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, 0xee01}}}], 0x20, 0x8000}}, {{&(0x7f0000000540)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000006c0)=[{&(0x7f00000005c0)="2461176be75e8151d220c45e8c1d90681c92fcd7a70a48b7d13c6363ce88e7c5923bb0460b16e7", 0x27}, {&(0x7f0000000600)="56239578fdc1f87e13709757edca81ec4a47665b879621541d9ad66c179d", 0x1e}, {&(0x7f0000000640)="0130b8bb4046f631cbf8e9e8d6245ff49b17d78ef2a50060b2de803d7782f17473d5e4b562bc6499304e886206a8a8e64f79338913de836cb836a77231b41102f380", 0x42}], 0x3, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {r4, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r0, r0, r10, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @rights={{0x20, 0x1, 0x1, [r14, r0, r16, r0]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r0, r17, r0]}}], 0xe0}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000a00)="4b99180478a6366b24d593458e3d3a18975ab65301d8fecc31a22f07ecaddf30aa6f7ac086b0f5266a0463be8b0d2722bd40cdd57d9f90218f94b4e2208f771c8ad4142f1bd0656b40e0a91487ca293b4e0977424f782d5d98f4", 0x5a}, {&(0x7f0000000a80)="2bb8bc66c7f16ad76d8ee9db3aba", 0xe}, {&(0x7f0000000ac0)="57b8949d795133d8af7f569d9991730b9b51a78205b7d1767f23dd361569da52ee19535c31779b1da8db7ca9c416a53a013089590e58a647fabe2bfb39fc12d79ff738d5d099bb953e9ad535994628456394a0bb45d91cf813dda2fe3dd9e65430f5d33c936a3b862a3fc74832d1ce498941760ae3e36b92a171f262662e", 0x7e}, {&(0x7f0000000b40)="2dbf6913e3b04d6c0dd65bc70a7fc49ee97600817e516d6dde188a307bf644cf061fb8a2eddeb542c5f5d814958d6260316fa12341bff359845a3dab25c0e7b152fec3f3b7b66d83bee422b333c26208a56f84dcb69ad6cff89cf2620c141b3684afae1eb39c5885f259b4c1a6b4c7a43cfb4aad6ae1ba9b658158fd6d3ab884fe8c66e0d3a665bca503f35e2adb8156751893d7a6fc23692b0889041015ad3eb0577b8331ff6f859226134d5f7a081142e7a2a24c5c52de1f336ce4d56b", 0xbe}, {&(0x7f0000000c40)="68e84c43c56dbe9c967235c8a40c6aaa8d877dd1f9893f2c7b0b0d1c4b5eb9", 0x1f}, {&(0x7f0000000c80)="a1da107f752fe7ec46c1978c19", 0xd}, {&(0x7f0000000cc0)="17826d6c2820c7e8d977f958392a6aa68bbbf5a8cc85557a5d6cc35c7e6d55e92873fa5b5071b8f4221310be37708ff9c10debf80e03042f4a8e0b69523e8c0051e3488697e4535385894984f6db53ca06da68acb2fcefeba34dd0c00021b8a1cdae8f07efd250757a91387fa400ea48c5fc2a565e1c9e1d8bf5e89576811ec8b2975ad3c4aac7ecfa50e3", 0x8b}, {&(0x7f0000000d80)="96b29daf42df87cd07b05fe91b1ae82e6d062667839b8b26a966b1ea3803a413b5e56955458c45f9bfbd6b249f8ccac9856caa9e0265dac573cf27d5", 0x3c}], 0x8, &(0x7f0000000fc0)=[@rights={{0x24, 0x1, 0x1, [r18, r19, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r20, r21}}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x60}}], 0x3, 0x8000) 1m5.492877104s ago: executing program 3 (id=309): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x20008840) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000040)={0x28, r0, 0x1, 0x0, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x10001, 0x24}}}}}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003880)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc}}}}, 0x28}}, 0x0) 54.359071865s ago: executing program 2 (id=280): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/54, 0x36}], 0x1, &(0x7f0000000200)=""/153, 0x99}, 0xffffffff}], 0x1, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000000)={&(0x7f0000000c00)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, 0x0}, 0xc1) r1 = accept(r0, &(0x7f0000000040)=@qipcrtr, &(0x7f0000000100)=0x80) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f00000004c0)=0xe8) r4 = gettid() r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r8}, @typed={0x8, 0x9f, 0x0, 0x0, @pid=r7}, @nested={0x4, 0x1}]}, 0x24}], 0x1}, 0x0) r9 = getgid() r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0xef, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000780)=0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@private}}, &(0x7f00000008c0)=0xe8) r13 = getgid() r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="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", @ANYRES16=r15, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000001400038004000400080002000900000004000100"], 0x40}}, 0x8044) r16 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r17 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r17, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x280}, @IFLA_BOND_UPDELAY={0x8}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x2000000}]}}}]}, 0x4c}}, 0x0) r18 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r18, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r19 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r19, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000120001032cbd700000000000000000004e234e240be50000feffffff00000000000000009e3ff2c1a91200"/56, @ANYRES32=0x0, @ANYBLOB="000000000000000000100000040000000800030011"], 0x54}}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000e40)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000e80)={{{@in6=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000001040)=[{{&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000001c0), 0x0, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, 0xee01}}}], 0x20, 0x8000}}, {{&(0x7f0000000540)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000006c0)=[{&(0x7f00000005c0)="2461176be75e8151d220c45e8c1d90681c92fcd7a70a48b7d13c6363ce88e7c5923bb0460b16e7", 0x27}, {&(0x7f0000000600)="56239578fdc1f87e13709757edca81ec4a47665b879621541d9ad66c179d", 0x1e}, {&(0x7f0000000640)="0130b8bb4046f631cbf8e9e8d6245ff49b17d78ef2a50060b2de803d7782f17473d5e4b562bc6499304e886206a8a8e64f79338913de836cb836a77231b41102f380", 0x42}], 0x3, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {r4, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r0, r0, r10, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @rights={{0x20, 0x1, 0x1, [r14, r0, r16, r0]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r0, r17, r0]}}], 0xe0}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000a00)="4b99180478a6366b24d593458e3d3a18975ab65301d8fecc31a22f07ecaddf30aa6f7ac086b0f5266a0463be8b0d2722bd40cdd57d9f90218f94b4e2208f771c8ad4142f1bd0656b40e0a91487ca293b4e0977424f782d5d98f4", 0x5a}, {&(0x7f0000000a80)="2bb8bc66c7f16ad76d8ee9db3aba", 0xe}, {&(0x7f0000000ac0)="57b8949d795133d8af7f569d9991730b9b51a78205b7d1767f23dd361569da52ee19535c31779b1da8db7ca9c416a53a013089590e58a647fabe2bfb39fc12d79ff738d5d099bb953e9ad535994628456394a0bb45d91cf813dda2fe3dd9e65430f5d33c936a3b862a3fc74832d1ce498941760ae3e36b92a171f262662e", 0x7e}, {&(0x7f0000000b40)="2dbf6913e3b04d6c0dd65bc70a7fc49ee97600817e516d6dde188a307bf644cf061fb8a2eddeb542c5f5d814958d6260316fa12341bff359845a3dab25c0e7b152fec3f3b7b66d83bee422b333c26208a56f84dcb69ad6cff89cf2620c141b3684afae1eb39c5885f259b4c1a6b4c7a43cfb4aad6ae1ba9b658158fd6d3ab884fe8c66e0d3a665bca503f35e2adb8156751893d7a6fc23692b0889041015ad3eb0577b8331ff6f859226134d5f7a081142e7a2a24c5c52de1f336ce4d56b", 0xbe}, {&(0x7f0000000c40)="68e84c43c56dbe9c967235c8a40c6aaa8d877dd1f9893f2c7b0b0d1c4b5eb9", 0x1f}, {&(0x7f0000000c80)="a1da107f752fe7ec46c1978c19", 0xd}, {&(0x7f0000000cc0)="17826d6c2820c7e8d977f958392a6aa68bbbf5a8cc85557a5d6cc35c7e6d55e92873fa5b5071b8f4221310be37708ff9c10debf80e03042f4a8e0b69523e8c0051e3488697e4535385894984f6db53ca06da68acb2fcefeba34dd0c00021b8a1cdae8f07efd250757a91387fa400ea48c5fc2a565e1c9e1d8bf5e89576811ec8b2975ad3c4aac7ecfa50e3", 0x8b}, {&(0x7f0000000d80)="96b29daf42df87cd07b05fe91b1ae82e6d062667839b8b26a966b1ea3803a413b5e56955458c45f9bfbd6b249f8ccac9856caa9e0265dac573cf27d5", 0x3c}], 0x8, &(0x7f0000000fc0)=[@rights={{0x24, 0x1, 0x1, [r18, r19, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r20, r21}}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x60}}], 0x3, 0x8000) 52.36709743s ago: executing program 3 (id=309): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x20008840) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000040)={0x28, r0, 0x1, 0x0, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x10001, 0x24}}}}}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003880)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc}}}}, 0x28}}, 0x0) 42.708328178s ago: executing program 2 (id=280): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/54, 0x36}], 0x1, &(0x7f0000000200)=""/153, 0x99}, 0xffffffff}], 0x1, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000000)={&(0x7f0000000c00)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, 0x0}, 0xc1) r1 = accept(r0, &(0x7f0000000040)=@qipcrtr, &(0x7f0000000100)=0x80) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f00000004c0)=0xe8) r4 = gettid() r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r8}, @typed={0x8, 0x9f, 0x0, 0x0, @pid=r7}, @nested={0x4, 0x1}]}, 0x24}], 0x1}, 0x0) r9 = getgid() r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0xef, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000780)=0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@private}}, &(0x7f00000008c0)=0xe8) r13 = getgid() r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="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", @ANYRES16=r15, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000001400038004000400080002000900000004000100"], 0x40}}, 0x8044) r16 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r17 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r17, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x280}, @IFLA_BOND_UPDELAY={0x8}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x2000000}]}}}]}, 0x4c}}, 0x0) r18 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r18, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r19 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r19, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000120001032cbd700000000000000000004e234e240be50000feffffff00000000000000009e3ff2c1a91200"/56, @ANYRES32=0x0, @ANYBLOB="000000000000000000100000040000000800030011"], 0x54}}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000e40)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000e80)={{{@in6=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000001040)=[{{&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000001c0), 0x0, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, 0xee01}}}], 0x20, 0x8000}}, {{&(0x7f0000000540)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000006c0)=[{&(0x7f00000005c0)="2461176be75e8151d220c45e8c1d90681c92fcd7a70a48b7d13c6363ce88e7c5923bb0460b16e7", 0x27}, {&(0x7f0000000600)="56239578fdc1f87e13709757edca81ec4a47665b879621541d9ad66c179d", 0x1e}, {&(0x7f0000000640)="0130b8bb4046f631cbf8e9e8d6245ff49b17d78ef2a50060b2de803d7782f17473d5e4b562bc6499304e886206a8a8e64f79338913de836cb836a77231b41102f380", 0x42}], 0x3, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {r4, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r0, r0, r10, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @rights={{0x20, 0x1, 0x1, [r14, r0, r16, r0]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r0, r17, r0]}}], 0xe0}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000a00)="4b99180478a6366b24d593458e3d3a18975ab65301d8fecc31a22f07ecaddf30aa6f7ac086b0f5266a0463be8b0d2722bd40cdd57d9f90218f94b4e2208f771c8ad4142f1bd0656b40e0a91487ca293b4e0977424f782d5d98f4", 0x5a}, {&(0x7f0000000a80)="2bb8bc66c7f16ad76d8ee9db3aba", 0xe}, {&(0x7f0000000ac0)="57b8949d795133d8af7f569d9991730b9b51a78205b7d1767f23dd361569da52ee19535c31779b1da8db7ca9c416a53a013089590e58a647fabe2bfb39fc12d79ff738d5d099bb953e9ad535994628456394a0bb45d91cf813dda2fe3dd9e65430f5d33c936a3b862a3fc74832d1ce498941760ae3e36b92a171f262662e", 0x7e}, {&(0x7f0000000b40)="2dbf6913e3b04d6c0dd65bc70a7fc49ee97600817e516d6dde188a307bf644cf061fb8a2eddeb542c5f5d814958d6260316fa12341bff359845a3dab25c0e7b152fec3f3b7b66d83bee422b333c26208a56f84dcb69ad6cff89cf2620c141b3684afae1eb39c5885f259b4c1a6b4c7a43cfb4aad6ae1ba9b658158fd6d3ab884fe8c66e0d3a665bca503f35e2adb8156751893d7a6fc23692b0889041015ad3eb0577b8331ff6f859226134d5f7a081142e7a2a24c5c52de1f336ce4d56b", 0xbe}, {&(0x7f0000000c40)="68e84c43c56dbe9c967235c8a40c6aaa8d877dd1f9893f2c7b0b0d1c4b5eb9", 0x1f}, {&(0x7f0000000c80)="a1da107f752fe7ec46c1978c19", 0xd}, {&(0x7f0000000cc0)="17826d6c2820c7e8d977f958392a6aa68bbbf5a8cc85557a5d6cc35c7e6d55e92873fa5b5071b8f4221310be37708ff9c10debf80e03042f4a8e0b69523e8c0051e3488697e4535385894984f6db53ca06da68acb2fcefeba34dd0c00021b8a1cdae8f07efd250757a91387fa400ea48c5fc2a565e1c9e1d8bf5e89576811ec8b2975ad3c4aac7ecfa50e3", 0x8b}, {&(0x7f0000000d80)="96b29daf42df87cd07b05fe91b1ae82e6d062667839b8b26a966b1ea3803a413b5e56955458c45f9bfbd6b249f8ccac9856caa9e0265dac573cf27d5", 0x3c}], 0x8, &(0x7f0000000fc0)=[@rights={{0x24, 0x1, 0x1, [r18, r19, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r20, r21}}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x60}}], 0x3, 0x8000) 41.929692434s ago: executing program 3 (id=309): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x20008840) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000040)={0x28, r0, 0x1, 0x0, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x10001, 0x24}}}}}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003880)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc}}}}, 0x28}}, 0x0) 31.245071581s ago: executing program 2 (id=280): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/54, 0x36}], 0x1, &(0x7f0000000200)=""/153, 0x99}, 0xffffffff}], 0x1, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000000)={&(0x7f0000000c00)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, 0x0}, 0xc1) r1 = accept(r0, &(0x7f0000000040)=@qipcrtr, &(0x7f0000000100)=0x80) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f00000004c0)=0xe8) r4 = gettid() r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r8}, @typed={0x8, 0x9f, 0x0, 0x0, @pid=r7}, @nested={0x4, 0x1}]}, 0x24}], 0x1}, 0x0) r9 = getgid() r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0xef, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000780)=0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@private}}, &(0x7f00000008c0)=0xe8) r13 = getgid() r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="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", @ANYRES16=r15, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000001400038004000400080002000900000004000100"], 0x40}}, 0x8044) r16 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r17 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r17, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x280}, @IFLA_BOND_UPDELAY={0x8}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x2000000}]}}}]}, 0x4c}}, 0x0) r18 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r18, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r19 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r19, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000120001032cbd700000000000000000004e234e240be50000feffffff00000000000000009e3ff2c1a91200"/56, @ANYRES32=0x0, @ANYBLOB="000000000000000000100000040000000800030011"], 0x54}}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000e40)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000e80)={{{@in6=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000001040)=[{{&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000001c0), 0x0, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, 0xee01}}}], 0x20, 0x8000}}, {{&(0x7f0000000540)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000006c0)=[{&(0x7f00000005c0)="2461176be75e8151d220c45e8c1d90681c92fcd7a70a48b7d13c6363ce88e7c5923bb0460b16e7", 0x27}, {&(0x7f0000000600)="56239578fdc1f87e13709757edca81ec4a47665b879621541d9ad66c179d", 0x1e}, {&(0x7f0000000640)="0130b8bb4046f631cbf8e9e8d6245ff49b17d78ef2a50060b2de803d7782f17473d5e4b562bc6499304e886206a8a8e64f79338913de836cb836a77231b41102f380", 0x42}], 0x3, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {r4, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r0, r0, r10, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @rights={{0x20, 0x1, 0x1, [r14, r0, r16, r0]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r0, r17, r0]}}], 0xe0}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000a00)="4b99180478a6366b24d593458e3d3a18975ab65301d8fecc31a22f07ecaddf30aa6f7ac086b0f5266a0463be8b0d2722bd40cdd57d9f90218f94b4e2208f771c8ad4142f1bd0656b40e0a91487ca293b4e0977424f782d5d98f4", 0x5a}, {&(0x7f0000000a80)="2bb8bc66c7f16ad76d8ee9db3aba", 0xe}, {&(0x7f0000000ac0)="57b8949d795133d8af7f569d9991730b9b51a78205b7d1767f23dd361569da52ee19535c31779b1da8db7ca9c416a53a013089590e58a647fabe2bfb39fc12d79ff738d5d099bb953e9ad535994628456394a0bb45d91cf813dda2fe3dd9e65430f5d33c936a3b862a3fc74832d1ce498941760ae3e36b92a171f262662e", 0x7e}, {&(0x7f0000000b40)="2dbf6913e3b04d6c0dd65bc70a7fc49ee97600817e516d6dde188a307bf644cf061fb8a2eddeb542c5f5d814958d6260316fa12341bff359845a3dab25c0e7b152fec3f3b7b66d83bee422b333c26208a56f84dcb69ad6cff89cf2620c141b3684afae1eb39c5885f259b4c1a6b4c7a43cfb4aad6ae1ba9b658158fd6d3ab884fe8c66e0d3a665bca503f35e2adb8156751893d7a6fc23692b0889041015ad3eb0577b8331ff6f859226134d5f7a081142e7a2a24c5c52de1f336ce4d56b", 0xbe}, {&(0x7f0000000c40)="68e84c43c56dbe9c967235c8a40c6aaa8d877dd1f9893f2c7b0b0d1c4b5eb9", 0x1f}, {&(0x7f0000000c80)="a1da107f752fe7ec46c1978c19", 0xd}, {&(0x7f0000000cc0)="17826d6c2820c7e8d977f958392a6aa68bbbf5a8cc85557a5d6cc35c7e6d55e92873fa5b5071b8f4221310be37708ff9c10debf80e03042f4a8e0b69523e8c0051e3488697e4535385894984f6db53ca06da68acb2fcefeba34dd0c00021b8a1cdae8f07efd250757a91387fa400ea48c5fc2a565e1c9e1d8bf5e89576811ec8b2975ad3c4aac7ecfa50e3", 0x8b}, {&(0x7f0000000d80)="96b29daf42df87cd07b05fe91b1ae82e6d062667839b8b26a966b1ea3803a413b5e56955458c45f9bfbd6b249f8ccac9856caa9e0265dac573cf27d5", 0x3c}], 0x8, &(0x7f0000000fc0)=[@rights={{0x24, 0x1, 0x1, [r18, r19, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r20, r21}}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x60}}], 0x3, 0x8000) 30.260055624s ago: executing program 3 (id=309): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x20008840) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000040)={0x28, r0, 0x1, 0x0, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x10001, 0x24}}}}}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003880)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc}}}}, 0x28}}, 0x0) 25.436926748s ago: executing program 1 (id=656): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x53) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @none={0x3}}, 0x14, &(0x7f0000000100)={0x0, 0x1b}, 0x7}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x8, 0x4) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 25.274177902s ago: executing program 1 (id=660): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x14, 0x0, &(0x7f00000000c0)="8a526716a3cdf6ec6ec35a923795c33c0e31133b", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x50) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9320000000000000140012800c0001006d6163766c616e"], 0x44}}, 0x20000000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sched_process_wait\x00', r2}, 0x18) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_SIOCGSKNS(r5, 0x894c, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r6, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r7, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 24.701958307s ago: executing program 1 (id=663): r0 = socket(0x18, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'sit0\x00'}}, 0x1e) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="64a30f87", @ANYRES16=0x0, @ANYBLOB="20002dbd7000fedbdf2506000000050004005d00000008000b00010000000500210001000000060002000100000005000500020000001400080076657468305f746f5f6873720000000005000d00000000000c00160081ffffffffffffff"], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4887) r1 = socket$inet(0xa, 0x801, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x2c, 0x3d, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x19}]}]}, 0x2c}}, 0x4c000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@snprintf={{}, {0x3, 0x3, 0x6, 0x2, 0xa, 0xfff8, 0x41}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r4 = accept4(r1, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r4) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x170, r5, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x30, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x22, 0x3, "ec6e0044806c8e345b0afcadbec3f324b1285aacc5bc35161cb1ce6718b7"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8a}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x574}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7770}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x527b}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "aa979d4a81560db101c966d8eb5d881560fbd79b891734473b008b5ead6531"}}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x35}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x44040}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newtaction={0x7c, 0x30, 0xb, 0x0, 0x0, {}, [{0x68, 0x1, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_NAT_PORT_MIN={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000240), &(0x7f0000000300)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0200000002"], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[], 0x10) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000540)={{0xa, 0x4e24, 0x5bb5, @private1}, {0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10}, 0x0, {[0xd, 0x9, 0xff, 0xfffffffd, 0xffffffa5, 0x9, 0xfffffff8, 0xa6ff]}}, 0x5c) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x19, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b70600001fffffff850000006c000000bf0900000000000026090100000000009500000000000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 24.402800171s ago: executing program 1 (id=666): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0x0, 0x10000000, 0x6}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, r0, 0xa09, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x30, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}, [{0x1, 0x1, "2025b07f3c58"}]}}}}}}, 0x0) 23.98756142s ago: executing program 1 (id=670): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto={0x2, 0x0, 0x0, 0x13, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x28, 0x0, 0x0, 0x400, 0x0, @void, @value}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x400) (async) unshare(0x400) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r2, 0x3a, 0x1, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000000)=0x1c, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000b80)=ANY=[], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) 17.950403565s ago: executing program 2 (id=280): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/54, 0x36}], 0x1, &(0x7f0000000200)=""/153, 0x99}, 0xffffffff}], 0x1, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000000)={&(0x7f0000000c00)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, 0x0}, 0xc1) r1 = accept(r0, &(0x7f0000000040)=@qipcrtr, &(0x7f0000000100)=0x80) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f00000004c0)=0xe8) r4 = gettid() r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r8}, @typed={0x8, 0x9f, 0x0, 0x0, @pid=r7}, @nested={0x4, 0x1}]}, 0x24}], 0x1}, 0x0) r9 = getgid() r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0xef, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000780)=0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@private}}, &(0x7f00000008c0)=0xe8) r13 = getgid() r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="40000000592d306735aac9808906126ed489e10898582ebcdcf7caf85a93b75e94a820f60c4c76a8b9ba2a77921e70f0198059e59b486b381af3b7bf2ea7e056f12cc9028bac7461aaaced0d63ff42a1b80d02779a64902a5474ac395b45665d6e1b2771d5a9b40b052e1b927c852fe6c2fca6693be8b478e15f3191622a31ef4b2176541b1a967263695396df9c9a7fd9672c59b70cc9a820e6dbac44fc9e9138bcc899f32cddc96f6c05ba1f0b7e15e01af349df0023898c052b6fb719259d09ba3290dfe90ed726214ba3e24669aa941d74af07b3ba037d5a2ae654f8248592d7c811e03b6a3992a08dec69ebf344cbd9400b0b596e584acb270b717e75bfc74ddb1d3bd6a593002c499ec49b71b7c27e8adc23c7d8a5cabde3f5b0529d74345bc8f90c42e9ace0bc1ddb9cd353cb842e654e75c025383b2adec733fa30a30c4acd515b85cd2ada64df2bd621cd63b09857e47d908eb5c32774d28fb3b71ec55fbf7cafce16f2f14659ed2a548ea678d570c2eb41bf6e124495", @ANYRES16=r15, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000001400038004000400080002000900000004000100"], 0x40}}, 0x8044) r16 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r17 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r17, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x280}, @IFLA_BOND_UPDELAY={0x8}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x2000000}]}}}]}, 0x4c}}, 0x0) r18 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r18, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r19 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r19, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000120001032cbd700000000000000000004e234e240be50000feffffff00000000000000009e3ff2c1a91200"/56, @ANYRES32=0x0, @ANYBLOB="000000000000000000100000040000000800030011"], 0x54}}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000e40)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000e80)={{{@in6=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000001040)=[{{&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000001c0), 0x0, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, 0xee01}}}], 0x20, 0x8000}}, {{&(0x7f0000000540)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000006c0)=[{&(0x7f00000005c0)="2461176be75e8151d220c45e8c1d90681c92fcd7a70a48b7d13c6363ce88e7c5923bb0460b16e7", 0x27}, {&(0x7f0000000600)="56239578fdc1f87e13709757edca81ec4a47665b879621541d9ad66c179d", 0x1e}, {&(0x7f0000000640)="0130b8bb4046f631cbf8e9e8d6245ff49b17d78ef2a50060b2de803d7782f17473d5e4b562bc6499304e886206a8a8e64f79338913de836cb836a77231b41102f380", 0x42}], 0x3, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {r4, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r0, r0, r10, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @rights={{0x20, 0x1, 0x1, [r14, r0, r16, r0]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r0, r17, r0]}}], 0xe0}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000a00)="4b99180478a6366b24d593458e3d3a18975ab65301d8fecc31a22f07ecaddf30aa6f7ac086b0f5266a0463be8b0d2722bd40cdd57d9f90218f94b4e2208f771c8ad4142f1bd0656b40e0a91487ca293b4e0977424f782d5d98f4", 0x5a}, {&(0x7f0000000a80)="2bb8bc66c7f16ad76d8ee9db3aba", 0xe}, {&(0x7f0000000ac0)="57b8949d795133d8af7f569d9991730b9b51a78205b7d1767f23dd361569da52ee19535c31779b1da8db7ca9c416a53a013089590e58a647fabe2bfb39fc12d79ff738d5d099bb953e9ad535994628456394a0bb45d91cf813dda2fe3dd9e65430f5d33c936a3b862a3fc74832d1ce498941760ae3e36b92a171f262662e", 0x7e}, {&(0x7f0000000b40)="2dbf6913e3b04d6c0dd65bc70a7fc49ee97600817e516d6dde188a307bf644cf061fb8a2eddeb542c5f5d814958d6260316fa12341bff359845a3dab25c0e7b152fec3f3b7b66d83bee422b333c26208a56f84dcb69ad6cff89cf2620c141b3684afae1eb39c5885f259b4c1a6b4c7a43cfb4aad6ae1ba9b658158fd6d3ab884fe8c66e0d3a665bca503f35e2adb8156751893d7a6fc23692b0889041015ad3eb0577b8331ff6f859226134d5f7a081142e7a2a24c5c52de1f336ce4d56b", 0xbe}, {&(0x7f0000000c40)="68e84c43c56dbe9c967235c8a40c6aaa8d877dd1f9893f2c7b0b0d1c4b5eb9", 0x1f}, {&(0x7f0000000c80)="a1da107f752fe7ec46c1978c19", 0xd}, {&(0x7f0000000cc0)="17826d6c2820c7e8d977f958392a6aa68bbbf5a8cc85557a5d6cc35c7e6d55e92873fa5b5071b8f4221310be37708ff9c10debf80e03042f4a8e0b69523e8c0051e3488697e4535385894984f6db53ca06da68acb2fcefeba34dd0c00021b8a1cdae8f07efd250757a91387fa400ea48c5fc2a565e1c9e1d8bf5e89576811ec8b2975ad3c4aac7ecfa50e3", 0x8b}, {&(0x7f0000000d80)="96b29daf42df87cd07b05fe91b1ae82e6d062667839b8b26a966b1ea3803a413b5e56955458c45f9bfbd6b249f8ccac9856caa9e0265dac573cf27d5", 0x3c}], 0x8, &(0x7f0000000fc0)=[@rights={{0x24, 0x1, 0x1, [r18, r19, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r20, r21}}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x60}}], 0x3, 0x8000) 16.848689127s ago: executing program 3 (id=309): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x20008840) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000040)={0x28, r0, 0x1, 0x0, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x10001, 0x24}}}}}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003880)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc}}}}, 0x28}}, 0x0) 13.959167945s ago: executing program 1 (id=670): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto={0x2, 0x0, 0x0, 0x13, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x28, 0x0, 0x0, 0x400, 0x0, @void, @value}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x400) (async) unshare(0x400) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r2, 0x3a, 0x1, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000000)=0x1c, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000b80)=ANY=[], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) 2.611419663s ago: executing program 4 (id=785): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x6, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xaf) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000180), &(0x7f0000000280), 0x8}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000007065574d000000000000000071100200000000009500000700000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.512166937s ago: executing program 4 (id=786): r0 = accept(0xffffffffffffffff, &(0x7f0000000440)=@sco={0x1f, @none}, &(0x7f00000004c0)=0x80) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'geneve1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r3, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a8014000700fc"], 0x58}, 0x1, 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, r5, 0x1, 0x0, 0x3, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x6, 0xa8, @random='5\x00'}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x40000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r5, 0x587b1ddfcec3f457, 0x70bd27, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000804}, 0x4004000) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r9) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) ioctl$sock_FIOGETOWN(r11, 0x8903, &(0x7f0000000240)=0x0) r15 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r15, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r11, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x111}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES8=r0, @ANYBLOB="00012dbd7000fbdbdf253100000008000100530000000c009900040000006600000008005200", @ANYRES32=r14, @ANYBLOB="0800ffff", @ANYRES32=r15, @ANYBLOB="bb90a5862e6b9646144e24f19d3031b60c4bd7137c72b532d5d08ba19049a9788738f79e3402c3ce185469b0c79e6af92e6e93c101c4bbf6302ea3ac33dbf6d8bccc58e1e94e9aea3abcf4fe7cd3f659960a7256d447eb81ce9d2971de762e5d214e35ca3b046e3c4f09f50315324667f10443", @ANYRES32=r13, @ANYBLOB="0099"], 0x50}, 0x1, 0x0, 0x0, 0x40011}, 0x0) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0500ffffffff080000002e00000008000300", @ANYRES32=r13, @ANYBLOB="050034008b0000001800420002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4840) r16 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r16, &(0x7f0000000400)={0x28, 0x0, 0x1, @my=0x1}, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r10, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) 2.071643209s ago: executing program 2 (id=280): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/54, 0x36}], 0x1, &(0x7f0000000200)=""/153, 0x99}, 0xffffffff}], 0x1, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000000)={&(0x7f0000000c00)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, 0x0}, 0xc1) r1 = accept(r0, &(0x7f0000000040)=@qipcrtr, &(0x7f0000000100)=0x80) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f00000004c0)=0xe8) r4 = gettid() r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r8}, @typed={0x8, 0x9f, 0x0, 0x0, @pid=r7}, @nested={0x4, 0x1}]}, 0x24}], 0x1}, 0x0) r9 = getgid() r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0xef, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000780)=0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@private}}, &(0x7f00000008c0)=0xe8) r13 = getgid() r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="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", @ANYRES16=r15, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000001400038004000400080002000900000004000100"], 0x40}}, 0x8044) r16 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r17 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r17, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x280}, @IFLA_BOND_UPDELAY={0x8}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x2000000}]}}}]}, 0x4c}}, 0x0) r18 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r18, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r19 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r19, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000120001032cbd700000000000000000004e234e240be50000feffffff00000000000000009e3ff2c1a91200"/56, @ANYRES32=0x0, @ANYBLOB="000000000000000000100000040000000800030011"], 0x54}}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000e40)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000e80)={{{@in6=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000f80)=0xe8) sendmmsg$unix(r1, &(0x7f0000001040)=[{{&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000001c0), 0x0, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, 0xee01}}}], 0x20, 0x8000}}, {{&(0x7f0000000540)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000006c0)=[{&(0x7f00000005c0)="2461176be75e8151d220c45e8c1d90681c92fcd7a70a48b7d13c6363ce88e7c5923bb0460b16e7", 0x27}, {&(0x7f0000000600)="56239578fdc1f87e13709757edca81ec4a47665b879621541d9ad66c179d", 0x1e}, {&(0x7f0000000640)="0130b8bb4046f631cbf8e9e8d6245ff49b17d78ef2a50060b2de803d7782f17473d5e4b562bc6499304e886206a8a8e64f79338913de836cb836a77231b41102f380", 0x42}], 0x3, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {r4, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r0, r0, r10, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @rights={{0x20, 0x1, 0x1, [r14, r0, r16, r0]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r0, r17, r0]}}], 0xe0}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000a00)="4b99180478a6366b24d593458e3d3a18975ab65301d8fecc31a22f07ecaddf30aa6f7ac086b0f5266a0463be8b0d2722bd40cdd57d9f90218f94b4e2208f771c8ad4142f1bd0656b40e0a91487ca293b4e0977424f782d5d98f4", 0x5a}, {&(0x7f0000000a80)="2bb8bc66c7f16ad76d8ee9db3aba", 0xe}, {&(0x7f0000000ac0)="57b8949d795133d8af7f569d9991730b9b51a78205b7d1767f23dd361569da52ee19535c31779b1da8db7ca9c416a53a013089590e58a647fabe2bfb39fc12d79ff738d5d099bb953e9ad535994628456394a0bb45d91cf813dda2fe3dd9e65430f5d33c936a3b862a3fc74832d1ce498941760ae3e36b92a171f262662e", 0x7e}, {&(0x7f0000000b40)="2dbf6913e3b04d6c0dd65bc70a7fc49ee97600817e516d6dde188a307bf644cf061fb8a2eddeb542c5f5d814958d6260316fa12341bff359845a3dab25c0e7b152fec3f3b7b66d83bee422b333c26208a56f84dcb69ad6cff89cf2620c141b3684afae1eb39c5885f259b4c1a6b4c7a43cfb4aad6ae1ba9b658158fd6d3ab884fe8c66e0d3a665bca503f35e2adb8156751893d7a6fc23692b0889041015ad3eb0577b8331ff6f859226134d5f7a081142e7a2a24c5c52de1f336ce4d56b", 0xbe}, {&(0x7f0000000c40)="68e84c43c56dbe9c967235c8a40c6aaa8d877dd1f9893f2c7b0b0d1c4b5eb9", 0x1f}, {&(0x7f0000000c80)="a1da107f752fe7ec46c1978c19", 0xd}, {&(0x7f0000000cc0)="17826d6c2820c7e8d977f958392a6aa68bbbf5a8cc85557a5d6cc35c7e6d55e92873fa5b5071b8f4221310be37708ff9c10debf80e03042f4a8e0b69523e8c0051e3488697e4535385894984f6db53ca06da68acb2fcefeba34dd0c00021b8a1cdae8f07efd250757a91387fa400ea48c5fc2a565e1c9e1d8bf5e89576811ec8b2975ad3c4aac7ecfa50e3", 0x8b}, {&(0x7f0000000d80)="96b29daf42df87cd07b05fe91b1ae82e6d062667839b8b26a966b1ea3803a413b5e56955458c45f9bfbd6b249f8ccac9856caa9e0265dac573cf27d5", 0x3c}], 0x8, &(0x7f0000000fc0)=[@rights={{0x24, 0x1, 0x1, [r18, r19, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r20, r21}}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x60}}], 0x3, 0x8000) 1.7029567s ago: executing program 3 (id=309): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x20008840) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000040)={0x28, r0, 0x1, 0x0, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x10001, 0x24}}}}}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003880)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc}}}}, 0x28}}, 0x0) 1.083770252s ago: executing program 0 (id=789): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0xb, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0xc00c0) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000001000), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, 0x0, 0xe38ad65d23d92eba) 1.083504676s ago: executing program 4 (id=790): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a80)=ANY=[@ANYBLOB="3c0000001800dd8d00000000fdffffff020000000000000600000000060015000100000018001680140001"], 0x3c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x403, 0x74bd27, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x51792e7248df3904}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @loopback}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}]}, 0x44}}, 0x4811) 911.496725ms ago: executing program 0 (id=791): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x28, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x7}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x1d, 0x17, 0x9}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) 527.427852ms ago: executing program 0 (id=792): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0xcc}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000030a03000000000000000000030000000900030073797a30000000000900010073797a300000000014000480080002400000e9479ac10140000000001c0008800c00024000000000000000000c00014000000000000000002800000000fd00040000000000000000030000020900010073797a3000000000080002b600000001140000001100010000000000000000000000000a5f32951d670caf504f7b848a3b026d83a80f394e242770d9abf09fac03e6e38540d47550c99c76666e03afcf24c39d3dfa837392e949566314bb0104fea40303686c7e5ceea59cfacb61e54e28eafe8c0b8423907760227f35d1fc209b9edffc1d5cba629eb1c9603e6aedb19cf7dfb55fd57a264c08ffc87fa7ce0b8736c3f54a040160c801e79f6b9aed75405d63bc8d5fd5469056dc3b6609b7c1e7edcc476b1927fd2f0051a011c5935550"], 0xcc}}, 0x0) 525.80399ms ago: executing program 4 (id=793): r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000032c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f0000000000)={0x6, 0x10}) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000003580)={0x64, r0, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}, {0x6}, {0x8}}]}, 0x64}}, 0x0) 407.692528ms ago: executing program 0 (id=794): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275c, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x1adbc, 0x1004, 0x0, 0x7, 0x1}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbb}, @generic={0x6d}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff}, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275c, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x1adbc, 0x1004, 0x0, 0x7, 0x1}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbb}, @generic={0x6d}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff}, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) 334.607694ms ago: executing program 4 (id=795): r0 = socket$inet_smc(0x2b, 0x1, 0x0) shutdown(r0, 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000300)=0x2000000000000000, 0x8) connect$vsock_stream(r1, &(0x7f0000000340)={0x28, 0x0, 0x0, @host}, 0x10) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000280)=""/140, &(0x7f0000000000)=0x8c) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3dc6e48aa31086b870030000000ff000000160af365040014000d0002008bc3a0e640e51753cd60bc24eab556a705251e6182940800000000001282bb2352d1f006baa45e3bbd225a8941b1436e000a84c9", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000006800010000000000000000000a0000000000000008000500", @ANYRES32=0x0, @ANYBLOB="08000500", @ANYRES32=r3, @ANYBLOB="08000880040001001031bd1fa642600845846b6fd04cd8b79b3d9527fb2f209d5b1f1233e9bcac3a081d1df27100400c7cf412e76d513e8ca22dfea7cd14e8b916d8c8b0d1fe1f594f991c967a5f8fb4d54b267121797754c46e33f8630222cc5196f27900000000000000053ae11d3d7cbfac3b9efd8d5378b375862cf4f73c014d3dce9d08a8c199b70af5efa802e4493216a0020be44a39e2ea57bbadf8ec6ae07e5bf1b1b65010fd60d21e2c842efe47e9e28d3b73dc1ebef170c5358473d547d16a72207bc49200025f79d5a04ed8a9a96692"], 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_queued\x00', 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000025c0), &(0x7f0000002600)=0x8) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x1c, 0xe, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0xc}]}, 0x1c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x16, 0x23, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa90f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @jmp={0x5, 0x1, 0x4, 0x3, 0x9, 0x4, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffff9}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 227.885633ms ago: executing program 0 (id=796): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffc01}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040005}, 0x24000000) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x1c, r3, 0x1, 0x70bd2d, 0x0, {0x1e}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040025}, 0x4024044) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16, @ANYBLOB="e3792cbd7000fddbdf250a00000004000380"], 0x18}, 0x1, 0x0, 0x0, 0x20000005}, 0x40000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0xffffffff, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x40) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r5, 0x0, 0xd0, 0x0, &(0x7f0000000080)) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000eebac1e1c3e3f3aa4cca76def9e32cb5dec0ada46a077d9b5eb1f1476afbf401d4", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100766c616e000000000200000008001a8004001c00"], 0x3c}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000080), 0x4) r9 = socket(0x22, 0x1, 0x65f815e5) r10 = socket(0x10, 0x80002, 0x0) getsockopt$sock_int(r10, 0x1, 0x30, 0x0, &(0x7f0000000580)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYBLOB="0cc9f6af314883f8d9c4567c94c0a5a5662909dff4e7dc3061ef00f7fa01062dfbd8fce052c6d102a55cc1f13d", @ANYRES8=r8], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r11, &(0x7f0000000440), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r11, 0x84, 0x17, &(0x7f00000004c0)={r12, 0x3, 0x3, "2a9a9e"}, 0xb) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r9, 0x84, 0x77, &(0x7f0000000200)={r12, 0x5, 0x2, [0x1, 0x8]}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$FS_IOC_MEASURE_VERITY(r7, 0xc0046686, &(0x7f0000000600)={0x3, 0x93, "03c2cf423fff023651977cf6ed7503a9656d24a6b827186802fbc22716ebcf9bbd53bee0deb3f26bf40e199d9eaa9a863afcda1b7bec447650e51063c3dcfe655b0fd003e46a21000e72a32af556bceb37322d326ddbbb2f52f3f82c73c976efd39c4815a4ff9104c16b7dea33e1186fac9e3b69f9bab758506e5afabda1257c1d2b5998a4a33b32a45f40f8c487b74e59b827"}) 81.256927ms ago: executing program 0 (id=797): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='htcp\x00', 0x5) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff6d, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x48001) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xbc) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000cc0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {}, {0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x9, 0x1}, {0x1, 0xff, 0x1}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24040811}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x38bab695b9b826e4, 0x4, 0x73) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0x14) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) listen(r0, 0x4000) close(r0) 0s ago: executing program 4 (id=798): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000008000a0000000000060002000000000014001f00000000000000000000000000000000011400200000000000000000000000ffffac1414bb06001b0000100000ad18"], 0x64}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000540)="f715a50500000000748c21584d5cd1a9593ebe2ccdfda50f56d119e8dcb95070945154cba3214c9c103a6e48cf4bd60032a6112f1acbec287ff13d11ad9e6de855d8964606cf84370fb7db61319106cf12880400561265231d1b847f2dbbdacfd662165475642a6275c9c0d891e05ada0ec2f8d7f9dacddb1a4fb9b4c41d09c627acaef74b2560b65ee7477940b30a2ec8e006c43d9aedd02152c9961e1f213a7c9831b821b244911ad8be7a5c6fd5ca3be3eb133e675e3e464ce514bb1ff2789ec6f42c23", 0xfffffffffffffd04, 0x60000045, &(0x7f0000b63fe4)={0xa, 0x4e20, 0xfffffffe, @empty, 0x2}, 0x1c) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="180700a700d8291387c8d4592126551efa113e072dda6a576709618bd4ce2a000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007090000f8ffffffbfa000000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000001700000076000000bf91000000000000b6080000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) kernel console output (not intermixed with test programs): e 0x0c20 failed: -4 [ 85.185686][ T2971] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.225036][ T6805] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 85.263845][ T6812] netlink: 16 bytes leftover after parsing attributes in process `syz.3.286'. [ 85.358659][ T2971] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.431103][ T6817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.288'. [ 85.453181][ T6819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.287'. [ 85.453847][ T5149] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.473388][ T6820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.288'. [ 85.474017][ T5149] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.493962][ T5149] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.504345][ T5149] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.514217][ T5149] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.515648][ T6819] bond2: entered promiscuous mode [ 85.527994][ T5918] tipc: Node number set to 2886997162 [ 85.534161][ T5149] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.539039][ T6819] 8021q: adding VLAN 0 to HW filter on device bond2 [ 85.707254][ T6844] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 85.740311][ T6848] netlink: 14 bytes leftover after parsing attributes in process `syz.0.292'. [ 86.006814][ T6856] tipc: Started in network mode [ 86.013093][ T6856] tipc: Node identity , cluster identity 4711 [ 86.019821][ T6856] tipc: Failed to set node id, please configure manually [ 86.032437][ T6856] tipc: Enabling of bearer rejected, failed to enable media [ 86.042569][ T6859] netlink: 80 bytes leftover after parsing attributes in process `syz.4.297'. [ 86.054619][ T6856] netlink: 76 bytes leftover after parsing attributes in process `syz.1.296'. [ 86.071209][ T6856] TCP: TCP_TX_DELAY enabled [ 86.094458][ T6859] [H: renamed from veth0_vlan (while UP) [ 86.129667][ T6864] netlink: 80 bytes leftover after parsing attributes in process `syz.4.297'. [ 86.256831][ T2971] bridge_slave_1: left allmulticast mode [ 86.262925][ T2971] bridge_slave_1: left promiscuous mode [ 86.270337][ T2971] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.316028][ T2971] bridge_slave_0: left allmulticast mode [ 86.337107][ T2971] bridge_slave_0: left promiscuous mode [ 86.374179][ T2971] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.656674][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.305'. [ 86.813434][ T2971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.825168][ T2971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.836729][ T2971] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 86.845646][ T2971] veth1_vlan: left allmulticast mode [ 86.852630][ T2971] bond0 (unregistering): Released all slaves [ 86.871820][ T2971] bond1 (unregistering): Released all slaves [ 86.980125][ T2971] tipc: Disabling bearer [ 86.995403][ T2971] tipc: Left network mode [ 87.084287][ T6821] chnl_net:caif_netlink_parms(): no params data found [ 87.098337][ T5847] Bluetooth: hci0: command 0x0c20 tx timeout [ 87.577571][ T5847] Bluetooth: hci2: command tx timeout [ 87.587526][ T6821] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.615243][ T6821] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.645798][ T6821] bridge_slave_0: entered allmulticast mode [ 87.688874][ T6821] bridge_slave_0: entered promiscuous mode [ 87.708629][ T6821] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.715774][ T6821] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.758142][ T6821] bridge_slave_1: entered allmulticast mode [ 87.777854][ T6821] bridge_slave_1: entered promiscuous mode [ 87.815999][ T2971] hsr_slave_0: left promiscuous mode [ 87.833989][ T2971] hsr_slave_1: left promiscuous mode [ 87.849377][ T2971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.889525][ T2971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.908977][ T2971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.916458][ T2971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.977440][ T2971] veth1_macvtap: left promiscuous mode [ 87.983406][ T2971] veth0_macvtap: left promiscuous mode [ 88.011623][ T2971] veth1_vlan: left promiscuous mode [ 88.027621][ T2971] veth0_vlan: left promiscuous mode [ 88.093884][ T5149] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.104232][ T5149] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.116110][ T5149] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.125376][ T5149] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.133571][ T5149] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.140967][ T5149] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.580625][ T2971] team0 (unregistering): Port device team_slave_1 removed [ 88.623055][ T2971] team0 (unregistering): Port device team_slave_0 removed [ 88.998800][ T6821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.080980][ T6821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.177631][ T5149] Bluetooth: hci0: command 0x0c20 tx timeout [ 89.275625][ T6821] team0: Port device team_slave_0 added [ 89.282909][ T6935] netlink: 'syz.1.319': attribute type 12 has an invalid length. [ 89.291986][ T6935] netlink: 'syz.1.319': attribute type 29 has an invalid length. [ 89.300794][ T6935] netlink: 'syz.1.319': attribute type 2 has an invalid length. [ 89.310159][ T6935] netlink: 'syz.1.319': attribute type 2 has an invalid length. [ 89.318673][ T6935] netlink: 'syz.1.319': attribute type 1 has an invalid length. [ 89.326417][ T6935] netlink: 'syz.1.319': attribute type 37 has an invalid length. [ 89.335048][ T6935] netlink: 'syz.1.319': attribute type 2 has an invalid length. [ 89.365427][ T6935] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.420378][ T6821] team0: Port device team_slave_1 added [ 89.519296][ T6821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.526298][ T6821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.576568][ T6821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.614085][ T6821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.621760][ T6821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.649340][ T6821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.660175][ T5149] Bluetooth: hci2: command tx timeout [ 89.808761][ T6821] hsr_slave_0: entered promiscuous mode [ 89.815192][ T6821] hsr_slave_1: entered promiscuous mode [ 89.854138][ T6821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.877089][ T6821] Cannot create hsr debugfs directory [ 90.218658][ T5149] Bluetooth: hci3: command tx timeout [ 90.340316][ T2971] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.401026][ T6918] chnl_net:caif_netlink_parms(): no params data found [ 90.474356][ T6991] netlink: 'syz.1.335': attribute type 1 has an invalid length. [ 90.482740][ T6991] netlink: 'syz.1.335': attribute type 3 has an invalid length. [ 90.484881][ T2971] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.491484][ T6991] __nla_validate_parse: 1 callbacks suppressed [ 90.491498][ T6991] netlink: 224 bytes leftover after parsing attributes in process `syz.1.335'. [ 90.580829][ T6994] netlink: 24 bytes leftover after parsing attributes in process `syz.4.337'. [ 90.664221][ T2971] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.721030][ T7000] pim6reg: entered allmulticast mode [ 90.810328][ T2971] team0: Port device netdevsim0 removed [ 90.840251][ T2971] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.855402][ T7012] ax25_connect(): syz.0.340 uses autobind, please contact jreuter@yaina.de [ 90.871516][ T7015] SET target dimension over the limit! [ 90.883861][ T7012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.340'. [ 90.902566][ T7012] netlink: 20 bytes leftover after parsing attributes in process `syz.0.340'. [ 91.135823][ T6918] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.152573][ T6918] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.166733][ T6918] bridge_slave_0: entered allmulticast mode [ 91.183257][ T6918] bridge_slave_0: entered promiscuous mode [ 91.222612][ T6918] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.235965][ T7034] netlink: 12 bytes leftover after parsing attributes in process `syz.4.346'. [ 91.241135][ T6918] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.253991][ T6918] bridge_slave_1: entered allmulticast mode [ 91.264199][ T6918] bridge_slave_1: entered promiscuous mode [ 91.281627][ T2971] bridge_slave_1: left allmulticast mode [ 91.287773][ T2971] bridge_slave_1: left promiscuous mode [ 91.293469][ T2971] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.303472][ T2971] bridge_slave_0: left allmulticast mode [ 91.310377][ T2971] bridge_slave_0: left promiscuous mode [ 91.325264][ T5884] hid-generic 0005:7FFF:0008.0001: unknown main item tag 0x0 [ 91.334185][ T5884] hid-generic 0005:7FFF:0008.0001: unknown main item tag 0x0 [ 91.343114][ T2971] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.351273][ T5884] hid-generic 0005:7FFF:0008.0001: item fetching failed at offset 7/8 [ 91.368068][ T5884] hid-generic 0005:7FFF:0008.0001: probe with driver hid-generic failed with error -22 [ 91.692334][ T2971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.704192][ T2971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.714944][ T2971] bond0 (unregistering): Released all slaves [ 91.728804][ T2971] bond1 (unregistering): Released all slaves [ 91.737056][ T5847] Bluetooth: hci2: command tx timeout [ 91.910385][ T6918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.967538][ T6918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.026788][ T7046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.349'. [ 92.132705][ T6918] team0: Port device team_slave_0 added [ 92.203844][ T6918] team0: Port device team_slave_1 added [ 92.297961][ T5847] Bluetooth: hci3: command tx timeout [ 92.527069][ T2971] hsr_slave_0: left promiscuous mode [ 92.537201][ T5149] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 92.537722][ T5847] Bluetooth: hci0: command 0x0c20 tx timeout [ 92.578635][ T2971] hsr_slave_1: left promiscuous mode [ 92.592793][ T2971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.607319][ T2971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.618197][ T2971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.625780][ T2971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.662684][ T2971] veth1_macvtap: left promiscuous mode [ 92.674965][ T2971] veth0_macvtap: left promiscuous mode [ 92.688248][ T2971] veth1_vlan: left promiscuous mode [ 92.693613][ T2971] veth0_vlan: left promiscuous mode [ 93.008908][ T7085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.357'. [ 93.446006][ T7078] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 93.626638][ T2971] team0 (unregistering): Port device team_slave_1 removed [ 93.668738][ T2971] team0 (unregistering): Port device team_slave_0 removed [ 93.820972][ T5847] Bluetooth: hci2: command tx timeout [ 94.047306][ T6918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.054323][ T6918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.081063][ T6918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.147175][ T6918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.165691][ T6918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.239706][ T6918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.325961][ T6821] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.367724][ T7099] dccp_v6_rcv: dropped packet with invalid checksum [ 94.376968][ T5847] Bluetooth: hci3: command tx timeout [ 94.431257][ T6918] hsr_slave_0: entered promiscuous mode [ 94.438346][ T6918] hsr_slave_1: entered promiscuous mode [ 94.444486][ T6918] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.491357][ T6918] Cannot create hsr debugfs directory [ 94.507352][ T6821] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.542463][ T6821] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.597643][ T6821] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.766739][ T7123] netlink: 'syz.4.368': attribute type 20 has an invalid length. [ 94.937249][ T5847] Bluetooth: hci0: command 0x0c20 tx timeout [ 94.944296][ T7129] netlink: 'syz.0.369': attribute type 10 has an invalid length. [ 94.970170][ T6821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.984578][ T7130] netlink: 12 bytes leftover after parsing attributes in process `syz.4.370'. [ 95.012477][ T6821] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.134594][ T7129] team0: Port device netdevsim0 added [ 95.212511][ T2971] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.220538][ T2971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.239070][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.372'. [ 95.267946][ T2971] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.275099][ T2971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.289084][ T7143] netlink: 'syz.0.373': attribute type 1 has an invalid length. [ 95.417713][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.582466][ T7155] tipc: Started in network mode [ 95.587581][ T7155] tipc: Node identity ac14140f, cluster identity 4711 [ 95.596138][ T7155] tipc: New replicast peer: 255.255.255.255 [ 95.603189][ T7155] tipc: Enabled bearer , priority 10 [ 95.643699][ T6918] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.679629][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.378'. [ 95.693095][ T7160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.378'. [ 95.707388][ T7160] netlink: 32 bytes leftover after parsing attributes in process `syz.0.378'. [ 95.721235][ T6918] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.728144][ T7160] block nbd0: Unsupported socket: shutdown callout must be supported. [ 95.745838][ T6918] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.772895][ T7166] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 95.795588][ T6918] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.833052][ T7163] netlink: 76 bytes leftover after parsing attributes in process `syz.1.379'. [ 95.896823][ T6821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.023157][ T6821] veth0_vlan: entered promiscuous mode [ 96.083703][ T6821] veth1_vlan: entered promiscuous mode [ 96.132597][ T6918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.245066][ T6918] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.269556][ T6821] veth0_macvtap: entered promiscuous mode [ 96.301887][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.309150][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.328478][ T6821] veth1_macvtap: entered promiscuous mode [ 96.358823][ T3514] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.365998][ T3514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.433875][ T6821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.455989][ T6821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.469346][ T5149] Bluetooth: hci3: command tx timeout [ 96.482940][ T6821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.493706][ T6821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.503899][ T6821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.515057][ T6821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.526807][ T6821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.575646][ T7191] netlink: 'syz.1.387': attribute type 3 has an invalid length. [ 96.599208][ T6918] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.610171][ T5887] tipc: Node number set to 2886997007 [ 96.630847][ T6821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.643849][ T7193] netlink: 'syz.1.388': attribute type 11 has an invalid length. [ 96.651041][ T6821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.651937][ T7193] netlink: 224 bytes leftover after parsing attributes in process `syz.1.388'. [ 96.681656][ T6821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.708869][ T6821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.725406][ T6821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.738381][ T6821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.750191][ T6821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.774777][ T6821] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.802027][ T6821] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.827251][ T6821] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.836025][ T6821] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.871358][ T7202] netlink: 'syz.1.389': attribute type 1 has an invalid length. [ 97.055164][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.077983][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.134724][ T6918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.173342][ T7207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.390'. [ 97.184843][ T7210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.391'. [ 97.206292][ T7211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.391'. [ 97.215464][ T3514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.223714][ T3514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.231934][ T7207] macsec0: entered promiscuous mode [ 97.253188][ T7210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.391'. [ 97.281908][ T7213] openvswitch: netlink: Multiple metadata blocks provided [ 97.306240][ T6918] veth0_vlan: entered promiscuous mode [ 97.357841][ T6918] veth1_vlan: entered promiscuous mode [ 97.439392][ T6918] veth0_macvtap: entered promiscuous mode [ 97.476837][ T6918] veth1_macvtap: entered promiscuous mode [ 97.647481][ T6918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.686471][ T6918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.714602][ T6918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.726532][ T6918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.741783][ T6918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.759487][ T6918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.770633][ T6918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.782004][ T6918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.815522][ T6918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.864776][ T6918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.896190][ T6918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.911853][ T6918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.924435][ T6918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.957892][ T6918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.988280][ T6918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.009240][ T6918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.035026][ T6918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.068472][ T6918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.112176][ T6918] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.140876][ T6918] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.174485][ T6918] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.194050][ T6918] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.352475][ T1086] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.421737][ T7258] bridge0: port 3(gretap0) entered blocking state [ 98.433168][ T7258] bridge0: port 3(gretap0) entered disabled state [ 98.443823][ T7258] gretap0: entered allmulticast mode [ 98.454539][ T7258] gretap0: entered promiscuous mode [ 98.462471][ T7258] bridge0: port 3(gretap0) entered blocking state [ 98.469174][ T7258] bridge0: port 3(gretap0) entered forwarding state [ 98.547198][ T5149] Bluetooth: hci3: command 0x0405 tx timeout [ 98.731936][ T1086] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.795051][ T7266] vlan2: entered promiscuous mode [ 98.800963][ T7266] vlan2: entered allmulticast mode [ 98.816373][ T7266] hsr_slave_1: entered allmulticast mode [ 98.842855][ T2971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.851270][ T7274] netlink: 104 bytes leftover after parsing attributes in process `syz.4.408'. [ 98.855920][ T2971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.894989][ T1086] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.034120][ T1086] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.066253][ T7278] tipc: Enabling of bearer rejected, failed to enable media [ 99.066382][ T5149] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.106389][ T2971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.137828][ T5149] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.148444][ T5149] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.168879][ T2971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.176929][ T5149] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.194033][ T5149] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 99.202919][ T5149] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.406562][ T7299] nftables ruleset with unbound set [ 99.496729][ T1086] bridge_slave_1: left allmulticast mode [ 99.502822][ T1086] bridge_slave_1: left promiscuous mode [ 99.509852][ T1086] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.549934][ T1086] bridge_slave_0: left allmulticast mode [ 99.565874][ T1086] bridge_slave_0: left promiscuous mode [ 99.572298][ T1086] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.983741][ T1086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.006331][ T1086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.021493][ T1086] bond0 (unregistering): Released all slaves [ 100.122773][ T7329] netlink: 'syz.4.415': attribute type 21 has an invalid length. [ 100.146579][ T7291] chnl_net:caif_netlink_parms(): no params data found [ 100.620458][ T1086] hsr_slave_0: left promiscuous mode [ 100.659616][ T1086] hsr_slave_1: left promiscuous mode [ 100.665562][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.737481][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.758571][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.774499][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.798422][ T1086] veth1_macvtap: left promiscuous mode [ 100.804194][ T1086] veth0_macvtap: left promiscuous mode [ 100.810538][ T1086] veth1_vlan: left promiscuous mode [ 100.817678][ T1086] veth0_vlan: left promiscuous mode [ 100.942793][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 100.954148][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 100.964280][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 100.984138][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 101.001096][ T5847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 101.009314][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 101.259062][ T5149] Bluetooth: hci2: command tx timeout [ 101.362322][ T1086] team0 (unregistering): Port device team_slave_1 removed [ 101.409314][ T1086] team0 (unregistering): Port device team_slave_0 removed [ 101.791927][ T7350] netlink: 'syz.4.425': attribute type 6 has an invalid length. [ 101.878265][ T7291] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.894289][ T7291] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.912526][ T7291] bridge_slave_0: entered allmulticast mode [ 101.934044][ T7291] bridge_slave_0: entered promiscuous mode [ 101.951037][ T7291] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.973577][ T7291] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.986798][ T7291] bridge_slave_1: entered allmulticast mode [ 102.004143][ T7291] bridge_slave_1: entered promiscuous mode [ 102.051734][ T7369] __nla_validate_parse: 1 callbacks suppressed [ 102.051752][ T7369] netlink: 28 bytes leftover after parsing attributes in process `syz.1.428'. [ 102.130632][ T7291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.183188][ T7291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.269765][ T7369] vlan2: entered allmulticast mode [ 102.276217][ T7369] bond0: entered allmulticast mode [ 102.287423][ T7369] bond_slave_1: entered allmulticast mode [ 102.303562][ T7291] team0: Port device team_slave_0 added [ 102.335223][ T7291] team0: Port device team_slave_1 added [ 102.454530][ T7393] netlink: 'syz.4.435': attribute type 3 has an invalid length. [ 102.492846][ T7393] batadv0: entered promiscuous mode [ 102.523841][ T7393] macsec1: entered promiscuous mode [ 102.533331][ T7395] netlink: 380 bytes leftover after parsing attributes in process `syz.1.437'. [ 102.552575][ T7393] macsec1: entered allmulticast mode [ 102.608758][ T7393] batadv0: entered allmulticast mode [ 102.625036][ T7291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.643770][ T7291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.677755][ T7291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.696131][ T7291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.706125][ T7291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.742708][ T7291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.749046][ T7410] ieee802154 phy0 wpan0: encryption failed: -22 [ 102.774500][ T7412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.953998][ T7291] hsr_slave_0: entered promiscuous mode [ 102.960700][ T7291] hsr_slave_1: entered promiscuous mode [ 102.966644][ T7291] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.974862][ T7291] Cannot create hsr debugfs directory [ 103.065402][ T1086] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.097767][ T5149] Bluetooth: hci3: command tx timeout [ 103.123649][ T7364] chnl_net:caif_netlink_parms(): no params data found [ 103.153132][ T1086] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.244439][ T1086] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.320307][ T1086] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.333821][ T7364] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.343081][ T5149] Bluetooth: hci2: command tx timeout [ 103.349653][ T7364] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.365797][ T7364] bridge_slave_0: entered allmulticast mode [ 103.373641][ T7364] bridge_slave_0: entered promiscuous mode [ 103.389597][ T7364] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.409248][ T7364] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.416514][ T7364] bridge_slave_1: entered allmulticast mode [ 103.432786][ T7364] bridge_slave_1: entered promiscuous mode [ 103.546610][ T7439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.559817][ T7364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.591280][ T7364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.725610][ T7364] team0: Port device team_slave_0 added [ 103.751410][ T7364] team0: Port device team_slave_1 added [ 103.795651][ T1086] bridge_slave_1: left allmulticast mode [ 103.804384][ T1086] bridge_slave_1: left promiscuous mode [ 103.816624][ T1086] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.844017][ T1086] bridge_slave_0: left allmulticast mode [ 103.853155][ T1086] bridge_slave_0: left promiscuous mode [ 103.866470][ T1086] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.474644][ T1086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.491536][ T1086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.502823][ T1086] bond0 (unregistering): Released all slaves [ 104.550774][ T7364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.558072][ T7364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.590069][ T7364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.625782][ T7364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.633665][ T7364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.682012][ T7364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.985082][ T7364] hsr_slave_0: entered promiscuous mode [ 104.989846][ T7488] netlink: 24 bytes leftover after parsing attributes in process `syz.0.465'. [ 105.000950][ T7488] netlink: 272 bytes leftover after parsing attributes in process `syz.0.465'. [ 105.010658][ T7488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.465'. [ 105.010990][ T7364] hsr_slave_1: entered promiscuous mode [ 105.026810][ T7488] sctp: [Deprecated]: syz.0.465 (pid 7488) Use of struct sctp_assoc_value in delayed_ack socket option. [ 105.026810][ T7488] Use struct sctp_sack_info instead [ 105.048534][ T7364] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.065778][ T7364] Cannot create hsr debugfs directory [ 105.175152][ T7494] xt_CT: You must specify a L4 protocol and not use inversions on it [ 105.185402][ T5149] Bluetooth: hci3: command tx timeout [ 105.196279][ T7291] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.219217][ T7291] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.312348][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.469'. [ 105.331495][ T7498] openvswitch: netlink: ERSPAN option length err (len 4096, max 255). [ 105.341177][ T1086] hsr_slave_0: left promiscuous mode [ 105.347967][ T1086] hsr_slave_1: left promiscuous mode [ 105.354219][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.372121][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.388688][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.407648][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.418869][ T5149] Bluetooth: hci2: command tx timeout [ 105.462474][ T1086] veth1_macvtap: left promiscuous mode [ 105.472950][ T1086] veth0_macvtap: left promiscuous mode [ 105.478666][ T1086] veth1_vlan: left promiscuous mode [ 105.483974][ T1086] veth0_vlan: left promiscuous mode [ 105.915354][ T1086] team0 (unregistering): Port device team_slave_1 removed [ 105.967096][ T1086] team0 (unregistering): Port device team_slave_0 removed [ 106.341754][ T7291] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.360915][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.469'. [ 106.467539][ T7291] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.851193][ T7533] netlink: 40 bytes leftover after parsing attributes in process `syz.1.478'. [ 106.944286][ T7291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.963967][ T7537] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 106.974707][ T7291] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.000452][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.007619][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.022699][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.029914][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.257150][ T5149] Bluetooth: hci3: command tx timeout [ 107.356490][ T7558] x_tables: unsorted entry at hook 1 [ 107.370134][ T7364] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 107.405645][ T7364] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 107.430634][ T7364] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 107.459169][ T7364] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 107.496275][ T7291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.503638][ T5149] Bluetooth: hci2: command tx timeout [ 107.639453][ T7291] veth0_vlan: entered promiscuous mode [ 107.682631][ T7291] veth1_vlan: entered promiscuous mode [ 107.751796][ T7364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.772744][ T7291] veth0_macvtap: entered promiscuous mode [ 107.792555][ T7291] veth1_macvtap: entered promiscuous mode [ 107.836574][ T7291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.872521][ T7291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.885555][ T7291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.901750][ T7291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.911964][ T7291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.923032][ T7291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.934418][ T7291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.961726][ T7578] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20002 [ 107.970565][ T7578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.493'. [ 107.992172][ T7364] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.003852][ T7291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.016180][ T7291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.028739][ T7291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.040423][ T7291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.051172][ T7291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.062444][ T7291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.098923][ T7291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.123943][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.131116][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.179010][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.186201][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.245466][ T7291] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.262934][ T7291] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.274137][ T7291] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.290300][ T7291] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.357315][ T7593] netlink: 'syz.1.498': attribute type 1 has an invalid length. [ 108.358859][ T7364] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.365090][ T7593] netlink: 224 bytes leftover after parsing attributes in process `syz.1.498'. [ 108.501800][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.534953][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.594583][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.623728][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.810646][ T7364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.936652][ T7364] veth0_vlan: entered promiscuous mode [ 108.942776][ T7617] netlink: 'syz.4.505': attribute type 1 has an invalid length. [ 108.953711][ T7364] veth1_vlan: entered promiscuous mode [ 109.030493][ T7364] veth0_macvtap: entered promiscuous mode [ 109.059577][ T7364] veth1_macvtap: entered promiscuous mode [ 109.106325][ T7364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.124245][ T7364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.133757][ T7625] netlink: 20 bytes leftover after parsing attributes in process `syz.4.507'. [ 109.136245][ T7364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.155134][ T7364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.171233][ T7364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.199643][ T7364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.210917][ T7364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.222725][ T7364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.250003][ T7364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.315944][ T7364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.333697][ T7364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.346291][ T5149] Bluetooth: hci3: command tx timeout [ 109.352589][ T7364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.363445][ T7364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.373794][ T7364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.385048][ T7364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.400658][ T7364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.412216][ T7364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.423967][ T7364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.445704][ T7364] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.455232][ T7364] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.464929][ T7637] netlink: 228 bytes leftover after parsing attributes in process `syz.1.511'. [ 109.474427][ T7364] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.483592][ T7364] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.495829][ T7638] netlink: 228 bytes leftover after parsing attributes in process `syz.1.511'. [ 109.516048][ T7637] netlink: 104 bytes leftover after parsing attributes in process `syz.1.511'. [ 109.695675][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.727410][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.798791][ T2989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.825835][ T2989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.886494][ T7661] netlink: 56 bytes leftover after parsing attributes in process `syz.4.516'. [ 110.037805][ T3514] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.278237][ T7670] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 110.285499][ T7670] netlink: 'syz.4.520': attribute type 4 has an invalid length. [ 110.469520][ T7674] policy can only be matched on NF_INET_PRE_ROUTING [ 110.469544][ T7674] unable to load match [ 110.488949][ T7674] netlink: 'syz.4.521': attribute type 9 has an invalid length. [ 110.496798][ T7674] netlink: 201384 bytes leftover after parsing attributes in process `syz.4.521'. [ 110.506357][ T7674] openvswitch: netlink: Message has 6 unknown bytes. [ 110.627477][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 110.638988][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 110.671750][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 110.686504][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 110.700795][ T5847] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 110.711773][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 110.850932][ T3514] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.986489][ T7689] netlink: 16 bytes leftover after parsing attributes in process `syz.0.524'. [ 110.998592][ T3514] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.142756][ T3514] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.324081][ T5149] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.336197][ T5149] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 111.345388][ T5149] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.359664][ T5149] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 111.371116][ T5149] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 111.379093][ T5149] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 111.421772][ T3514] bridge_slave_1: left allmulticast mode [ 111.435512][ T3514] bridge_slave_1: left promiscuous mode [ 111.445034][ T3514] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.460072][ T3514] bridge_slave_0: left allmulticast mode [ 111.465754][ T3514] bridge_slave_0: left promiscuous mode [ 111.474840][ T3514] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.805005][ T3514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.815677][ T3514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.831267][ T3514] bond0 (unregistering): Released all slaves [ 111.862857][ T7679] chnl_net:caif_netlink_parms(): no params data found [ 112.178601][ T7721] netlink: 12 bytes leftover after parsing attributes in process `syz.4.530'. [ 112.280664][ T7679] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.293047][ T7679] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.301991][ T7679] bridge_slave_0: entered allmulticast mode [ 112.309910][ T7679] bridge_slave_0: entered promiscuous mode [ 112.402085][ T7679] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.426648][ T7679] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.458732][ T7679] bridge_slave_1: entered allmulticast mode [ 112.475004][ T7679] bridge_slave_1: entered promiscuous mode [ 112.481413][ T7731] xt_socket: unknown flags 0x2 [ 112.509710][ T3514] hsr_slave_0: left promiscuous mode [ 112.526530][ T3514] hsr_slave_1: left promiscuous mode [ 112.543403][ T3514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.555870][ T3514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.571747][ T3514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.582283][ T3514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.627899][ T3514] veth1_macvtap: left promiscuous mode [ 112.638573][ T3514] veth0_macvtap: left promiscuous mode [ 112.644515][ T3514] veth1_vlan: left promiscuous mode [ 112.657899][ T3514] veth0_vlan: left promiscuous mode [ 112.787825][ T5149] Bluetooth: hci2: command tx timeout [ 113.106757][ T3514] team0 (unregistering): Port device team_slave_1 removed [ 113.155843][ T3514] team0 (unregistering): Port device team_slave_0 removed [ 113.398395][ T7744] sctp: [Deprecated]: syz.1.538 (pid 7744) Use of int in maxseg socket option. [ 113.398395][ T7744] Use struct sctp_assoc_value instead [ 113.420346][ T5149] Bluetooth: hci3: command tx timeout [ 113.562979][ T7748] __nla_validate_parse: 1 callbacks suppressed [ 113.562997][ T7748] netlink: 64 bytes leftover after parsing attributes in process `syz.1.540'. [ 113.782206][ T7679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.794893][ T7679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.885073][ T7703] chnl_net:caif_netlink_parms(): no params data found [ 113.932268][ T7679] team0: Port device team_slave_0 added [ 114.006017][ T7679] team0: Port device team_slave_1 added [ 114.167105][ T7772] bond0: option ad_select: unable to set because the bond device is up [ 114.175718][ T7703] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.183378][ T7703] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.197449][ T7703] bridge_slave_0: entered allmulticast mode [ 114.204651][ T7703] bridge_slave_0: entered promiscuous mode [ 114.246701][ T7703] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.270059][ T7703] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.297620][ T7703] bridge_slave_1: entered allmulticast mode [ 114.304743][ T7703] bridge_slave_1: entered promiscuous mode [ 114.341857][ T7775] netlink: 28 bytes leftover after parsing attributes in process `syz.4.547'. [ 114.365547][ T7679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.374494][ T7775] netlink: 'syz.4.547': attribute type 8 has an invalid length. [ 114.376762][ T7679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.382320][ T7679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.384181][ T7679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.454395][ T7679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.456959][ T7775] netlink: 16 bytes leftover after parsing attributes in process `syz.4.547'. [ 114.489252][ T7679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.575454][ T7786] netlink: 'syz.1.550': attribute type 1 has an invalid length. [ 114.684728][ T7703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.710001][ T7703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.770223][ T7679] hsr_slave_0: entered promiscuous mode [ 114.780173][ T7679] hsr_slave_1: entered promiscuous mode [ 114.786370][ T7679] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.803524][ T7790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.551'. [ 114.814689][ T7679] Cannot create hsr debugfs directory [ 114.857051][ T5149] Bluetooth: hci2: command tx timeout [ 114.928601][ T7703] team0: Port device team_slave_0 added [ 114.994409][ T7703] team0: Port device team_slave_1 added [ 115.120968][ T7807] netlink: 'syz.1.557': attribute type 3 has an invalid length. [ 115.137022][ T7807] netlink: 'syz.1.557': attribute type 1 has an invalid length. [ 115.213422][ T3514] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.254386][ T7814] netem: change failed [ 115.280655][ T7703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.293863][ T7703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.320680][ T7703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.350068][ T7703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.360032][ T7703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.398155][ T7703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.434103][ T3514] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.504140][ T5149] Bluetooth: hci3: command tx timeout [ 115.534137][ T3514] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.604047][ T7703] hsr_slave_0: entered promiscuous mode [ 115.610595][ T7703] hsr_slave_1: entered promiscuous mode [ 115.616657][ T7703] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.625241][ T7703] Cannot create hsr debugfs directory [ 115.701483][ T3514] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.859068][ T7829] netlink: 20 bytes leftover after parsing attributes in process `syz.4.562'. [ 115.938208][ T3514] bridge_slave_1: left allmulticast mode [ 115.967031][ T3514] bridge_slave_1: left promiscuous mode [ 115.973598][ T3514] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.999087][ T3514] bridge_slave_0: left allmulticast mode [ 116.012955][ T3514] bridge_slave_0: left promiscuous mode [ 116.039662][ T3514] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.081822][ T7833] netlink: 'syz.4.564': attribute type 1 has an invalid length. [ 116.100987][ T7833] netlink: 'syz.4.564': attribute type 1 has an invalid length. [ 116.541393][ T3514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.552064][ T3514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.565773][ T3514] bond0 (unregistering): Released all slaves [ 116.735187][ T7851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.570'. [ 116.851029][ T7679] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 116.937011][ T5149] Bluetooth: hci2: command tx timeout [ 116.957416][ T7679] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 117.001663][ T7679] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 117.110109][ T7679] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 117.188882][ T3514] hsr_slave_0: left promiscuous mode [ 117.206952][ T3514] hsr_slave_1: left promiscuous mode [ 117.212911][ T3514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.232508][ T3514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.247814][ T3514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.254265][ T7874] netlink: 24 bytes leftover after parsing attributes in process `syz.4.576'. [ 117.265740][ T3514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.305129][ T3514] veth1_macvtap: left promiscuous mode [ 117.317080][ T3514] veth0_macvtap: left promiscuous mode [ 117.334123][ T3514] veth1_vlan: left promiscuous mode [ 117.345802][ T3514] veth0_vlan: left promiscuous mode [ 117.577054][ T5149] Bluetooth: hci3: command tx timeout [ 117.804981][ T3514] team0 (unregistering): Port device team_slave_1 removed [ 117.849373][ T3514] team0 (unregistering): Port device team_slave_0 removed [ 118.477334][ T7679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.498371][ T7679] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.512867][ T2971] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.520066][ T2971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.546484][ T7889] netlink: 'syz.4.582': attribute type 10 has an invalid length. [ 118.608855][ T2971] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.616145][ T2971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.639129][ T7889] [H: left allmulticast mode [ 118.672870][ T7891] netlink: 76 bytes leftover after parsing attributes in process `syz.0.583'. [ 118.743412][ T7703] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 118.759626][ T7703] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 118.782759][ T7679] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 118.788841][ T7891] x_tables: duplicate underflow at hook 1 [ 118.801765][ T7679] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.811553][ T7891] netlink: 28 bytes leftover after parsing attributes in process `syz.0.583'. [ 118.864896][ T7891] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 118.903958][ T7897] netlink: 'syz.1.585': attribute type 1 has an invalid length. [ 118.917538][ T7897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.585'. [ 118.929086][ T7897] vlan1: entered promiscuous mode [ 118.938437][ T7703] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 118.960267][ T7896] vlan1: left promiscuous mode [ 118.971347][ T7703] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 119.014830][ T7906] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 119.037631][ T5149] Bluetooth: hci2: command tx timeout [ 119.218417][ T7679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.242179][ T7703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.272331][ T7915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.590'. [ 119.302702][ T7915] ipvlan2: entered promiscuous mode [ 119.310052][ T7915] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 119.318885][ T7915] team0: Device ipvlan2 is already an upper device of the team interface [ 119.370223][ T7703] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.411480][ T3514] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.418693][ T3514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.443587][ T7679] veth0_vlan: entered promiscuous mode [ 119.479834][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.487021][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.542532][ T7679] veth1_vlan: entered promiscuous mode [ 119.576531][ T7922] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 119.592577][ T7703] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 119.606742][ T7703] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 119.658379][ T5149] Bluetooth: hci3: command tx timeout [ 119.669719][ T7928] xt_TCPMSS: Only works on TCP SYN packets [ 119.712760][ T7679] veth0_macvtap: entered promiscuous mode [ 119.741266][ T7679] veth1_macvtap: entered promiscuous mode [ 119.767158][ T7927] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 119.776360][ T7927] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 119.785536][ T7927] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 119.794689][ T7927] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 119.796735][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.803824][ T7927] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 119.803871][ T7927] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 119.832582][ T7927] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 119.841777][ T7927] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 119.852015][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.863387][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.892366][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.906920][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.926037][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.958375][ T7679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.998331][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.009265][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.020945][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.032110][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.043743][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.049836][ T7939] netlink: 44 bytes leftover after parsing attributes in process `syz.4.596'. [ 120.054960][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.077723][ T7679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.110308][ T7679] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.126281][ T7679] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.135997][ T7679] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.150397][ T7679] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.186265][ T7703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.336498][ T7944] netlink: 20 bytes leftover after parsing attributes in process `syz.4.597'. [ 120.349209][ T7703] veth0_vlan: entered promiscuous mode [ 120.364796][ T7944] netlink: 16 bytes leftover after parsing attributes in process `syz.4.597'. [ 120.411821][ T7703] veth1_vlan: entered promiscuous mode [ 120.412600][ T2971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.458433][ T2971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.527257][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.535516][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.595060][ T7703] veth0_macvtap: entered promiscuous mode [ 120.631891][ T7952] vlan2: entered promiscuous mode [ 120.654975][ T7952] bond0: entered promiscuous mode [ 120.673702][ T7952] bond_slave_0: entered promiscuous mode [ 120.687171][ T7952] bond_slave_1: entered promiscuous mode [ 120.715046][ T7952] bond0: left promiscuous mode [ 120.736065][ T7952] bond_slave_0: left promiscuous mode [ 120.761815][ T7952] bond_slave_1: left promiscuous mode [ 120.814248][ T7958] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 120.828447][ T7958] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 120.878205][ T7703] veth1_macvtap: entered promiscuous mode [ 120.939158][ T7703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.975430][ T7703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.983792][ T7968] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 120.995761][ T7703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.995784][ T7703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.023173][ T7703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.034799][ T7703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.046266][ T7703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.058335][ T7703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.076604][ T7703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.111430][ T7703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.132604][ T7703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.146256][ T7703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.165007][ T7703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.175379][ T7703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.193399][ T7703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.204777][ T7703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.221819][ T7703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.235826][ T7703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.293509][ T7703] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.321566][ T7703] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.361359][ T7703] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.394581][ T7703] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.474266][ T1086] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.537494][ T7988] lo: entered allmulticast mode [ 121.571366][ T7977] lo: left allmulticast mode [ 121.689551][ T2971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.699138][ T2971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.721680][ T3514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.729831][ T3514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.906271][ T1086] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.163545][ T1086] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.191970][ T7994] tipc: Started in network mode [ 122.197158][ T7994] tipc: Node identity 7f000001, cluster identity 4711 [ 122.205450][ T7994] tipc: Enabled bearer , priority 10 [ 122.279705][ T1086] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.330951][ T7994] tipc: Enabled bearer , priority 0 [ 122.376661][ T8001] netlink: 80 bytes leftover after parsing attributes in process `syz.4.614'. [ 122.389453][ T8001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.614'. [ 122.523913][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 122.542594][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 122.558819][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 122.573438][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 122.582033][ T5847] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 122.590191][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 122.619734][ T8001] hsr_slave_1 (unregistering): left promiscuous mode [ 122.708673][ T1086] bridge_slave_1: left allmulticast mode [ 122.714381][ T1086] bridge_slave_1: left promiscuous mode [ 122.721070][ T1086] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.730971][ T1086] bridge_slave_0: left allmulticast mode [ 122.736754][ T1086] bridge_slave_0: left promiscuous mode [ 122.743717][ T1086] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.044747][ T1086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.055922][ T1086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.068342][ T1086] bond0 (unregistering): Released all slaves [ 123.447556][ T9] tipc: Node number set to 2130706433 [ 123.567979][ T8029] xt_socket: unknown flags 0x4 [ 123.576207][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 123.601229][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 123.616035][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 123.626162][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 123.637693][ T5847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 123.645991][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 123.759495][ T1086] hsr_slave_0: left promiscuous mode [ 123.769450][ T1086] hsr_slave_1: left promiscuous mode [ 123.782738][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.800838][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.814494][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.822892][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.831466][ T8041] netlink: 312 bytes leftover after parsing attributes in process `syz.4.623'. [ 123.880476][ T1086] veth1_macvtap: left promiscuous mode [ 123.893283][ T1086] veth0_macvtap: left promiscuous mode [ 123.899565][ T1086] veth1_vlan: left promiscuous mode [ 123.904895][ T1086] veth0_vlan: left promiscuous mode [ 124.070512][ T8057] netlink: 'syz.4.625': attribute type 9 has an invalid length. [ 124.076620][ T8059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.626'. [ 124.452853][ T1086] team0 (unregistering): Port device team_slave_1 removed [ 124.493474][ T1086] team0 (unregistering): Port device team_slave_0 removed [ 124.701012][ T5149] Bluetooth: hci2: command tx timeout [ 124.974705][ T8065] netlink: 'syz.1.628': attribute type 11 has an invalid length. [ 124.982937][ T8065] netlink: 224 bytes leftover after parsing attributes in process `syz.1.628'. [ 124.992886][ T8062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.627'. [ 125.025105][ T8002] chnl_net:caif_netlink_parms(): no params data found [ 125.068609][ T8065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.628'. [ 125.231119][ T8075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.630'. [ 125.251587][ T8077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.630'. [ 125.263041][ T8075] netlink: 'syz.4.630': attribute type 3 has an invalid length. [ 125.281612][ T8077] netlink: 'syz.4.630': attribute type 3 has an invalid length. [ 125.365455][ T8002] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.387077][ T8002] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.394405][ T8002] bridge_slave_0: entered allmulticast mode [ 125.408703][ T8002] bridge_slave_0: entered promiscuous mode [ 125.426209][ T8002] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.436055][ T8002] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.476521][ T8002] bridge_slave_1: entered allmulticast mode [ 125.513633][ T8002] bridge_slave_1: entered promiscuous mode [ 125.545199][ T8089] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 125.589413][ T8094] gtp0: entered promiscuous mode [ 125.594660][ T8094] gtp0: entered allmulticast mode [ 125.602963][ T8096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.636'. [ 125.711349][ T8002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.737870][ T5149] Bluetooth: hci3: command tx timeout [ 125.751246][ T8002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.804442][ T8033] chnl_net:caif_netlink_parms(): no params data found [ 125.889686][ T1086] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.993484][ T8002] team0: Port device team_slave_0 added [ 126.003891][ T8002] team0: Port device team_slave_1 added [ 126.034054][ T1086] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.073434][ T8116] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 126.147049][ C1] net_ratelimit: 3321 callbacks suppressed [ 126.147068][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.205424][ T1086] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.258792][ T8002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.265808][ T8002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.309417][ T8135] netlink: 24 bytes leftover after parsing attributes in process `syz.4.646'. [ 126.318979][ T8134] netlink: 220 bytes leftover after parsing attributes in process `syz.0.644'. [ 126.330258][ T8002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.398606][ T1086] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.425718][ T8002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.437206][ T8002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.464698][ T8002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.494290][ T8033] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.506815][ T8033] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.518962][ T8033] bridge_slave_0: entered allmulticast mode [ 126.525708][ T8033] bridge_slave_0: entered promiscuous mode [ 126.567831][ T8033] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.575420][ T8033] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.583333][ T8033] bridge_slave_1: entered allmulticast mode [ 126.591161][ T8033] bridge_slave_1: entered promiscuous mode [ 126.779233][ T5149] Bluetooth: hci2: command tx timeout [ 126.854920][ T8033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.871505][ T8033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.902354][ T8002] hsr_slave_0: entered promiscuous mode [ 126.918193][ T8002] hsr_slave_1: entered promiscuous mode [ 126.924361][ T8002] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.954210][ T8002] Cannot create hsr debugfs directory [ 127.107099][ T8033] team0: Port device team_slave_0 added [ 127.125975][ T8033] team0: Port device team_slave_1 added [ 127.231120][ T1086] bridge_slave_1: left allmulticast mode [ 127.236822][ T1086] bridge_slave_1: left promiscuous mode [ 127.268797][ T1086] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.307645][ T1086] bridge_slave_0: left allmulticast mode [ 127.325749][ T1086] bridge_slave_0: left promiscuous mode [ 127.336034][ T1086] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.674632][ T1086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.685948][ T1086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.699632][ T1086] bond0 (unregistering): Released all slaves [ 127.719057][ T8033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.726165][ T8033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.762820][ T8033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.817628][ T5149] Bluetooth: hci3: command tx timeout [ 127.899396][ T8033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.906402][ T8033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.957538][ T8033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.973222][ T8189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.097204][ T8189] sctp: [Deprecated]: syz.1.663 (pid 8189) Use of int in max_burst socket option. [ 128.097204][ T8189] Use struct sctp_assoc_value instead [ 128.128222][ T8033] hsr_slave_0: entered promiscuous mode [ 128.145171][ T8033] hsr_slave_1: entered promiscuous mode [ 128.155428][ T8033] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.171452][ T8033] Cannot create hsr debugfs directory [ 128.204810][ T8192] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 128.204877][ T8194] nbd: must specify an index to disconnect [ 128.239342][ T8197] nbd: must specify an index to disconnect [ 128.400230][ T8201] bond3: entered promiscuous mode [ 128.405595][ T8201] bond3: entered allmulticast mode [ 128.411824][ T8201] 8021q: adding VLAN 0 to HW filter on device bond3 [ 128.512406][ T1086] hsr_slave_0: left promiscuous mode [ 128.522643][ T1086] hsr_slave_1: left promiscuous mode [ 128.528709][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.536267][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.545842][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.553500][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.572962][ T1086] veth1_macvtap: left promiscuous mode [ 128.578654][ T1086] veth0_macvtap: left promiscuous mode [ 128.584273][ T1086] veth1_vlan: left promiscuous mode [ 128.589668][ T1086] veth0_vlan: left promiscuous mode [ 128.857356][ T5149] Bluetooth: hci2: command tx timeout [ 129.215214][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 129.228793][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 129.234322][ T8217] __nla_validate_parse: 5 callbacks suppressed [ 129.234340][ T8217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.671'. [ 129.271084][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 129.287899][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 129.305974][ T5847] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 129.326438][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 129.328673][ T1086] team0 (unregistering): Port device team_slave_1 removed [ 129.388345][ T1086] team0 (unregistering): Port device team_slave_0 removed [ 129.842610][ T8218] IPVS: Unknown mcast interface: vcan0 [ 129.899843][ T5149] Bluetooth: hci3: command tx timeout [ 130.172139][ T9] IPVS: starting estimator thread 0... [ 130.178940][ T8002] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 130.226099][ T8002] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 130.255732][ T8002] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 130.267543][ T8225] IPVS: using max 38 ests per chain, 91200 per kthread [ 130.278596][ T8228] xt_TCPMSS: Only works on TCP SYN packets [ 130.287474][ T8002] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 130.354743][ T8231] netlink: 28 bytes leftover after parsing attributes in process `syz.0.676'. [ 130.485993][ T8214] chnl_net:caif_netlink_parms(): no params data found [ 130.628703][ T8214] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.638451][ T8214] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.645932][ T8214] bridge_slave_0: entered allmulticast mode [ 130.654002][ T8214] bridge_slave_0: entered promiscuous mode [ 130.696582][ T8214] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.718192][ T8214] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.727799][ T8214] bridge_slave_1: entered allmulticast mode [ 130.734864][ T8214] bridge_slave_1: entered promiscuous mode [ 130.810940][ T8214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.820545][ T8033] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 130.839925][ T8214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.859890][ T8033] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 130.886181][ T8002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.894058][ T8033] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 130.933594][ T8033] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 130.937536][ T5149] Bluetooth: hci2: command tx timeout [ 131.005485][ T8214] team0: Port device team_slave_0 added [ 131.039856][ T8256] x_tables: duplicate underflow at hook 3 [ 131.046827][ T8214] team0: Port device team_slave_1 added [ 131.079953][ T8254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.682'. [ 131.187260][ T8214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.194260][ T8214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.233706][ T8214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.256736][ T8214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.276660][ T8214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.312398][ T8214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.327080][ T8002] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.342959][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.350163][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.418034][ T5149] Bluetooth: hci0: command tx timeout [ 131.420333][ T3514] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.430890][ T3514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.469747][ T8214] hsr_slave_0: entered promiscuous mode [ 131.475962][ T8214] hsr_slave_1: entered promiscuous mode [ 131.497848][ T8214] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.505627][ T8214] Cannot create hsr debugfs directory [ 131.528513][ T8269] netlink: 14 bytes leftover after parsing attributes in process `syz.0.686'. [ 131.762821][ T8269] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.781031][ T8269] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.798551][ T8269] bond0 (unregistering): Released all slaves [ 131.875950][ T8033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.977685][ T5149] Bluetooth: hci3: command tx timeout [ 132.002893][ T8033] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.171028][ T8214] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.262175][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.269415][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.269952][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.687'. [ 132.286492][ T8273] batadv0: Device is already in use. [ 132.324704][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.331937][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.405187][ T8214] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.481241][ T8002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.585825][ T8214] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.639158][ T8279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.689'. [ 132.662091][ T8279] macsec0: entered promiscuous mode [ 132.721263][ T8214] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.055989][ T8002] veth0_vlan: entered promiscuous mode [ 133.078896][ T8002] veth1_vlan: entered promiscuous mode [ 133.180065][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.186702][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.203565][ T8002] veth0_macvtap: entered promiscuous mode [ 133.222811][ T8002] veth1_macvtap: entered promiscuous mode [ 133.244425][ T8214] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 133.306521][ T8002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.333318][ T8002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.347399][ T8002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.367105][ T8002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.377729][ T8002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.390244][ T8002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.411570][ T8002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.432692][ T8214] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 133.443516][ T8214] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 133.459645][ T8214] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 133.474757][ T8299] netlink: 165 bytes leftover after parsing attributes in process `syz.0.695'. [ 133.503734][ T8002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.521961][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.696'. [ 133.523353][ T8002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.540984][ T8002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.551588][ T8002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.562316][ T8002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.572876][ T8002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.584356][ T8002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.615792][ T8033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.678711][ T8002] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.701997][ T8002] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.715851][ T8002] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.724841][ T8002] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.878476][ T8309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.699'. [ 133.895339][ T2971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.905871][ T2971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.924210][ T8033] veth0_vlan: entered promiscuous mode [ 133.962002][ T8033] veth1_vlan: entered promiscuous mode [ 134.000403][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.025048][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.026556][ T8214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.082078][ T8033] veth0_macvtap: entered promiscuous mode [ 134.102855][ T8214] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.113998][ T8033] veth1_macvtap: entered promiscuous mode [ 134.154655][ T2989] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.161850][ T2989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.201784][ T2989] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.209027][ T2989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.230070][ T8033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.253215][ T8033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.264317][ T8033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.276740][ T8033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.287101][ T8033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.299732][ T8033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.310031][ T8033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.325102][ T8033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.342123][ T8033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.410626][ T8033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.421529][ T8033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.434692][ T8033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.447904][ T8033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.455815][ T8318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.703'. [ 134.457874][ T8033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.457895][ T8033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.457921][ T8033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.457932][ T8033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.459002][ T8033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.607344][ T8033] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.616101][ T8033] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.626774][ T8033] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.645349][ T8033] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.690587][ T8322] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 134.751953][ T2989] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.815013][ T8321] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 134.933062][ T2989] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.035678][ T2989] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.063438][ T3514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.081439][ T3514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.098148][ T8214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.141165][ T3514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.150820][ T3514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.166561][ T8214] veth0_vlan: entered promiscuous mode [ 135.218488][ T2989] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.241181][ T8214] veth1_vlan: entered promiscuous mode [ 135.311196][ T8214] veth0_macvtap: entered promiscuous mode [ 135.322515][ T8214] veth1_macvtap: entered promiscuous mode [ 135.336467][ T8214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.347706][ T8214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.358298][ T8214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.369049][ T8214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.379237][ T8214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.390147][ T8214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.400363][ T8214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.412980][ T8214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.437314][ T8214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.465373][ T8214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.480749][ T8214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.505404][ T8214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.526606][ T8214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.568413][ T8214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.590968][ T8214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.605833][ T8214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.625829][ T8214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.637516][ T8214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.659585][ T8214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.676451][ T8214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.698538][ T8214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.720715][ T8214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.851026][ T8214] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.887513][ T8214] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.908831][ T8214] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.925773][ T8214] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.986159][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 135.996674][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 136.001337][ T8341] netlink: 44 bytes leftover after parsing attributes in process `syz.0.709'. [ 136.017186][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 136.028386][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 136.036069][ T5847] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 136.045188][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 136.087840][ T8345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.709'. [ 136.195715][ T3514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.197623][ T2989] bridge_slave_1: left allmulticast mode [ 136.211653][ T2989] bridge_slave_1: left promiscuous mode [ 136.212856][ T3514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.219266][ T2989] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.235139][ T2989] bridge_slave_0: left allmulticast mode [ 136.242126][ T2989] bridge_slave_0: left promiscuous mode [ 136.251937][ T2989] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.607741][ T2989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.630443][ T2989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.650663][ T2989] bond0 (unregistering): Released all slaves [ 136.884434][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.903206][ T8351] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 136.922459][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.041774][ T8363] netlink: 52 bytes leftover after parsing attributes in process `syz.0.713'. [ 137.089111][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 137.101572][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 137.110813][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 137.124190][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 137.143725][ T5847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 137.157245][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 137.235152][ T2989] hsr_slave_0: left promiscuous mode [ 137.244301][ T2989] hsr_slave_1: left promiscuous mode [ 137.258747][ T2989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.266416][ T2989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.291042][ T2989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.298717][ T2989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.329989][ T2989] veth1_macvtap: left promiscuous mode [ 137.335760][ T2989] veth0_macvtap: left promiscuous mode [ 137.342384][ T2989] veth1_vlan: left promiscuous mode [ 137.348036][ T2989] veth0_vlan: left promiscuous mode [ 137.871915][ T2989] team0 (unregistering): Port device team_slave_1 removed [ 137.913719][ T2989] team0 (unregistering): Port device team_slave_0 removed [ 138.138514][ T5149] Bluetooth: hci2: command tx timeout [ 138.407800][ T8373] IPv6: Can't replace route, no match found [ 138.666187][ T8387] sctp: [Deprecated]: syz.4.717 (pid 8387) Use of struct sctp_assoc_value in delayed_ack socket option. [ 138.666187][ T8387] Use struct sctp_sack_info instead [ 138.698745][ T8390] netlink: 28 bytes leftover after parsing attributes in process `syz.0.716'. [ 138.722542][ T8390] netlink: 'syz.0.716': attribute type 7 has an invalid length. [ 138.748156][ T8383] sctp: [Deprecated]: syz.4.717 (pid 8383) Use of struct sctp_assoc_value in delayed_ack socket option. [ 138.748156][ T8383] Use struct sctp_sack_info instead [ 138.757350][ T8390] netlink: 'syz.0.716': attribute type 8 has an invalid length. [ 138.797145][ T8390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.716'. [ 138.957224][ T8343] chnl_net:caif_netlink_parms(): no params data found [ 139.151345][ T8366] chnl_net:caif_netlink_parms(): no params data found [ 139.259182][ T5149] Bluetooth: hci3: command tx timeout [ 139.269421][ T8398] netlink: 'syz.4.719': attribute type 2 has an invalid length. [ 139.338120][ T8402] netlink: 'syz.0.718': attribute type 62 has an invalid length. [ 139.351392][ T5884] hid-generic 0005:0458:0009.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa [ 139.451874][ T8343] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.464081][ T8343] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.479150][ T8343] bridge_slave_0: entered allmulticast mode [ 139.486575][ T8343] bridge_slave_0: entered promiscuous mode [ 139.530167][ T8343] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.557746][ T8343] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.565013][ T8343] bridge_slave_1: entered allmulticast mode [ 139.588578][ T8343] bridge_slave_1: entered promiscuous mode [ 139.700109][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 139.712984][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 139.722148][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 139.732195][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 139.749281][ T5847] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 139.757898][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 139.771584][ T2989] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.793298][ T8366] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.805174][ T8366] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.814206][ T8366] bridge_slave_0: entered allmulticast mode [ 139.826422][ T8366] bridge_slave_0: entered promiscuous mode [ 139.836404][ T8366] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.852676][ T8366] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.860215][ T8366] bridge_slave_1: entered allmulticast mode [ 139.872942][ T8366] bridge_slave_1: entered promiscuous mode [ 139.881586][ T8343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.930861][ T2989] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.974594][ T8343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.012667][ T8366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.041627][ T8366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.098813][ T2989] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.116212][ T8343] team0: Port device team_slave_0 added [ 140.168926][ T8343] team0: Port device team_slave_1 added [ 140.207716][ T8366] team0: Port device team_slave_0 added [ 140.219611][ T5149] Bluetooth: hci2: command tx timeout [ 140.227935][ T8366] team0: Port device team_slave_1 added [ 140.260504][ T8429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.724'. [ 140.272946][ T2989] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.314316][ T8430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.724'. [ 140.340302][ T8430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.724'. [ 140.349902][ T8430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.724'. [ 140.363962][ T8343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.373202][ T8343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.400254][ T8343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.421064][ T8343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.433427][ T8343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.460202][ T8343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.472282][ T8431] sch_fq: defrate 0 ignored. [ 140.510508][ T8366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.527196][ T8366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.564345][ T8366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.593118][ T8366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.601433][ T8366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.660982][ T8366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.767802][ T8439] netlink: 20 bytes leftover after parsing attributes in process `syz.0.726'. [ 140.800548][ T8439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.726'. [ 140.816770][ T8343] hsr_slave_0: entered promiscuous mode [ 140.824550][ T8343] hsr_slave_1: entered promiscuous mode [ 140.831432][ T8343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.840202][ T8343] Cannot create hsr debugfs directory [ 141.072456][ T2989] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.106374][ T8366] hsr_slave_0: entered promiscuous mode [ 141.113696][ T8366] hsr_slave_1: entered promiscuous mode [ 141.121172][ T8366] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.129432][ T8366] Cannot create hsr debugfs directory [ 141.156327][ T8446] veth3: entered allmulticast mode [ 141.168771][ T8448] batadv1: entered allmulticast mode [ 141.256180][ T2989] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.340288][ T5149] Bluetooth: hci3: command tx timeout [ 141.419279][ T2989] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.463929][ T8461] netlink: 'syz.4.732': attribute type 1 has an invalid length. [ 141.468308][ T8463] netlink: 'syz.0.734': attribute type 1 has an invalid length. [ 141.482089][ T8463] netlink: 244 bytes leftover after parsing attributes in process `syz.0.734'. [ 141.485334][ T8461] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.732'. [ 141.566270][ T2989] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.626276][ T8415] chnl_net:caif_netlink_parms(): no params data found [ 141.634585][ T8467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.817787][ T5149] Bluetooth: hci0: command tx timeout [ 141.883759][ T8481] netlink: 52 bytes leftover after parsing attributes in process `syz.0.738'. [ 141.896150][ T8481] netlink: 52 bytes leftover after parsing attributes in process `syz.0.738'. [ 141.908723][ T8481] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 142.041783][ T2989] bridge_slave_1: left allmulticast mode [ 142.067586][ T2989] bridge_slave_1: left promiscuous mode [ 142.073381][ T2989] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.108387][ T2989] bridge_slave_0: left allmulticast mode [ 142.114107][ T2989] bridge_slave_0: left promiscuous mode [ 142.127247][ T2989] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.159888][ T2989] bridge_slave_1: left allmulticast mode [ 142.165660][ T2989] bridge_slave_1: left promiscuous mode [ 142.182895][ T2989] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.203495][ T2989] bridge_slave_0: left allmulticast mode [ 142.213997][ T2989] bridge_slave_0: left promiscuous mode [ 142.227040][ T2989] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.297644][ T5149] Bluetooth: hci2: command tx timeout [ 142.971516][ T2989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.983377][ T2989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.993648][ T2989] bond0 (unregistering): Released all slaves [ 143.120036][ T2989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.131582][ T2989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.142508][ T2989] bond0 (unregistering): Released all slaves [ 143.153733][ T8415] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.161690][ T8415] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.169409][ T8415] bridge_slave_0: entered allmulticast mode [ 143.176072][ T8415] bridge_slave_0: entered promiscuous mode [ 143.191673][ T8504] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 143.231726][ T8415] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.287663][ T8415] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.295537][ T8415] bridge_slave_1: entered allmulticast mode [ 143.318294][ T8415] bridge_slave_1: entered promiscuous mode [ 143.419690][ T5149] Bluetooth: hci3: command tx timeout [ 143.492398][ T8513] netlink: 'syz.0.749': attribute type 4 has an invalid length. [ 143.522594][ T8415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.571738][ T8415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.736449][ T8415] team0: Port device team_slave_0 added [ 143.756195][ T8415] team0: Port device team_slave_1 added [ 143.839760][ T8528] netlink: 'syz.0.754': attribute type 1 has an invalid length. [ 143.858910][ T8415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.866376][ T8415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.893974][ T8415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.915909][ T5149] Bluetooth: hci0: command tx timeout [ 143.953550][ T8528] bond0: entered promiscuous mode [ 143.965149][ T8528] bond0: entered allmulticast mode [ 143.996592][ T8415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.011533][ T8415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.038440][ T8415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.193287][ T8540] netlink: 'syz.4.757': attribute type 3 has an invalid length. [ 144.243044][ T8415] hsr_slave_0: entered promiscuous mode [ 144.267917][ T8415] hsr_slave_1: entered promiscuous mode [ 144.273889][ T8415] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.283754][ T8415] Cannot create hsr debugfs directory [ 144.298808][ T2989] hsr_slave_0: left promiscuous mode [ 144.313125][ T2989] hsr_slave_1: left promiscuous mode [ 144.320591][ T2989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.328650][ T2989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.336675][ T2989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.344830][ T2989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.361433][ T2989] hsr_slave_0: left promiscuous mode [ 144.369497][ T2989] hsr_slave_1: left promiscuous mode [ 144.375379][ T2989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.383533][ T2989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.388195][ T5149] Bluetooth: hci2: command tx timeout [ 144.399644][ T2989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.407723][ T2989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.441236][ T2989] veth1_macvtap: left promiscuous mode [ 144.447476][ T2989] veth0_macvtap: left promiscuous mode [ 144.453215][ T2989] veth1_vlan: left promiscuous mode [ 144.459425][ T2989] veth0_vlan: left promiscuous mode [ 144.466223][ T2989] veth1_macvtap: left promiscuous mode [ 144.475826][ T2989] veth0_macvtap: left promiscuous mode [ 144.483473][ T2989] veth1_vlan: left promiscuous mode [ 144.488977][ T2989] veth0_vlan: left promiscuous mode [ 145.024312][ T2989] team0 (unregistering): Port device team_slave_1 removed [ 145.069517][ T2989] team0 (unregistering): Port device team_slave_0 removed [ 145.498088][ T5149] Bluetooth: hci3: command tx timeout [ 145.845298][ T2989] team0 (unregistering): Port device team_slave_1 removed [ 145.889916][ T2989] team0 (unregistering): Port device team_slave_0 removed [ 145.977857][ T5149] Bluetooth: hci0: command tx timeout [ 146.327376][ T8542] hsr0: entered allmulticast mode [ 146.332614][ T8542] hsr_slave_0: entered allmulticast mode [ 146.407833][ T8343] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 146.435847][ T8343] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 146.500858][ T8343] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 146.584944][ T8343] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 146.693143][ T8366] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 146.721441][ T8366] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 146.801200][ T8556] netlink: 'syz.4.763': attribute type 10 has an invalid length. [ 146.809713][ T8366] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 146.831247][ T8366] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 146.862855][ T8556] macvlan0: entered promiscuous mode [ 146.868714][ T8556] macvlan0: entered allmulticast mode [ 146.881246][ T8556] veth1_vlan: entered allmulticast mode [ 146.890983][ T8556] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 147.098110][ T8343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.115723][ T8366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.152826][ T8343] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.192929][ T2971] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.200128][ T2971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.215434][ T8366] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.235818][ T2971] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.243001][ T2971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.265185][ T2971] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.272394][ T2971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.378919][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.386278][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.411559][ T8415] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 147.432088][ T8415] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 147.452340][ T8415] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 147.483440][ T8415] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 147.704228][ T8415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.752771][ T8415] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.785498][ T2971] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.792903][ T2971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.835138][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.842358][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.942056][ T8343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.996438][ T8366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.059532][ T5149] Bluetooth: hci0: command tx timeout [ 148.175232][ T8366] veth0_vlan: entered promiscuous mode [ 148.211909][ T8366] veth1_vlan: entered promiscuous mode [ 148.229539][ T8343] veth0_vlan: entered promiscuous mode [ 148.253492][ T8343] veth1_vlan: entered promiscuous mode [ 148.292291][ T8366] veth0_macvtap: entered promiscuous mode [ 148.330891][ T8366] veth1_macvtap: entered promiscuous mode [ 148.387928][ T8343] veth0_macvtap: entered promiscuous mode [ 148.388051][ T8611] netlink: 'syz.0.773': attribute type 1 has an invalid length. [ 148.406582][ T8415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.420722][ T8343] veth1_macvtap: entered promiscuous mode [ 148.437823][ T8610] netlink: 'syz.0.773': attribute type 1 has an invalid length. [ 148.453017][ T8366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.479031][ T8366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.489879][ T8366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.501009][ T8366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.514893][ T8366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.529208][ T8366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.542384][ T8366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.637935][ T8343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.652903][ T8343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.661637][ T8622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.665031][ T8343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.683073][ T8343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.693401][ T8343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.705056][ T8343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.715049][ T8343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.725698][ T8343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.736796][ T8343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.761002][ T8366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.797544][ T8366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.818893][ T8366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.835914][ T8366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.856109][ T8366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.886658][ T8366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.905455][ T8631] Bluetooth: MGMT ver 1.23 [ 148.906737][ T8366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.936580][ T8366] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.946412][ T8366] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.956016][ T8366] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.965773][ T8366] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.979919][ T8343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.003179][ T8343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.014313][ T8343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.025412][ T8343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.036364][ T8343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.048078][ T8343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.058376][ T8343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.069377][ T8343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.080850][ T8343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.125922][ T8343] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.151747][ T8343] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.161683][ T8343] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.171291][ T8343] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.194259][ T8415] veth0_vlan: entered promiscuous mode [ 149.276540][ T8415] veth1_vlan: entered promiscuous mode [ 149.430199][ T8415] veth0_macvtap: entered promiscuous mode [ 149.444803][ T2989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.463796][ T8415] veth1_macvtap: entered promiscuous mode [ 149.492052][ T2989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.523743][ T3474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.531991][ T3474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.579700][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.605420][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.612964][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.612991][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.613002][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.613017][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.613028][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.613041][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.613068][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.613082][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.613093][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.613107][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.614259][ T8415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.812665][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.817843][ T2971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.840519][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.846429][ T2971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.870735][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.887218][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.963651][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.975175][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.994918][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.005955][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.016471][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.027491][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.038891][ T8415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.082923][ T8415] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.107530][ T8415] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.116289][ T8415] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.131827][ T8415] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.257907][ T8664] __nla_validate_parse: 3 callbacks suppressed [ 150.257925][ T8664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.786'. [ 150.387872][ T5847] Bluetooth: hci0: command 0x0405 tx timeout [ 150.415436][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.448581][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.504159][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.521103][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.560875][ T8670] netlink: 1264 bytes leftover after parsing attributes in process `syz.0.788'. [ 150.670826][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.993437][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.016963][ T8662] syz.4.786 (8662) used greatest stack depth: 18648 bytes left [ 151.066533][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.142464][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.151153][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.163847][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.174047][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.183203][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.192477][ T5845] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 151.200001][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.275443][ T52] bridge_slave_1: left allmulticast mode [ 151.281382][ T52] bridge_slave_1: left promiscuous mode [ 151.288012][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.296434][ T52] bridge_slave_0: left allmulticast mode [ 151.302785][ T52] bridge_slave_0: left promiscuous mode [ 151.308961][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.874798][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 151.886435][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 151.895571][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.897977][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 151.914061][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 151.922279][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.931379][ T5845] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 151.939891][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 151.958215][ T52] bond0 (unregistering): Released all slaves [ 152.095461][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.792'. [ 152.135352][ T8693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.792'. [ 152.330300][ T8704] netlink: 40 bytes leftover after parsing attributes in process `syz.4.795'. [ 152.364216][ T8706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.796'. [ 152.457974][ T5847] Bluetooth: hci0: command 0x0405 tx timeout [ 152.536580][ T52] hsr_slave_0: left promiscuous mode [ 152.575317][ T52] hsr_slave_1: left promiscuous mode [ 152.581935][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.590070][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.590158][ T8415] ================================================================== [ 152.605271][ T8415] BUG: KASAN: slab-use-after-free in sco_conn_put+0xad/0x210 [ 152.612682][ T8415] Write of size 8 at addr ffff888032a2f5a0 by task syz-executor/8415 [ 152.620759][ T8415] [ 152.623092][ T8415] CPU: 1 UID: 0 PID: 8415 Comm: syz-executor Not tainted 6.14.0-rc2-syzkaller-00157-g9593172d93b9 #0 [ 152.623110][ T8415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 152.623122][ T8415] Call Trace: [ 152.623128][ T8415] [ 152.623135][ T8415] dump_stack_lvl+0x241/0x360 [ 152.623155][ T8415] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.623168][ T8415] ? __pfx__printk+0x10/0x10 [ 152.623180][ T8415] ? _printk+0xd5/0x120 [ 152.623191][ T8415] ? __virt_addr_valid+0x183/0x530 [ 152.623210][ T8415] ? __virt_addr_valid+0x183/0x530 [ 152.623228][ T8415] print_report+0x169/0x550 [ 152.623243][ T8415] ? __virt_addr_valid+0x183/0x530 [ 152.623260][ T8415] ? __virt_addr_valid+0x183/0x530 [ 152.623276][ T8415] ? __virt_addr_valid+0x45f/0x530 [ 152.623293][ T8415] ? __phys_addr+0xba/0x170 [ 152.623310][ T8415] ? sco_conn_put+0xad/0x210 [ 152.623323][ T8415] kasan_report+0x143/0x180 [ 152.623338][ T8415] ? sco_conn_put+0xad/0x210 [ 152.623351][ T8415] sco_conn_put+0xad/0x210 [ 152.623375][ T8415] ? __pfx_sco_disconn_cfm+0x10/0x10 [ 152.623389][ T8415] hci_conn_hash_flush+0x1be/0x350 [ 152.623407][ T8415] ? __pfx_hci_conn_hash_flush+0x10/0x10 [ 152.623423][ T8415] ? drain_workqueue+0x2d3/0x3a0 [ 152.623441][ T8415] ? hci_discovery_set_state+0x57/0x180 [ 152.623456][ T8415] hci_dev_close_sync+0xa8b/0x1260 [ 152.623472][ T8415] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 152.623485][ T8415] ? rcu_is_watching+0x15/0xb0 [ 152.623505][ T8415] hci_unregister_dev+0x20b/0x510 [ 152.623524][ T8415] vhci_release+0x80/0xd0 [ 152.623538][ T8415] ? __pfx_vhci_release+0x10/0x10 [ 152.623552][ T8415] __fput+0x3e9/0x9f0 [ 152.623573][ T8415] task_work_run+0x24f/0x310 [ 152.623592][ T8415] ? __pfx_task_work_run+0x10/0x10 [ 152.623603][ T8415] ? do_exit+0xa25/0x28e0 [ 152.623620][ T8415] ? do_exit+0xa25/0x28e0 [ 152.623637][ T8415] do_exit+0xa2a/0x28e0 [ 152.623656][ T8415] ? __pfx_do_exit+0x10/0x10 [ 152.623671][ T8415] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 152.623689][ T8415] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 152.623709][ T8415] ? _raw_spin_unlock_irq+0x23/0x50 [ 152.623720][ T8415] ? lockdep_hardirqs_on+0x99/0x150 [ 152.623735][ T8415] do_group_exit+0x207/0x2c0 [ 152.623753][ T8415] __x64_sys_exit_group+0x3f/0x40 [ 152.623770][ T8415] x64_sys_call+0x26a8/0x26b0 [ 152.623785][ T8415] do_syscall_64+0xf3/0x230 [ 152.623800][ T8415] ? clear_bhb_loop+0x35/0x90 [ 152.623819][ T8415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.623835][ T8415] RIP: 0033:0x7f5dc038cde9 [ 152.623853][ T8415] Code: Unable to access opcode bytes at 0x7f5dc038cdbf. [ 152.623860][ T8415] RSP: 002b:00007fff1b5bdfa8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 152.623875][ T8415] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5dc038cde9 [ 152.623885][ T8415] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 152.623893][ T8415] RBP: 00007f5dc03ed8d0 R08: 00007fff1b5bbd47 R09: 0000000000000003 [ 152.623902][ T8415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.623910][ T8415] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007fff1b5be160 [ 152.623924][ T8415] [ 152.623929][ T8415] [ 152.925746][ T8415] Allocated by task 8608: [ 152.930066][ T8415] kasan_save_track+0x3f/0x80 [ 152.934741][ T8415] __kasan_kmalloc+0x98/0xb0 [ 152.939320][ T8415] __kmalloc_noprof+0x285/0x4c0 [ 152.944164][ T8415] sk_prot_alloc+0xe0/0x210 [ 152.948663][ T8415] sk_alloc+0x38/0x370 [ 152.952724][ T8415] bt_sock_alloc+0x3c/0x340 [ 152.957216][ T8415] sco_sock_create+0xbb/0x390 [ 152.961896][ T8415] bt_sock_create+0x161/0x230 [ 152.966561][ T8415] __sock_create+0x4c0/0xa30 [ 152.971145][ T8415] __sys_socket+0x150/0x3c0 [ 152.975638][ T8415] __x64_sys_socket+0x7a/0x90 [ 152.980405][ T8415] do_syscall_64+0xf3/0x230 [ 152.984906][ T8415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.990795][ T8415] [ 152.993106][ T8415] Freed by task 8607: [ 152.997068][ T8415] kasan_save_track+0x3f/0x80 [ 153.001739][ T8415] kasan_save_free_info+0x40/0x50 [ 153.006760][ T8415] __kasan_slab_free+0x59/0x70 [ 153.011559][ T8415] kfree+0x196/0x430 [ 153.015472][ T8415] __sk_destruct+0x479/0x5f0 [ 153.020070][ T8415] sco_sock_release+0x25e/0x320 [ 153.024921][ T8415] sock_close+0xbc/0x240 [ 153.029173][ T8415] __fput+0x3e9/0x9f0 [ 153.033164][ T8415] task_work_run+0x24f/0x310 [ 153.037751][ T8415] do_exit+0xa2a/0x28e0 [ 153.041920][ T8415] do_group_exit+0x207/0x2c0 [ 153.046526][ T8415] get_signal+0x168c/0x1720 [ 153.051030][ T8415] arch_do_signal_or_restart+0x96/0x860 [ 153.056570][ T8415] syscall_exit_to_user_mode+0xce/0x340 [ 153.062199][ T8415] do_syscall_64+0x100/0x230 [ 153.066781][ T8415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.072679][ T8415] [ 153.074990][ T8415] The buggy address belongs to the object at ffff888032a2f000 [ 153.074990][ T8415] which belongs to the cache kmalloc-2k of size 2048 [ 153.089037][ T8415] The buggy address is located 1440 bytes inside of [ 153.089037][ T8415] freed 2048-byte region [ffff888032a2f000, ffff888032a2f800) [ 153.103019][ T8415] [ 153.105343][ T8415] The buggy address belongs to the physical page: [ 153.111840][ T8415] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x32a28 [ 153.120619][ T8415] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 153.129135][ T8415] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 153.136699][ T8415] page_type: f5(slab) [ 153.140672][ T8415] raw: 00fff00000000040 ffff88801b042000 ffffea00017aee00 dead000000000002 [ 153.149245][ T8415] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 153.157816][ T8415] head: 00fff00000000040 ffff88801b042000 ffffea00017aee00 dead000000000002 [ 153.166473][ T8415] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 153.175140][ T8415] head: 00fff00000000003 ffffea0000ca8a01 ffffffffffffffff 0000000000000000 [ 153.183812][ T8415] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 153.192496][ T8415] page dumped because: kasan: bad access detected [ 153.198912][ T8415] page_owner tracks the page as allocated [ 153.204618][ T8415] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7364, tgid 7364 (syz-executor), ts 109682809902, free_ts 106461672224 [ 153.226157][ T8415] post_alloc_hook+0x1f4/0x240 [ 153.230924][ T8415] get_page_from_freelist+0x365c/0x37a0 [ 153.236467][ T8415] __alloc_frozen_pages_noprof+0x292/0x710 [ 153.242266][ T8415] alloc_pages_mpol+0x311/0x660 [ 153.247120][ T8415] allocate_slab+0x8f/0x3a0 [ 153.251627][ T8415] ___slab_alloc+0xc27/0x14a0 [ 153.256306][ T8415] __slab_alloc+0x58/0xa0 [ 153.260639][ T8415] __kmalloc_cache_noprof+0x27b/0x390 [ 153.266010][ T8415] device_create+0x121/0x2e0 [ 153.270601][ T8415] mac80211_hwsim_new_radio+0x42b/0x4a40 [ 153.276231][ T8415] hwsim_new_radio_nl+0xece/0x2290 [ 153.281354][ T8415] genl_rcv_msg+0xb1f/0xec0 [ 153.285849][ T8415] netlink_rcv_skb+0x206/0x480 [ 153.290606][ T8415] genl_rcv+0x28/0x40 [ 153.294575][ T8415] netlink_unicast+0x7f6/0x990 [ 153.299350][ T8415] netlink_sendmsg+0x8de/0xcb0 [ 153.304110][ T8415] page last free pid 5832 tgid 5832 stack trace: [ 153.310422][ T8415] free_frozen_pages+0xe0d/0x10e0 [ 153.315446][ T8415] __slab_free+0x2c2/0x380 [ 153.319951][ T8415] qlist_free_all+0x9a/0x140 [ 153.324538][ T8415] kasan_quarantine_reduce+0x14f/0x170 [ 153.329986][ T8415] __kasan_slab_alloc+0x23/0x80 [ 153.334832][ T8415] kmem_cache_alloc_noprof+0x1d9/0x380 [ 153.340291][ T8415] ptlock_alloc+0x20/0x70 [ 153.344610][ T8415] pte_alloc_one+0x73/0x160 [ 153.349105][ T8415] __pte_alloc+0x79/0x220 [ 153.353424][ T8415] copy_pmd_range+0x6fc8/0x77b0 [ 153.358269][ T8415] copy_page_range+0x99f/0xe90 [ 153.363027][ T8415] copy_mm+0x1269/0x2160 [ 153.367264][ T8415] copy_process+0x17d1/0x3cf0 [ 153.371938][ T8415] kernel_clone+0x226/0x8e0 [ 153.376443][ T8415] __x64_sys_clone+0x258/0x2a0 [ 153.381213][ T8415] do_syscall_64+0xf3/0x230 [ 153.385707][ T8415] [ 153.388145][ T8415] Memory state around the buggy address: [ 153.393789][ T8415] ffff888032a2f480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 153.401853][ T8415] ffff888032a2f500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 153.409918][ T8415] >ffff888032a2f580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 153.417973][ T8415] ^ [ 153.423080][ T8415] ffff888032a2f600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 153.431490][ T8415] ffff888032a2f680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 153.439543][ T8415] ================================================================== [ 153.460622][ T8415] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 153.467866][ T8415] CPU: 0 UID: 0 PID: 8415 Comm: syz-executor Not tainted 6.14.0-rc2-syzkaller-00157-g9593172d93b9 #0 [ 153.478731][ T8415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 153.488803][ T8415] Call Trace: [ 153.492076][ T8415] [ 153.494998][ T8415] dump_stack_lvl+0x241/0x360 [ 153.499683][ T8415] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.504872][ T8415] ? __pfx__printk+0x10/0x10 [ 153.509450][ T8415] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 153.515428][ T8415] ? vscnprintf+0x5d/0x90 [ 153.519763][ T8415] panic+0x349/0x880 [ 153.523672][ T8415] ? check_panic_on_warn+0x21/0xb0 [ 153.528783][ T8415] ? __pfx_panic+0x10/0x10 [ 153.533199][ T8415] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 153.539172][ T8415] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 153.545498][ T8415] check_panic_on_warn+0x86/0xb0 [ 153.550459][ T8415] ? sco_conn_put+0xad/0x210 [ 153.555040][ T8415] end_report+0x77/0x160 [ 153.559276][ T8415] kasan_report+0x154/0x180 [ 153.563773][ T8415] ? sco_conn_put+0xad/0x210 [ 153.568361][ T8415] sco_conn_put+0xad/0x210 [ 153.572768][ T8415] ? __pfx_sco_disconn_cfm+0x10/0x10 [ 153.578044][ T8415] hci_conn_hash_flush+0x1be/0x350 [ 153.583153][ T8415] ? __pfx_hci_conn_hash_flush+0x10/0x10 [ 153.588794][ T8415] ? drain_workqueue+0x2d3/0x3a0 [ 153.593725][ T8415] ? hci_discovery_set_state+0x57/0x180 [ 153.599262][ T8415] hci_dev_close_sync+0xa8b/0x1260 [ 153.604373][ T8415] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 153.609912][ T8415] ? rcu_is_watching+0x15/0xb0 [ 153.614669][ T8415] hci_unregister_dev+0x20b/0x510 [ 153.619694][ T8415] vhci_release+0x80/0xd0 [ 153.624019][ T8415] ? __pfx_vhci_release+0x10/0x10 [ 153.629040][ T8415] __fput+0x3e9/0x9f0 [ 153.633023][ T8415] task_work_run+0x24f/0x310 [ 153.637609][ T8415] ? __pfx_task_work_run+0x10/0x10 [ 153.642709][ T8415] ? do_exit+0xa25/0x28e0 [ 153.647034][ T8415] ? do_exit+0xa25/0x28e0 [ 153.651448][ T8415] do_exit+0xa2a/0x28e0 [ 153.655600][ T8415] ? __pfx_do_exit+0x10/0x10 [ 153.660185][ T8415] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 153.666168][ T8415] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 153.672495][ T8415] ? _raw_spin_unlock_irq+0x23/0x50 [ 153.677686][ T8415] ? lockdep_hardirqs_on+0x99/0x150 [ 153.682876][ T8415] do_group_exit+0x207/0x2c0 [ 153.687465][ T8415] __x64_sys_exit_group+0x3f/0x40 [ 153.692486][ T8415] x64_sys_call+0x26a8/0x26b0 [ 153.697155][ T8415] do_syscall_64+0xf3/0x230 [ 153.701827][ T8415] ? clear_bhb_loop+0x35/0x90 [ 153.706498][ T8415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.712387][ T8415] RIP: 0033:0x7f5dc038cde9 [ 153.716792][ T8415] Code: Unable to access opcode bytes at 0x7f5dc038cdbf. [ 153.723799][ T8415] RSP: 002b:00007fff1b5bdfa8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 153.732212][ T8415] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5dc038cde9 [ 153.740178][ T8415] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 153.748239][ T8415] RBP: 00007f5dc03ed8d0 R08: 00007fff1b5bbd47 R09: 0000000000000003 [ 153.756744][ T8415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.764713][ T8415] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007fff1b5be160 [ 153.772780][ T8415] [ 153.776109][ T8415] Kernel Offset: disabled [ 153.780451][ T8415] Rebooting in 86400 seconds..