last executing test programs: 1m28.769350783s ago: executing program 1 (id=1194): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0x74}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xc6, &(0x7f0000000080)=""/198, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m27.676220632s ago: executing program 2 (id=495): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x90d, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xfd}]}, 0x24}, 0x1, 0x0, 0x0, 0xc050}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000800)={0xb80, r3, 0x0, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x4c0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xd}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x2}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x490, 0xe, 0x0, 0x1, [{0x74, 0x0, "c990e7286407a5476e54e0d8606f21be8226020653ea7552e52ce3361e070139622c16c610874e0e41ca8551b6fe9ef418842e6e3e80c412b8d932d184a665c2f672e5f359159dd1d030f7e8f2bde595d2219cd778de6c342fca884ae5211a29abd8d57d5d8c4bdda1238bf65f20b725"}, {0xc0, 0x0, "97eb962b9d52b65e5a4987c1a48bbb2447ebf33e71a663b95305bbb8aa1c5cfca9ef633fe3d3ca59ebb1799da774419186dd89d68ec39532bf21d720920d2383fca466641a415fb8d2f4720de91bc0a9971d21658b1f4258bce7f449d120af78815fdec7d2e933b3d56e0754566a02f621b9d78ce6c569558f7f6bcb132cd3ed4b9e33f85a9fc74ebf5bb7564213ac21e7b84ade52289db99cbffa025509965b077041601c62398dfd72d2c5f6b65159ee7a9334a14527216938bfbc"}, {0x4}, {0x40, 0x0, "f00c405b28f5bfe37899f178be71a3147dd2c2356416761b9f80b4a1219b3d502442bbcb1a111c0bbe5742001ba5f786adbad89edbe4df906668ede2"}, {0x7e, 0x0, "c2a28a2ed69751770c5c7a1dc223fc3df10db8c7c2b63a43edbfcb0c91dbd7d2ee3a2aa64735aba241d20ad60c3c7af1f3e05345d848d3ad8f4676d9ad085909f6fa0dd0cfff8a9881d2e59cdd9849921fe6ed08ed449dc78e003ea0c95c970e2826b5b478a2f2827b680680d560b6e8f3c5c4c7f16e8323966a"}, {0xac, 0x0, "1fd277fc22dfbfb11e8d1712b9408d3d4976baffadd271c73a9beea9c791f7afc62989b2200b6469f6eeccc674d6d09995328695545b83cc35f9e72f62878c6c6c4d8990fb902305209c5154a4c37f9c4bc3858e030625b8379211a5cba25e33a0e1e432fff5fd9f80a725fc10757b16b09464794e4114235ea8cd94e548892da5b4bb120107fba6a1eeb7fb23d87c0094786197a2b204058ff7d06e32f7f5f480e357cfaf3aa8a9"}, {0x9f, 0x0, "3c88c3ca8fd3d0fcc7e30c2480ae0739a094865f120e0afe1daec6303adb2317fd38feb929ae1fcef88fcb472f6c681039304ea7ed696eaeac7800c20e79f37d1170c050612ee16e5f94ffee2c6bcb4564a82a10d4a53e616e65af15a973f48b18944cdadef34f1cb4ede2341b327e77d382edf61b6b2c0d96ed3271d2b8100f52b03a0882117efbf12b13e1774eab8e47c0034c6aa18eeaabc685"}, {0xc0, 0x0, "494df5c1fccdf55c0fbcf6f36b3b854dfe6246eb0b1e3de4461ad1da1e4a5c841ecafcec3da1df3454fe94fb8718675c2cd8b5a4ae07373e44f7667c4d2360c9878eb14f0eed7ace7887253eb14455a6a2156c0dd5d4898d62967c9f81708fdfd60b73c64219bbe52555482a49faac2cd88cad06855aede119d3a1646681caad3026424038b1e9efdeae152e1e1ce91bc6dbb3c15cb4ddf6664906d7a4aa8a2b34356d40b5a5313064e7bbed81d9868558e942ae8b8cd428a30a3641"}, {0x85, 0x0, "de9a1ef128ea17aa41133f5c1f4da193719e42d5ecc41e1b3f85630601cf5c101c140ddc0973195134b4c0721059da6ceabe632e38c6f69ee3ae8f497dcf80effda9f7112f6980582fe91b2d0c3c8f73f16cc839f8efd41bc0db840b7ef4c6db3cacbca50acb0f560d556cc8c811ee7bcd912576efc1eb98bdf483c74e8d3d2cc6"}]}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "637c85e856f3"}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x8}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x2a0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1fc, 0xe, 0x0, 0x1, [{0xd, 0x0, "ac54ab7518b0e3c5d5"}, {0x25, 0x0, "a8ef3d426bffa82ef63d314a31fb6612365eccf7fb4ab2f0eb844f03e6193fc197"}, {0xf8, 0x0, "5790fa6bd9fea812dc812129b6519784546bd90e7c14781275c30d1bb3d2825b899b0cb02eb7efc970e26c083ead2cfb2608c570724d1b7f374ada922bc8f1f4bbbcade787b5d06f11088d5ec402764bb8209251f6c33a668d6b4a2c3b20910fa6258b9dd2dafa15c333291a0e7d9c5091d8e60844938f22985424bfcc4bbc8814a3c1fdf4f7b689f5c848c832c827d11762fc897e2725d8d7649eb6d61337f5ebb217ac9f6cd173ddd4fd2f13d88ab92e075947d382132139ce354cb5f7cccefbf8c6e87114fe1553e77b6c296c4ed0481eaa84f4ec590eac5afc3af6e9f58aa96caf77c15d09b7a137f95d93ec49a23eed255c"}, {0xc8, 0x0, "eea0e8aedae575192b7810c300483cc0e2d604d54500ad81b926770b5b6e38f2b38c94eff96b536a7ac02138c50e243e4e50bb21382c6f3da26eae149439b976a109ae48765e15eb04b6da9f9069049afe258e54887cceea2106b3bf2b5f5a9a463efb9f7aa8a77b1d084d3f779dc0ebe6548ddac6ac6538492fc2df94103ced4512c338ffa586673b1af947a0b3dcc32cc6c302a13780a630e34761fbf885e605e55dd60fd19bea6996b149f0387fb2434e5d19044cfdec8996c53be9eaa1f3ccd2a626"}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0x93, 0xb, "50b1acbfa114eeefbba316b8a26c7d92f3db2e242829cf771adf9f2cfff0bdb46afc28288d606dd9b675422aa3fa89ac96f5cdfd6746be30a53500fe52bc1dfbf3791ae19be78879ce800ba920d353063054e620373468a9d83d33d4f386bc83ab6930bd38e89b6e83044d409611880a1945e63d8dfd8c38d59e34dfa0f8468fa0ccad00d5a544c11106d68906de86"}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xa0}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x4}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x3e8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x3d0, 0xd, 0x0, 0x1, [{0x69, 0x0, "fbcc8e2cac8c466320ea269ebff28bf396f23d53186afc326a098e7364aa5f4d5a8abb7cbb8c748356c5ebfd70897eaa14f2227727699f36feadd41de6e024c27598cc208f7bd6f22227a5d66b8cecd176045f6514ad99230788bc23f756f051a08f7ddc28"}, {0x90, 0x0, "cf9adefea19762c4698deeca10cbfc896bf3fd113fd0775fad8f47d2d5d03f34c1ae669792b35774c747f31b34d1685a18d0524aa48338f1f6e8b7c9e0e0ca2f06666ab322de2517f0b3c402f41a40ac503f44d079472f76c3c490991f66d7548e6d95aeaf8abada3c7ee64c0726c26a8b9c379bdbbb25fd8d855d983c20a02fef69505feeb88a6978d37664"}, {0x64, 0x0, "d3b423418ccc60d86ff20ef2b388d322280796c7cf7be6d145074c1db067bbe94c2c137a07c281144407d7955c8d0450cd6f042407f4d6a7c3cafa04124442ac408b4a502b0f4c3b523a07fdb072ebf3e7e01ee0ca49ddd4e61ad61c8acfe653"}, {0x27, 0x0, "521c3442ad76a891a8ed8ea180ce66c2ec8bf8138e719b5f9648d01ef8f703ed954f4e"}, {0xfe, 0x0, "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"}, {0xf9, 0x0, "f225814640a876a217dfb8c67668f25fb2a8410d3b1ebee7acdf90d27560a99df58cc5c84d0d3c4dfc86cd609f2d82839f4f80678193e9cdbaaa1bf4b9cd0fbf1c211a61362e956284bffe2848e5678a87291c28775fe55b06099af5bd94ec1df64f1bffd6079b2f8e9d2182d902d38b08686fe7a4f678ef3b768a4be82a59c41eefd270cb60c41720742c427cba5fa32e01da60f36edaf8e0ef253025512f512cd6e2c216d1ad3895631e00a3a8520b9433e4ca244abda2b1f368a6c43961d9df0387d3101fb074c58d7ddba238939e8d56859befd1897875d439808244a3685e2e54ba4dd7ff21ffc3671d11cc9011a1f75e42b1"}, {0x48, 0x0, "2ad4772442063617eb04d0f771e81097f46bd2aea4143a35d1c1d28bf9a1b1631b0a017d65a3d29e9b29ee5aff883089b377ed4c7c346cdcdf3162bb3b609f19bb100d16"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x8}]}]}, 0xb80}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1m15.088232409s ago: executing program 1 (id=1194): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0x74}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xc6, &(0x7f0000000080)=""/198, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m13.882866722s ago: executing program 2 (id=495): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x90d, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xfd}]}, 0x24}, 0x1, 0x0, 0x0, 0xc050}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000800)={0xb80, r3, 0x0, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x4c0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xd}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x2}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x490, 0xe, 0x0, 0x1, [{0x74, 0x0, "c990e7286407a5476e54e0d8606f21be8226020653ea7552e52ce3361e070139622c16c610874e0e41ca8551b6fe9ef418842e6e3e80c412b8d932d184a665c2f672e5f359159dd1d030f7e8f2bde595d2219cd778de6c342fca884ae5211a29abd8d57d5d8c4bdda1238bf65f20b725"}, {0xc0, 0x0, "97eb962b9d52b65e5a4987c1a48bbb2447ebf33e71a663b95305bbb8aa1c5cfca9ef633fe3d3ca59ebb1799da774419186dd89d68ec39532bf21d720920d2383fca466641a415fb8d2f4720de91bc0a9971d21658b1f4258bce7f449d120af78815fdec7d2e933b3d56e0754566a02f621b9d78ce6c569558f7f6bcb132cd3ed4b9e33f85a9fc74ebf5bb7564213ac21e7b84ade52289db99cbffa025509965b077041601c62398dfd72d2c5f6b65159ee7a9334a14527216938bfbc"}, {0x4}, {0x40, 0x0, "f00c405b28f5bfe37899f178be71a3147dd2c2356416761b9f80b4a1219b3d502442bbcb1a111c0bbe5742001ba5f786adbad89edbe4df906668ede2"}, {0x7e, 0x0, "c2a28a2ed69751770c5c7a1dc223fc3df10db8c7c2b63a43edbfcb0c91dbd7d2ee3a2aa64735aba241d20ad60c3c7af1f3e05345d848d3ad8f4676d9ad085909f6fa0dd0cfff8a9881d2e59cdd9849921fe6ed08ed449dc78e003ea0c95c970e2826b5b478a2f2827b680680d560b6e8f3c5c4c7f16e8323966a"}, {0xac, 0x0, "1fd277fc22dfbfb11e8d1712b9408d3d4976baffadd271c73a9beea9c791f7afc62989b2200b6469f6eeccc674d6d09995328695545b83cc35f9e72f62878c6c6c4d8990fb902305209c5154a4c37f9c4bc3858e030625b8379211a5cba25e33a0e1e432fff5fd9f80a725fc10757b16b09464794e4114235ea8cd94e548892da5b4bb120107fba6a1eeb7fb23d87c0094786197a2b204058ff7d06e32f7f5f480e357cfaf3aa8a9"}, {0x9f, 0x0, "3c88c3ca8fd3d0fcc7e30c2480ae0739a094865f120e0afe1daec6303adb2317fd38feb929ae1fcef88fcb472f6c681039304ea7ed696eaeac7800c20e79f37d1170c050612ee16e5f94ffee2c6bcb4564a82a10d4a53e616e65af15a973f48b18944cdadef34f1cb4ede2341b327e77d382edf61b6b2c0d96ed3271d2b8100f52b03a0882117efbf12b13e1774eab8e47c0034c6aa18eeaabc685"}, {0xc0, 0x0, "494df5c1fccdf55c0fbcf6f36b3b854dfe6246eb0b1e3de4461ad1da1e4a5c841ecafcec3da1df3454fe94fb8718675c2cd8b5a4ae07373e44f7667c4d2360c9878eb14f0eed7ace7887253eb14455a6a2156c0dd5d4898d62967c9f81708fdfd60b73c64219bbe52555482a49faac2cd88cad06855aede119d3a1646681caad3026424038b1e9efdeae152e1e1ce91bc6dbb3c15cb4ddf6664906d7a4aa8a2b34356d40b5a5313064e7bbed81d9868558e942ae8b8cd428a30a3641"}, {0x85, 0x0, "de9a1ef128ea17aa41133f5c1f4da193719e42d5ecc41e1b3f85630601cf5c101c140ddc0973195134b4c0721059da6ceabe632e38c6f69ee3ae8f497dcf80effda9f7112f6980582fe91b2d0c3c8f73f16cc839f8efd41bc0db840b7ef4c6db3cacbca50acb0f560d556cc8c811ee7bcd912576efc1eb98bdf483c74e8d3d2cc6"}]}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "637c85e856f3"}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x8}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x2a0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1fc, 0xe, 0x0, 0x1, [{0xd, 0x0, "ac54ab7518b0e3c5d5"}, {0x25, 0x0, "a8ef3d426bffa82ef63d314a31fb6612365eccf7fb4ab2f0eb844f03e6193fc197"}, {0xf8, 0x0, "5790fa6bd9fea812dc812129b6519784546bd90e7c14781275c30d1bb3d2825b899b0cb02eb7efc970e26c083ead2cfb2608c570724d1b7f374ada922bc8f1f4bbbcade787b5d06f11088d5ec402764bb8209251f6c33a668d6b4a2c3b20910fa6258b9dd2dafa15c333291a0e7d9c5091d8e60844938f22985424bfcc4bbc8814a3c1fdf4f7b689f5c848c832c827d11762fc897e2725d8d7649eb6d61337f5ebb217ac9f6cd173ddd4fd2f13d88ab92e075947d382132139ce354cb5f7cccefbf8c6e87114fe1553e77b6c296c4ed0481eaa84f4ec590eac5afc3af6e9f58aa96caf77c15d09b7a137f95d93ec49a23eed255c"}, {0xc8, 0x0, "eea0e8aedae575192b7810c300483cc0e2d604d54500ad81b926770b5b6e38f2b38c94eff96b536a7ac02138c50e243e4e50bb21382c6f3da26eae149439b976a109ae48765e15eb04b6da9f9069049afe258e54887cceea2106b3bf2b5f5a9a463efb9f7aa8a77b1d084d3f779dc0ebe6548ddac6ac6538492fc2df94103ced4512c338ffa586673b1af947a0b3dcc32cc6c302a13780a630e34761fbf885e605e55dd60fd19bea6996b149f0387fb2434e5d19044cfdec8996c53be9eaa1f3ccd2a626"}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0x93, 0xb, "50b1acbfa114eeefbba316b8a26c7d92f3db2e242829cf771adf9f2cfff0bdb46afc28288d606dd9b675422aa3fa89ac96f5cdfd6746be30a53500fe52bc1dfbf3791ae19be78879ce800ba920d353063054e620373468a9d83d33d4f386bc83ab6930bd38e89b6e83044d409611880a1945e63d8dfd8c38d59e34dfa0f8468fa0ccad00d5a544c11106d68906de86"}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xa0}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x4}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x3e8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x3d0, 0xd, 0x0, 0x1, [{0x69, 0x0, "fbcc8e2cac8c466320ea269ebff28bf396f23d53186afc326a098e7364aa5f4d5a8abb7cbb8c748356c5ebfd70897eaa14f2227727699f36feadd41de6e024c27598cc208f7bd6f22227a5d66b8cecd176045f6514ad99230788bc23f756f051a08f7ddc28"}, {0x90, 0x0, "cf9adefea19762c4698deeca10cbfc896bf3fd113fd0775fad8f47d2d5d03f34c1ae669792b35774c747f31b34d1685a18d0524aa48338f1f6e8b7c9e0e0ca2f06666ab322de2517f0b3c402f41a40ac503f44d079472f76c3c490991f66d7548e6d95aeaf8abada3c7ee64c0726c26a8b9c379bdbbb25fd8d855d983c20a02fef69505feeb88a6978d37664"}, {0x64, 0x0, "d3b423418ccc60d86ff20ef2b388d322280796c7cf7be6d145074c1db067bbe94c2c137a07c281144407d7955c8d0450cd6f042407f4d6a7c3cafa04124442ac408b4a502b0f4c3b523a07fdb072ebf3e7e01ee0ca49ddd4e61ad61c8acfe653"}, {0x27, 0x0, "521c3442ad76a891a8ed8ea180ce66c2ec8bf8138e719b5f9648d01ef8f703ed954f4e"}, {0xfe, 0x0, "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"}, {0xf9, 0x0, "f225814640a876a217dfb8c67668f25fb2a8410d3b1ebee7acdf90d27560a99df58cc5c84d0d3c4dfc86cd609f2d82839f4f80678193e9cdbaaa1bf4b9cd0fbf1c211a61362e956284bffe2848e5678a87291c28775fe55b06099af5bd94ec1df64f1bffd6079b2f8e9d2182d902d38b08686fe7a4f678ef3b768a4be82a59c41eefd270cb60c41720742c427cba5fa32e01da60f36edaf8e0ef253025512f512cd6e2c216d1ad3895631e00a3a8520b9433e4ca244abda2b1f368a6c43961d9df0387d3101fb074c58d7ddba238939e8d56859befd1897875d439808244a3685e2e54ba4dd7ff21ffc3671d11cc9011a1f75e42b1"}, {0x48, 0x0, "2ad4772442063617eb04d0f771e81097f46bd2aea4143a35d1c1d28bf9a1b1631b0a017d65a3d29e9b29ee5aff883089b377ed4c7c346cdcdf3162bb3b609f19bb100d16"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x8}]}]}, 0xb80}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1m0.92171542s ago: executing program 2 (id=495): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x90d, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xfd}]}, 0x24}, 0x1, 0x0, 0x0, 0xc050}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000800)={0xb80, r3, 0x0, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x4c0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xd}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x2}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x490, 0xe, 0x0, 0x1, [{0x74, 0x0, "c990e7286407a5476e54e0d8606f21be8226020653ea7552e52ce3361e070139622c16c610874e0e41ca8551b6fe9ef418842e6e3e80c412b8d932d184a665c2f672e5f359159dd1d030f7e8f2bde595d2219cd778de6c342fca884ae5211a29abd8d57d5d8c4bdda1238bf65f20b725"}, {0xc0, 0x0, "97eb962b9d52b65e5a4987c1a48bbb2447ebf33e71a663b95305bbb8aa1c5cfca9ef633fe3d3ca59ebb1799da774419186dd89d68ec39532bf21d720920d2383fca466641a415fb8d2f4720de91bc0a9971d21658b1f4258bce7f449d120af78815fdec7d2e933b3d56e0754566a02f621b9d78ce6c569558f7f6bcb132cd3ed4b9e33f85a9fc74ebf5bb7564213ac21e7b84ade52289db99cbffa025509965b077041601c62398dfd72d2c5f6b65159ee7a9334a14527216938bfbc"}, {0x4}, {0x40, 0x0, "f00c405b28f5bfe37899f178be71a3147dd2c2356416761b9f80b4a1219b3d502442bbcb1a111c0bbe5742001ba5f786adbad89edbe4df906668ede2"}, {0x7e, 0x0, "c2a28a2ed69751770c5c7a1dc223fc3df10db8c7c2b63a43edbfcb0c91dbd7d2ee3a2aa64735aba241d20ad60c3c7af1f3e05345d848d3ad8f4676d9ad085909f6fa0dd0cfff8a9881d2e59cdd9849921fe6ed08ed449dc78e003ea0c95c970e2826b5b478a2f2827b680680d560b6e8f3c5c4c7f16e8323966a"}, {0xac, 0x0, "1fd277fc22dfbfb11e8d1712b9408d3d4976baffadd271c73a9beea9c791f7afc62989b2200b6469f6eeccc674d6d09995328695545b83cc35f9e72f62878c6c6c4d8990fb902305209c5154a4c37f9c4bc3858e030625b8379211a5cba25e33a0e1e432fff5fd9f80a725fc10757b16b09464794e4114235ea8cd94e548892da5b4bb120107fba6a1eeb7fb23d87c0094786197a2b204058ff7d06e32f7f5f480e357cfaf3aa8a9"}, {0x9f, 0x0, "3c88c3ca8fd3d0fcc7e30c2480ae0739a094865f120e0afe1daec6303adb2317fd38feb929ae1fcef88fcb472f6c681039304ea7ed696eaeac7800c20e79f37d1170c050612ee16e5f94ffee2c6bcb4564a82a10d4a53e616e65af15a973f48b18944cdadef34f1cb4ede2341b327e77d382edf61b6b2c0d96ed3271d2b8100f52b03a0882117efbf12b13e1774eab8e47c0034c6aa18eeaabc685"}, {0xc0, 0x0, "494df5c1fccdf55c0fbcf6f36b3b854dfe6246eb0b1e3de4461ad1da1e4a5c841ecafcec3da1df3454fe94fb8718675c2cd8b5a4ae07373e44f7667c4d2360c9878eb14f0eed7ace7887253eb14455a6a2156c0dd5d4898d62967c9f81708fdfd60b73c64219bbe52555482a49faac2cd88cad06855aede119d3a1646681caad3026424038b1e9efdeae152e1e1ce91bc6dbb3c15cb4ddf6664906d7a4aa8a2b34356d40b5a5313064e7bbed81d9868558e942ae8b8cd428a30a3641"}, {0x85, 0x0, "de9a1ef128ea17aa41133f5c1f4da193719e42d5ecc41e1b3f85630601cf5c101c140ddc0973195134b4c0721059da6ceabe632e38c6f69ee3ae8f497dcf80effda9f7112f6980582fe91b2d0c3c8f73f16cc839f8efd41bc0db840b7ef4c6db3cacbca50acb0f560d556cc8c811ee7bcd912576efc1eb98bdf483c74e8d3d2cc6"}]}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "637c85e856f3"}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x8}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x2a0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1fc, 0xe, 0x0, 0x1, [{0xd, 0x0, "ac54ab7518b0e3c5d5"}, {0x25, 0x0, "a8ef3d426bffa82ef63d314a31fb6612365eccf7fb4ab2f0eb844f03e6193fc197"}, {0xf8, 0x0, "5790fa6bd9fea812dc812129b6519784546bd90e7c14781275c30d1bb3d2825b899b0cb02eb7efc970e26c083ead2cfb2608c570724d1b7f374ada922bc8f1f4bbbcade787b5d06f11088d5ec402764bb8209251f6c33a668d6b4a2c3b20910fa6258b9dd2dafa15c333291a0e7d9c5091d8e60844938f22985424bfcc4bbc8814a3c1fdf4f7b689f5c848c832c827d11762fc897e2725d8d7649eb6d61337f5ebb217ac9f6cd173ddd4fd2f13d88ab92e075947d382132139ce354cb5f7cccefbf8c6e87114fe1553e77b6c296c4ed0481eaa84f4ec590eac5afc3af6e9f58aa96caf77c15d09b7a137f95d93ec49a23eed255c"}, {0xc8, 0x0, "eea0e8aedae575192b7810c300483cc0e2d604d54500ad81b926770b5b6e38f2b38c94eff96b536a7ac02138c50e243e4e50bb21382c6f3da26eae149439b976a109ae48765e15eb04b6da9f9069049afe258e54887cceea2106b3bf2b5f5a9a463efb9f7aa8a77b1d084d3f779dc0ebe6548ddac6ac6538492fc2df94103ced4512c338ffa586673b1af947a0b3dcc32cc6c302a13780a630e34761fbf885e605e55dd60fd19bea6996b149f0387fb2434e5d19044cfdec8996c53be9eaa1f3ccd2a626"}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0x93, 0xb, "50b1acbfa114eeefbba316b8a26c7d92f3db2e242829cf771adf9f2cfff0bdb46afc28288d606dd9b675422aa3fa89ac96f5cdfd6746be30a53500fe52bc1dfbf3791ae19be78879ce800ba920d353063054e620373468a9d83d33d4f386bc83ab6930bd38e89b6e83044d409611880a1945e63d8dfd8c38d59e34dfa0f8468fa0ccad00d5a544c11106d68906de86"}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xa0}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x4}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x3e8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x3d0, 0xd, 0x0, 0x1, [{0x69, 0x0, "fbcc8e2cac8c466320ea269ebff28bf396f23d53186afc326a098e7364aa5f4d5a8abb7cbb8c748356c5ebfd70897eaa14f2227727699f36feadd41de6e024c27598cc208f7bd6f22227a5d66b8cecd176045f6514ad99230788bc23f756f051a08f7ddc28"}, {0x90, 0x0, "cf9adefea19762c4698deeca10cbfc896bf3fd113fd0775fad8f47d2d5d03f34c1ae669792b35774c747f31b34d1685a18d0524aa48338f1f6e8b7c9e0e0ca2f06666ab322de2517f0b3c402f41a40ac503f44d079472f76c3c490991f66d7548e6d95aeaf8abada3c7ee64c0726c26a8b9c379bdbbb25fd8d855d983c20a02fef69505feeb88a6978d37664"}, {0x64, 0x0, "d3b423418ccc60d86ff20ef2b388d322280796c7cf7be6d145074c1db067bbe94c2c137a07c281144407d7955c8d0450cd6f042407f4d6a7c3cafa04124442ac408b4a502b0f4c3b523a07fdb072ebf3e7e01ee0ca49ddd4e61ad61c8acfe653"}, {0x27, 0x0, "521c3442ad76a891a8ed8ea180ce66c2ec8bf8138e719b5f9648d01ef8f703ed954f4e"}, {0xfe, 0x0, "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"}, {0xf9, 0x0, "f225814640a876a217dfb8c67668f25fb2a8410d3b1ebee7acdf90d27560a99df58cc5c84d0d3c4dfc86cd609f2d82839f4f80678193e9cdbaaa1bf4b9cd0fbf1c211a61362e956284bffe2848e5678a87291c28775fe55b06099af5bd94ec1df64f1bffd6079b2f8e9d2182d902d38b08686fe7a4f678ef3b768a4be82a59c41eefd270cb60c41720742c427cba5fa32e01da60f36edaf8e0ef253025512f512cd6e2c216d1ad3895631e00a3a8520b9433e4ca244abda2b1f368a6c43961d9df0387d3101fb074c58d7ddba238939e8d56859befd1897875d439808244a3685e2e54ba4dd7ff21ffc3671d11cc9011a1f75e42b1"}, {0x48, 0x0, "2ad4772442063617eb04d0f771e81097f46bd2aea4143a35d1c1d28bf9a1b1631b0a017d65a3d29e9b29ee5aff883089b377ed4c7c346cdcdf3162bb3b609f19bb100d16"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x8}]}]}, 0xb80}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1m0.181627967s ago: executing program 1 (id=1194): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0x74}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xc6, &(0x7f0000000080)=""/198, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 48.667255918s ago: executing program 3 (id=1668): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x24}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e000000000000000380000007000000030000ca75ffffff00000000000000002e"], &(0x7f0000000040)=""/235, 0x46, 0xeb, 0x6, 0x0, 0x0, @void, @value}, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="02"], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@getneightbl={0x14, 0x42, 0x800, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8c0}, 0x8000) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x4}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d00000000000000000000000105000000030000000000000000000003000000000100000002"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@IFAL_LABEL={0x8, 0x2, 0x7}]}, 0x24}}, 0x0) r8 = socket$inet(0xa, 0x801, 0x84) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x2e, &(0x7f0000000180)=0x20000006, 0x4) shutdown(r9, 0x0) connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @multicast2}, 0x10) listen(r8, 0x5) r10 = accept4(r8, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r10, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xb, 0x8, 0xfff, 0xfffffffa, 0x6}, &(0x7f0000000080)=0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x70bd28}, 0x1c}}, 0x0) 48.500656148s ago: executing program 3 (id=1669): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000140), r1) r3 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f00000013c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000000240)={0x1118, r4, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe45}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffb7d3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x181}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_NODE={0x105c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "615cf31465101a244bb3e7a184b6e039ffdefd9a0795cd32"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8f0}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe}]}]}]}, 0x1118}, 0x1, 0x0, 0x0, 0x40010}, 0x4004000) getsockopt$inet6_mreq(r3, 0x29, 0x0, &(0x7f0000001440)={@remote, 0x0}, &(0x7f0000001480)=0x14) sendmsg$nl_route(r3, &(0x7f0000001540)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)=@bridge_getlink={0x20, 0x12, 0x2, 0x70bd2a, 0x25dfdbfe, {0x7, 0x0, 0x0, r5, 0x20004}}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000015c0), r3) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x24, r6, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004800) pwrite64(r3, &(0x7f00000016c0)="fef0d2d6858fa03d21348343ee7806f542f70510b70f6f5ca74f5437521ebb679be92eb4596b75ca76b79305dc1447059313c75f0edcd35f14df6f1847ac3a2624a15f526d388c39bbd576e307483e30663557b96cfbd891a6d112defbefbc7525c750df145f4773bb3cea7894c7de52729c2b85d9f97377823f418fd358b07f6ab18ad2998793c49b196b0d7698803c22e3026d84aa34a1c992ffa144679a8e2c7da3107188d274074f8334d01fe680fb9bbc43a7329fd4b025a56237", 0xbd, 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000001780)=0x1, 0x4) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x14, r2, 0x400, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000019c0)={'erspan0\x00', &(0x7f00000018c0)={'tunl0\x00', r5, 0x80, 0x8, 0x4, 0x1000, {{0x2d, 0x4, 0x1, 0x6, 0xb4, 0x66, 0x0, 0x8, 0x2f, 0x0, @multicast1, @loopback, {[@timestamp_prespec={0x44, 0x1c, 0x6c, 0x3, 0x8, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0xbb5}, {@rand_addr=0x64010102, 0x5}]}, @timestamp_prespec={0x44, 0x34, 0x84, 0x3, 0xa, [{@broadcast, 0x7f}, {@broadcast, 0x2}, {@private=0xa010101, 0x8}, {@private=0xa010100, 0x8}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x7}, {@private=0xa010101, 0xffffff6d}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0x4d, [@private=0xa010101, @empty]}, @cipso={0x86, 0x9, 0x0, [{0x6, 0x3, ','}]}, @ra={0x94, 0x4, 0x1}, @noop, @lsrr={0x83, 0x7, 0xa1, [@empty]}, @ssrr={0x89, 0xb, 0x23, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x1f, 0x90, [@multicast1, @local, @multicast1, @broadcast, @empty, @multicast1, @loopback]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000001a00)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x1d, r8}, 0x10, &(0x7f0000001b00)={&(0x7f0000001a80)={0x4, 0x80, 0x7, {0x0, 0xea60}, {0x77359400}, {0x4, 0x1, 0x1, 0x1}, 0x1, @can={{0x3, 0x0, 0x1}, 0x5, 0x3, 0x0, 0x0, "ec23ee1ce58d6b2e"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001bc0), r1) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x14, r9, 0xc04, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x24000810) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000001d80)={'syztnl0\x00', &(0x7f0000001d00)={'syztnl2\x00', r7, 0x4, 0x9, 0x9, 0x1ff, 0x8, @mcast2, @empty, 0x8000, 0x40, 0xd2, 0x7fffffff}}) sendmsg$nl_route(r3, &(0x7f0000001ec0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001e80)={&(0x7f0000001dc0)=@bridge_dellink={0xa0, 0x11, 0x300, 0x70bd2b, 0x25dfdbfe, {0x7, 0x0, 0x0, r10, 0x1a008, 0x8}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x8}, @IFLA_PHYS_PORT_ID={0x20, 0x22, "b7b1e1d0ca045f5a08ea8e1a65e459a5a8606a4686af4782f9e795f5"}, @IFLA_EXT_MASK={0x8, 0x1d, 0x4}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xcc62}, @IFLA_PROMISCUITY={0x8}, @IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'nicvf0\x00'}, {0x14, 0x35, 'batadv_slave_0\x00'}, {0x14, 0x35, 'ip6_vti0\x00'}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40040}, 0x24000060) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000001f00), r11) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000001f40)={0x1, 0xa}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x44080}, 0x4000000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000002080), r1) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000020c0), r12) 48.283044524s ago: executing program 3 (id=1670): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x0, 0x93, &(0x7f0000000100)=[{}], 0x8, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x28, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000240)={@map, 0xffffffffffffffff, 0x24, 0x0, 0xffffffffffffffff, @void, @value}, 0x20) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 45.764727052s ago: executing program 2 (id=495): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x90d, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xfd}]}, 0x24}, 0x1, 0x0, 0x0, 0xc050}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000800)={0xb80, r3, 0x0, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x4c0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xd}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x2}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x490, 0xe, 0x0, 0x1, [{0x74, 0x0, "c990e7286407a5476e54e0d8606f21be8226020653ea7552e52ce3361e070139622c16c610874e0e41ca8551b6fe9ef418842e6e3e80c412b8d932d184a665c2f672e5f359159dd1d030f7e8f2bde595d2219cd778de6c342fca884ae5211a29abd8d57d5d8c4bdda1238bf65f20b725"}, {0xc0, 0x0, "97eb962b9d52b65e5a4987c1a48bbb2447ebf33e71a663b95305bbb8aa1c5cfca9ef633fe3d3ca59ebb1799da774419186dd89d68ec39532bf21d720920d2383fca466641a415fb8d2f4720de91bc0a9971d21658b1f4258bce7f449d120af78815fdec7d2e933b3d56e0754566a02f621b9d78ce6c569558f7f6bcb132cd3ed4b9e33f85a9fc74ebf5bb7564213ac21e7b84ade52289db99cbffa025509965b077041601c62398dfd72d2c5f6b65159ee7a9334a14527216938bfbc"}, {0x4}, {0x40, 0x0, "f00c405b28f5bfe37899f178be71a3147dd2c2356416761b9f80b4a1219b3d502442bbcb1a111c0bbe5742001ba5f786adbad89edbe4df906668ede2"}, {0x7e, 0x0, "c2a28a2ed69751770c5c7a1dc223fc3df10db8c7c2b63a43edbfcb0c91dbd7d2ee3a2aa64735aba241d20ad60c3c7af1f3e05345d848d3ad8f4676d9ad085909f6fa0dd0cfff8a9881d2e59cdd9849921fe6ed08ed449dc78e003ea0c95c970e2826b5b478a2f2827b680680d560b6e8f3c5c4c7f16e8323966a"}, {0xac, 0x0, "1fd277fc22dfbfb11e8d1712b9408d3d4976baffadd271c73a9beea9c791f7afc62989b2200b6469f6eeccc674d6d09995328695545b83cc35f9e72f62878c6c6c4d8990fb902305209c5154a4c37f9c4bc3858e030625b8379211a5cba25e33a0e1e432fff5fd9f80a725fc10757b16b09464794e4114235ea8cd94e548892da5b4bb120107fba6a1eeb7fb23d87c0094786197a2b204058ff7d06e32f7f5f480e357cfaf3aa8a9"}, {0x9f, 0x0, "3c88c3ca8fd3d0fcc7e30c2480ae0739a094865f120e0afe1daec6303adb2317fd38feb929ae1fcef88fcb472f6c681039304ea7ed696eaeac7800c20e79f37d1170c050612ee16e5f94ffee2c6bcb4564a82a10d4a53e616e65af15a973f48b18944cdadef34f1cb4ede2341b327e77d382edf61b6b2c0d96ed3271d2b8100f52b03a0882117efbf12b13e1774eab8e47c0034c6aa18eeaabc685"}, {0xc0, 0x0, "494df5c1fccdf55c0fbcf6f36b3b854dfe6246eb0b1e3de4461ad1da1e4a5c841ecafcec3da1df3454fe94fb8718675c2cd8b5a4ae07373e44f7667c4d2360c9878eb14f0eed7ace7887253eb14455a6a2156c0dd5d4898d62967c9f81708fdfd60b73c64219bbe52555482a49faac2cd88cad06855aede119d3a1646681caad3026424038b1e9efdeae152e1e1ce91bc6dbb3c15cb4ddf6664906d7a4aa8a2b34356d40b5a5313064e7bbed81d9868558e942ae8b8cd428a30a3641"}, {0x85, 0x0, "de9a1ef128ea17aa41133f5c1f4da193719e42d5ecc41e1b3f85630601cf5c101c140ddc0973195134b4c0721059da6ceabe632e38c6f69ee3ae8f497dcf80effda9f7112f6980582fe91b2d0c3c8f73f16cc839f8efd41bc0db840b7ef4c6db3cacbca50acb0f560d556cc8c811ee7bcd912576efc1eb98bdf483c74e8d3d2cc6"}]}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "637c85e856f3"}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x8}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x2a0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1fc, 0xe, 0x0, 0x1, [{0xd, 0x0, "ac54ab7518b0e3c5d5"}, {0x25, 0x0, "a8ef3d426bffa82ef63d314a31fb6612365eccf7fb4ab2f0eb844f03e6193fc197"}, {0xf8, 0x0, "5790fa6bd9fea812dc812129b6519784546bd90e7c14781275c30d1bb3d2825b899b0cb02eb7efc970e26c083ead2cfb2608c570724d1b7f374ada922bc8f1f4bbbcade787b5d06f11088d5ec402764bb8209251f6c33a668d6b4a2c3b20910fa6258b9dd2dafa15c333291a0e7d9c5091d8e60844938f22985424bfcc4bbc8814a3c1fdf4f7b689f5c848c832c827d11762fc897e2725d8d7649eb6d61337f5ebb217ac9f6cd173ddd4fd2f13d88ab92e075947d382132139ce354cb5f7cccefbf8c6e87114fe1553e77b6c296c4ed0481eaa84f4ec590eac5afc3af6e9f58aa96caf77c15d09b7a137f95d93ec49a23eed255c"}, {0xc8, 0x0, "eea0e8aedae575192b7810c300483cc0e2d604d54500ad81b926770b5b6e38f2b38c94eff96b536a7ac02138c50e243e4e50bb21382c6f3da26eae149439b976a109ae48765e15eb04b6da9f9069049afe258e54887cceea2106b3bf2b5f5a9a463efb9f7aa8a77b1d084d3f779dc0ebe6548ddac6ac6538492fc2df94103ced4512c338ffa586673b1af947a0b3dcc32cc6c302a13780a630e34761fbf885e605e55dd60fd19bea6996b149f0387fb2434e5d19044cfdec8996c53be9eaa1f3ccd2a626"}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0x93, 0xb, "50b1acbfa114eeefbba316b8a26c7d92f3db2e242829cf771adf9f2cfff0bdb46afc28288d606dd9b675422aa3fa89ac96f5cdfd6746be30a53500fe52bc1dfbf3791ae19be78879ce800ba920d353063054e620373468a9d83d33d4f386bc83ab6930bd38e89b6e83044d409611880a1945e63d8dfd8c38d59e34dfa0f8468fa0ccad00d5a544c11106d68906de86"}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xa0}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x4}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x3e8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x3d0, 0xd, 0x0, 0x1, [{0x69, 0x0, "fbcc8e2cac8c466320ea269ebff28bf396f23d53186afc326a098e7364aa5f4d5a8abb7cbb8c748356c5ebfd70897eaa14f2227727699f36feadd41de6e024c27598cc208f7bd6f22227a5d66b8cecd176045f6514ad99230788bc23f756f051a08f7ddc28"}, {0x90, 0x0, "cf9adefea19762c4698deeca10cbfc896bf3fd113fd0775fad8f47d2d5d03f34c1ae669792b35774c747f31b34d1685a18d0524aa48338f1f6e8b7c9e0e0ca2f06666ab322de2517f0b3c402f41a40ac503f44d079472f76c3c490991f66d7548e6d95aeaf8abada3c7ee64c0726c26a8b9c379bdbbb25fd8d855d983c20a02fef69505feeb88a6978d37664"}, {0x64, 0x0, "d3b423418ccc60d86ff20ef2b388d322280796c7cf7be6d145074c1db067bbe94c2c137a07c281144407d7955c8d0450cd6f042407f4d6a7c3cafa04124442ac408b4a502b0f4c3b523a07fdb072ebf3e7e01ee0ca49ddd4e61ad61c8acfe653"}, {0x27, 0x0, "521c3442ad76a891a8ed8ea180ce66c2ec8bf8138e719b5f9648d01ef8f703ed954f4e"}, {0xfe, 0x0, "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"}, {0xf9, 0x0, "f225814640a876a217dfb8c67668f25fb2a8410d3b1ebee7acdf90d27560a99df58cc5c84d0d3c4dfc86cd609f2d82839f4f80678193e9cdbaaa1bf4b9cd0fbf1c211a61362e956284bffe2848e5678a87291c28775fe55b06099af5bd94ec1df64f1bffd6079b2f8e9d2182d902d38b08686fe7a4f678ef3b768a4be82a59c41eefd270cb60c41720742c427cba5fa32e01da60f36edaf8e0ef253025512f512cd6e2c216d1ad3895631e00a3a8520b9433e4ca244abda2b1f368a6c43961d9df0387d3101fb074c58d7ddba238939e8d56859befd1897875d439808244a3685e2e54ba4dd7ff21ffc3671d11cc9011a1f75e42b1"}, {0x48, 0x0, "2ad4772442063617eb04d0f771e81097f46bd2aea4143a35d1c1d28bf9a1b1631b0a017d65a3d29e9b29ee5aff883089b377ed4c7c346cdcdf3162bb3b609f19bb100d16"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x8}]}]}, 0xb80}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 44.897171509s ago: executing program 1 (id=1194): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0x74}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xc6, &(0x7f0000000080)=""/198, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 30.96300498s ago: executing program 3 (id=1670): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x0, 0x93, &(0x7f0000000100)=[{}], 0x8, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x28, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000240)={@map, 0xffffffffffffffff, 0x24, 0x0, 0xffffffffffffffff, @void, @value}, 0x20) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="b601000000000000bd110000000000008510000002000000850000007600000095000000000000009500a5050000000077d8f3b4000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d75357f21699cdc6751dfb265a0e3ccae669e173a649c1cfd6587d472d64e7cc955d77578f4c35235138d5421f9453559c35da860e8ef14142b2a3e314422b854421eed734ceb1efeecb9c66854c3b3ffe1b4ce25d7c983c005c03bf3a48dfe3e26e7a23129d6606fd28a697a9d552af6d9a9df2c3af333e2008e11bbec0727cb3f647535deb6277f5696833a71011a7d06602e2fd5234712596b696418f163d1a13ed38a682f87925bfa753f631cd027edd68149ee99eebc6f7d6dd4ae59af7588c8e1f4efab57644ccb1973d7879b70a70001040000000000000000d7900a820b63278f4e9a217b98ef7042ad2a923132f208fd8289eaf8cd00000000000009d27d753a300800000000000000a5686f2fccc33e3e34c3969c5ad781302d40e97a8ad10ce0cbe17366d5ac6af2fca2360a15b80400d52040ef7b28d300747877e176fe4c4b8e40dbf260f5a9f7eee30293c1b163b795d0aef4deb851a30000f569dc8f39943f889008e1ec914faa9e6cd0b3b4b3b5db666ebeb49d6a62019d76459e70b459543c4ac42e53b4ad4c77cff373ebd95848f01864e456969cd28000170996016aceb583df5ee4dd722e8c350af489f9a900000000a0dcc36b3d7c734a9cce0439f832a20d7cbdcda5dff3ba92dd66afb9d74aa222038994dcd3e7784dbea1e51a15b0f1a040cc63177f8fafa3192fc8e5552da1a982ab8dfe31ad1a0968faa47c2069d6bf09c3aa4f0fc128cb578d99b08a150b4cc4b22f6a464c6398c952519818a44a1b223ff502df87865c276588ea478e328e8277e811b99ce1acfecaf8e2c55ccc4b8eae0a61635514e99ffd438784060f23ba74c0b30b1180d935832deb686d789ba1d436d116394534e88492a42b8bf050c719661a2dc50b3a1dcfbc871e5c27e3d7260f6fa589e40000b89db451ff994845f6b49c12e89291398bcb3c06ef1289f74e0b0e2cab592d35f82a69e7284223a171c616b1f0fee6c4711d7aecb69746064d2c096554975d605ebe646302bf3d5cf32a9a09915ae3f3d4eb96615d7b237da56cd5e9904a19e145f25b6d98eb2c019967f553b61d0e80d6913cee9f8d18469a654a239a84a85debbc02846ac5791278f18c6759e3b513a68284d2efc30587e433431b2896a3bd48020af67e9ac071b2dd6dc3b9efae4ff03558fa619aea909c7f2416e7e7da1c51ccc7e6ac27412f728dc6d80da8adf317ca863ed683897321f8c8bb5a5d953d6783b7a06353ee496bbdff418de3e53234df87756eb99e330253cf5da4aa1a9648a38f07e2d302b4165983db4f7b8972923fffa8c03c288512a3a38fbd7c816a44634f7a03fab30811b7b93257bea4369ba46024dee5e9b0b2c3d3324e9b7c1f99ab9bb3f498b1485373b79ec84a67dad4e37575dab87ce55a9a69ed856a4c4410d1242ac1bd1539094a641cc086c2c53e363beafc74ab4e9ff320373705cbf5644586ffe60d293944fa2d9dc18b55f1af5c42f27747bef1ffd0c1766f062d47d61bf9f64e6ee288fa7fc12d48da526527b9f5c318c93ec447cb8b5eee7aa8a1e85696af3dfef96657c0545c8ebd96528d9c28828e5befd80d684b03b6d153da3e3cbd3bfbf4a9375b8ad04a1d241bcb5d5505cb6cc7a44e2e24bd0b1ca4879caaff59d0ce39dc7f3fea447f4e46967855208e63ec988bd2692afefbed2b001205e4b30ee8fe417defa566a73ace8f01f7181de0ef25f1744896a3c38859e6148c42454949cd64b1a888e7fe9c2d86bb01023b6ddeb67f5eb038af3e460c771518a4126c338b0390d459361e03adf6e6b558b3651a0e33d101b5febfff82794203da18db6fcf89715c2d338f78d8b9220171b41f528f857a7cb79ca990de1208777e13faaa9b9cb9e67797b07d9eb9e909410b50c5d981d9a72aa36498b630519d1530ef0000000000000000000037fcffffffffffffff8db8379bd2044c652dff399a9f8bfa4e9c507f049d18837464276830461ee203ba51f6102d262fc9a26bc3638ecce24e65c55da6efaa462f03d0e119c963a8c7a522b59f5a7b44d018cb2648383073d9e032492cae44350bc0a85697f431392eb22cae093e85954af97d6d7b2e6e8f43353062275ad1578a431594243452a2bfb89f91d8eaac038e9e17136e7c698f73faaabb3d00000000000080014573789425c4c32da528d89356aa6d2ae6da082e756c80cf39053431080ea6cbf9997a5a0ddad0b9d12bc3f880476ab32f0feaac5f16e61f7b72b8c9082eec423c6b3eaecfdcc9ec72795e7696421c83b76c2d6bac19bc875d009679778d8ef97d7e05329649d97b0dc54bea9b650873de2d3d702690176e0b23ee5cb5e469a8d1612d611722e6200e3a297d92f8e1de98326c5ef2b89d4e2d47767cd755783e5d865e373338e96ceb8399f296c59b2d70ca27735ecaff62982616d3ac1ab041733bce119d8002a6c8a2b08b32551b2313b1a2ff41b3f04af61c69c85cb2da48215727271bac2ffdeb62d9f5dc4845f1c3f63dc806e615ee8d28d6d7f181e30807afa27f41d0364c746a65a47464db68f3c433d88dd625db35fded2c86d75af88efaf20c8b37c644b6c4e773a9589200faa553bc92f916b75ddbfa18ab73979f46947b35914286d2499a0b8c970000000000000000f4fe74e0c26ab52329bd600627b256ca44dd121ffc8dbb6e5f70cbe03efccac70375b30cc927574d254d1b46c607e8b1ca7d1511568c3ef4b6b885f4582bdcef74e5e010627fc8e4fe00000000000000000000869d9640f06b11df2971909b90133983308ea4f033de613763f32d913bcbe9dd082a6fff197a20730269e6cfd31275395833f1c2b8a50a94c30cceae2a11fe9b9b835d0da73891c0b3ce22dea6bf31e7f51808cf72f44b4455b77a778440795e152dc1b7bb0a5636aa4742ce4d331a47de5836539cdf289176527277b70c8162aaf6f9475418b478329f3565450acfaf07000000eab8cabfa97e35081967bb92a264b07e8003d2f15537e72a1e4ca5ec1e2aaaf8236ecdefbaf512c75e636b6b6f518ad20521f909b12e9bc97e408e0dc82f950d12705f35708bc862196abb27e8d7991b5273987f38c4706289ff4f6130cee76465d487a07a74452f87da2029bd3debd9870335d58d3fe1ac80574fa3ea312997ab81bc6f569ffdb10ba3f20a86d95128d13e0c778998d3b3114bfb07bd61e4bff8a5e2ce4aa572c63e09b44ca4a181bcfe4eec3ce843c65c4948169fe639a186acc2b4a96c6b8d4d2e6d53ab97bea01eab953e6e89e3af34d4ada217bc6fda0fb2095c49195d0d6f365ca80a955b9ec81240a84ef672afa369fc8e3d444ba35d0f51a0065a3b982d09dfc6874fc0d8079b185447cb8a695e132d4d613a529d9c77e2a8f7320ecf698e8a2b170fd601dc1a9767a38b10788e92d1356f6a6c1bcfb2d31b46e735db13f1be80bac1b6be04fd98610000000000000000000000000000139af5493f74751c5e2501a4936bc4a0fa516117f4ccadc692003adee0a080eba2f1059660c0ee0e9aec72d4d0fe095632e4f641b0e34c611c5b3e0ba05fa36542d40837dda323910672a9097d68398fd3539686e4288db0d6bf7cb8a1835f46dfe11865a66ef47e736dada06677a5bca133d6cbc8fe5c4557e51b006bdccd7c5f32ff1d9e8b130f77df09236870fb3de5b87b4f8acc13df534eba329b86670000000000000000b27a2616c03cdf6c009447a652bca9b325e73c0737d5b717945e4fe7a169c5e2c54fc71a4104aa7cf0f5d30e2fcd9503650edbd8a5971a9a1fde5e5df37469ae204a6e899eacc1e63034cbabc5604739881cb82604bed3e53696a0606b26b879ef232a1a038291389593d1575cb79aa8284cf01a7e1a456acab9d8d608ad69d4c4b56492af7004e7ed9d47c5db3d76a00bea7c804f3a3638408bc1636f1009b7f185f51606918eaa0ab6bef11ae3d300"], &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 29.796624343s ago: executing program 2 (id=495): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x90d, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xfd}]}, 0x24}, 0x1, 0x0, 0x0, 0xc050}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000800)={0xb80, r3, 0x0, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x4c0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xd}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x2}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x490, 0xe, 0x0, 0x1, [{0x74, 0x0, "c990e7286407a5476e54e0d8606f21be8226020653ea7552e52ce3361e070139622c16c610874e0e41ca8551b6fe9ef418842e6e3e80c412b8d932d184a665c2f672e5f359159dd1d030f7e8f2bde595d2219cd778de6c342fca884ae5211a29abd8d57d5d8c4bdda1238bf65f20b725"}, {0xc0, 0x0, "97eb962b9d52b65e5a4987c1a48bbb2447ebf33e71a663b95305bbb8aa1c5cfca9ef633fe3d3ca59ebb1799da774419186dd89d68ec39532bf21d720920d2383fca466641a415fb8d2f4720de91bc0a9971d21658b1f4258bce7f449d120af78815fdec7d2e933b3d56e0754566a02f621b9d78ce6c569558f7f6bcb132cd3ed4b9e33f85a9fc74ebf5bb7564213ac21e7b84ade52289db99cbffa025509965b077041601c62398dfd72d2c5f6b65159ee7a9334a14527216938bfbc"}, {0x4}, {0x40, 0x0, "f00c405b28f5bfe37899f178be71a3147dd2c2356416761b9f80b4a1219b3d502442bbcb1a111c0bbe5742001ba5f786adbad89edbe4df906668ede2"}, {0x7e, 0x0, "c2a28a2ed69751770c5c7a1dc223fc3df10db8c7c2b63a43edbfcb0c91dbd7d2ee3a2aa64735aba241d20ad60c3c7af1f3e05345d848d3ad8f4676d9ad085909f6fa0dd0cfff8a9881d2e59cdd9849921fe6ed08ed449dc78e003ea0c95c970e2826b5b478a2f2827b680680d560b6e8f3c5c4c7f16e8323966a"}, {0xac, 0x0, "1fd277fc22dfbfb11e8d1712b9408d3d4976baffadd271c73a9beea9c791f7afc62989b2200b6469f6eeccc674d6d09995328695545b83cc35f9e72f62878c6c6c4d8990fb902305209c5154a4c37f9c4bc3858e030625b8379211a5cba25e33a0e1e432fff5fd9f80a725fc10757b16b09464794e4114235ea8cd94e548892da5b4bb120107fba6a1eeb7fb23d87c0094786197a2b204058ff7d06e32f7f5f480e357cfaf3aa8a9"}, {0x9f, 0x0, "3c88c3ca8fd3d0fcc7e30c2480ae0739a094865f120e0afe1daec6303adb2317fd38feb929ae1fcef88fcb472f6c681039304ea7ed696eaeac7800c20e79f37d1170c050612ee16e5f94ffee2c6bcb4564a82a10d4a53e616e65af15a973f48b18944cdadef34f1cb4ede2341b327e77d382edf61b6b2c0d96ed3271d2b8100f52b03a0882117efbf12b13e1774eab8e47c0034c6aa18eeaabc685"}, {0xc0, 0x0, "494df5c1fccdf55c0fbcf6f36b3b854dfe6246eb0b1e3de4461ad1da1e4a5c841ecafcec3da1df3454fe94fb8718675c2cd8b5a4ae07373e44f7667c4d2360c9878eb14f0eed7ace7887253eb14455a6a2156c0dd5d4898d62967c9f81708fdfd60b73c64219bbe52555482a49faac2cd88cad06855aede119d3a1646681caad3026424038b1e9efdeae152e1e1ce91bc6dbb3c15cb4ddf6664906d7a4aa8a2b34356d40b5a5313064e7bbed81d9868558e942ae8b8cd428a30a3641"}, {0x85, 0x0, "de9a1ef128ea17aa41133f5c1f4da193719e42d5ecc41e1b3f85630601cf5c101c140ddc0973195134b4c0721059da6ceabe632e38c6f69ee3ae8f497dcf80effda9f7112f6980582fe91b2d0c3c8f73f16cc839f8efd41bc0db840b7ef4c6db3cacbca50acb0f560d556cc8c811ee7bcd912576efc1eb98bdf483c74e8d3d2cc6"}]}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "637c85e856f3"}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x8}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x2a0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1fc, 0xe, 0x0, 0x1, [{0xd, 0x0, "ac54ab7518b0e3c5d5"}, {0x25, 0x0, "a8ef3d426bffa82ef63d314a31fb6612365eccf7fb4ab2f0eb844f03e6193fc197"}, {0xf8, 0x0, "5790fa6bd9fea812dc812129b6519784546bd90e7c14781275c30d1bb3d2825b899b0cb02eb7efc970e26c083ead2cfb2608c570724d1b7f374ada922bc8f1f4bbbcade787b5d06f11088d5ec402764bb8209251f6c33a668d6b4a2c3b20910fa6258b9dd2dafa15c333291a0e7d9c5091d8e60844938f22985424bfcc4bbc8814a3c1fdf4f7b689f5c848c832c827d11762fc897e2725d8d7649eb6d61337f5ebb217ac9f6cd173ddd4fd2f13d88ab92e075947d382132139ce354cb5f7cccefbf8c6e87114fe1553e77b6c296c4ed0481eaa84f4ec590eac5afc3af6e9f58aa96caf77c15d09b7a137f95d93ec49a23eed255c"}, {0xc8, 0x0, "eea0e8aedae575192b7810c300483cc0e2d604d54500ad81b926770b5b6e38f2b38c94eff96b536a7ac02138c50e243e4e50bb21382c6f3da26eae149439b976a109ae48765e15eb04b6da9f9069049afe258e54887cceea2106b3bf2b5f5a9a463efb9f7aa8a77b1d084d3f779dc0ebe6548ddac6ac6538492fc2df94103ced4512c338ffa586673b1af947a0b3dcc32cc6c302a13780a630e34761fbf885e605e55dd60fd19bea6996b149f0387fb2434e5d19044cfdec8996c53be9eaa1f3ccd2a626"}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0x93, 0xb, "50b1acbfa114eeefbba316b8a26c7d92f3db2e242829cf771adf9f2cfff0bdb46afc28288d606dd9b675422aa3fa89ac96f5cdfd6746be30a53500fe52bc1dfbf3791ae19be78879ce800ba920d353063054e620373468a9d83d33d4f386bc83ab6930bd38e89b6e83044d409611880a1945e63d8dfd8c38d59e34dfa0f8468fa0ccad00d5a544c11106d68906de86"}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xa0}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x4}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x3e8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x3d0, 0xd, 0x0, 0x1, [{0x69, 0x0, "fbcc8e2cac8c466320ea269ebff28bf396f23d53186afc326a098e7364aa5f4d5a8abb7cbb8c748356c5ebfd70897eaa14f2227727699f36feadd41de6e024c27598cc208f7bd6f22227a5d66b8cecd176045f6514ad99230788bc23f756f051a08f7ddc28"}, {0x90, 0x0, "cf9adefea19762c4698deeca10cbfc896bf3fd113fd0775fad8f47d2d5d03f34c1ae669792b35774c747f31b34d1685a18d0524aa48338f1f6e8b7c9e0e0ca2f06666ab322de2517f0b3c402f41a40ac503f44d079472f76c3c490991f66d7548e6d95aeaf8abada3c7ee64c0726c26a8b9c379bdbbb25fd8d855d983c20a02fef69505feeb88a6978d37664"}, {0x64, 0x0, "d3b423418ccc60d86ff20ef2b388d322280796c7cf7be6d145074c1db067bbe94c2c137a07c281144407d7955c8d0450cd6f042407f4d6a7c3cafa04124442ac408b4a502b0f4c3b523a07fdb072ebf3e7e01ee0ca49ddd4e61ad61c8acfe653"}, {0x27, 0x0, "521c3442ad76a891a8ed8ea180ce66c2ec8bf8138e719b5f9648d01ef8f703ed954f4e"}, {0xfe, 0x0, "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"}, {0xf9, 0x0, "f225814640a876a217dfb8c67668f25fb2a8410d3b1ebee7acdf90d27560a99df58cc5c84d0d3c4dfc86cd609f2d82839f4f80678193e9cdbaaa1bf4b9cd0fbf1c211a61362e956284bffe2848e5678a87291c28775fe55b06099af5bd94ec1df64f1bffd6079b2f8e9d2182d902d38b08686fe7a4f678ef3b768a4be82a59c41eefd270cb60c41720742c427cba5fa32e01da60f36edaf8e0ef253025512f512cd6e2c216d1ad3895631e00a3a8520b9433e4ca244abda2b1f368a6c43961d9df0387d3101fb074c58d7ddba238939e8d56859befd1897875d439808244a3685e2e54ba4dd7ff21ffc3671d11cc9011a1f75e42b1"}, {0x48, 0x0, "2ad4772442063617eb04d0f771e81097f46bd2aea4143a35d1c1d28bf9a1b1631b0a017d65a3d29e9b29ee5aff883089b377ed4c7c346cdcdf3162bb3b609f19bb100d16"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x8}]}]}, 0xb80}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 26.865449169s ago: executing program 1 (id=1194): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0x74}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xc6, &(0x7f0000000080)=""/198, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 15.065285671s ago: executing program 3 (id=1670): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x0, 0x93, &(0x7f0000000100)=[{}], 0x8, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x28, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000240)={@map, 0xffffffffffffffff, 0x24, 0x0, 0xffffffffffffffff, @void, @value}, 0x20) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 14.278036805s ago: executing program 2 (id=495): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x90d, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xfd}]}, 0x24}, 0x1, 0x0, 0x0, 0xc050}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000800)={0xb80, r3, 0x0, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x4c0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xd}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x2}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x490, 0xe, 0x0, 0x1, [{0x74, 0x0, "c990e7286407a5476e54e0d8606f21be8226020653ea7552e52ce3361e070139622c16c610874e0e41ca8551b6fe9ef418842e6e3e80c412b8d932d184a665c2f672e5f359159dd1d030f7e8f2bde595d2219cd778de6c342fca884ae5211a29abd8d57d5d8c4bdda1238bf65f20b725"}, {0xc0, 0x0, "97eb962b9d52b65e5a4987c1a48bbb2447ebf33e71a663b95305bbb8aa1c5cfca9ef633fe3d3ca59ebb1799da774419186dd89d68ec39532bf21d720920d2383fca466641a415fb8d2f4720de91bc0a9971d21658b1f4258bce7f449d120af78815fdec7d2e933b3d56e0754566a02f621b9d78ce6c569558f7f6bcb132cd3ed4b9e33f85a9fc74ebf5bb7564213ac21e7b84ade52289db99cbffa025509965b077041601c62398dfd72d2c5f6b65159ee7a9334a14527216938bfbc"}, {0x4}, {0x40, 0x0, "f00c405b28f5bfe37899f178be71a3147dd2c2356416761b9f80b4a1219b3d502442bbcb1a111c0bbe5742001ba5f786adbad89edbe4df906668ede2"}, {0x7e, 0x0, "c2a28a2ed69751770c5c7a1dc223fc3df10db8c7c2b63a43edbfcb0c91dbd7d2ee3a2aa64735aba241d20ad60c3c7af1f3e05345d848d3ad8f4676d9ad085909f6fa0dd0cfff8a9881d2e59cdd9849921fe6ed08ed449dc78e003ea0c95c970e2826b5b478a2f2827b680680d560b6e8f3c5c4c7f16e8323966a"}, {0xac, 0x0, "1fd277fc22dfbfb11e8d1712b9408d3d4976baffadd271c73a9beea9c791f7afc62989b2200b6469f6eeccc674d6d09995328695545b83cc35f9e72f62878c6c6c4d8990fb902305209c5154a4c37f9c4bc3858e030625b8379211a5cba25e33a0e1e432fff5fd9f80a725fc10757b16b09464794e4114235ea8cd94e548892da5b4bb120107fba6a1eeb7fb23d87c0094786197a2b204058ff7d06e32f7f5f480e357cfaf3aa8a9"}, {0x9f, 0x0, "3c88c3ca8fd3d0fcc7e30c2480ae0739a094865f120e0afe1daec6303adb2317fd38feb929ae1fcef88fcb472f6c681039304ea7ed696eaeac7800c20e79f37d1170c050612ee16e5f94ffee2c6bcb4564a82a10d4a53e616e65af15a973f48b18944cdadef34f1cb4ede2341b327e77d382edf61b6b2c0d96ed3271d2b8100f52b03a0882117efbf12b13e1774eab8e47c0034c6aa18eeaabc685"}, {0xc0, 0x0, "494df5c1fccdf55c0fbcf6f36b3b854dfe6246eb0b1e3de4461ad1da1e4a5c841ecafcec3da1df3454fe94fb8718675c2cd8b5a4ae07373e44f7667c4d2360c9878eb14f0eed7ace7887253eb14455a6a2156c0dd5d4898d62967c9f81708fdfd60b73c64219bbe52555482a49faac2cd88cad06855aede119d3a1646681caad3026424038b1e9efdeae152e1e1ce91bc6dbb3c15cb4ddf6664906d7a4aa8a2b34356d40b5a5313064e7bbed81d9868558e942ae8b8cd428a30a3641"}, {0x85, 0x0, "de9a1ef128ea17aa41133f5c1f4da193719e42d5ecc41e1b3f85630601cf5c101c140ddc0973195134b4c0721059da6ceabe632e38c6f69ee3ae8f497dcf80effda9f7112f6980582fe91b2d0c3c8f73f16cc839f8efd41bc0db840b7ef4c6db3cacbca50acb0f560d556cc8c811ee7bcd912576efc1eb98bdf483c74e8d3d2cc6"}]}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "637c85e856f3"}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x8}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x2a0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1fc, 0xe, 0x0, 0x1, [{0xd, 0x0, "ac54ab7518b0e3c5d5"}, {0x25, 0x0, "a8ef3d426bffa82ef63d314a31fb6612365eccf7fb4ab2f0eb844f03e6193fc197"}, {0xf8, 0x0, "5790fa6bd9fea812dc812129b6519784546bd90e7c14781275c30d1bb3d2825b899b0cb02eb7efc970e26c083ead2cfb2608c570724d1b7f374ada922bc8f1f4bbbcade787b5d06f11088d5ec402764bb8209251f6c33a668d6b4a2c3b20910fa6258b9dd2dafa15c333291a0e7d9c5091d8e60844938f22985424bfcc4bbc8814a3c1fdf4f7b689f5c848c832c827d11762fc897e2725d8d7649eb6d61337f5ebb217ac9f6cd173ddd4fd2f13d88ab92e075947d382132139ce354cb5f7cccefbf8c6e87114fe1553e77b6c296c4ed0481eaa84f4ec590eac5afc3af6e9f58aa96caf77c15d09b7a137f95d93ec49a23eed255c"}, {0xc8, 0x0, "eea0e8aedae575192b7810c300483cc0e2d604d54500ad81b926770b5b6e38f2b38c94eff96b536a7ac02138c50e243e4e50bb21382c6f3da26eae149439b976a109ae48765e15eb04b6da9f9069049afe258e54887cceea2106b3bf2b5f5a9a463efb9f7aa8a77b1d084d3f779dc0ebe6548ddac6ac6538492fc2df94103ced4512c338ffa586673b1af947a0b3dcc32cc6c302a13780a630e34761fbf885e605e55dd60fd19bea6996b149f0387fb2434e5d19044cfdec8996c53be9eaa1f3ccd2a626"}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0x93, 0xb, "50b1acbfa114eeefbba316b8a26c7d92f3db2e242829cf771adf9f2cfff0bdb46afc28288d606dd9b675422aa3fa89ac96f5cdfd6746be30a53500fe52bc1dfbf3791ae19be78879ce800ba920d353063054e620373468a9d83d33d4f386bc83ab6930bd38e89b6e83044d409611880a1945e63d8dfd8c38d59e34dfa0f8468fa0ccad00d5a544c11106d68906de86"}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xa0}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x4}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x3e8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x3d0, 0xd, 0x0, 0x1, [{0x69, 0x0, "fbcc8e2cac8c466320ea269ebff28bf396f23d53186afc326a098e7364aa5f4d5a8abb7cbb8c748356c5ebfd70897eaa14f2227727699f36feadd41de6e024c27598cc208f7bd6f22227a5d66b8cecd176045f6514ad99230788bc23f756f051a08f7ddc28"}, {0x90, 0x0, "cf9adefea19762c4698deeca10cbfc896bf3fd113fd0775fad8f47d2d5d03f34c1ae669792b35774c747f31b34d1685a18d0524aa48338f1f6e8b7c9e0e0ca2f06666ab322de2517f0b3c402f41a40ac503f44d079472f76c3c490991f66d7548e6d95aeaf8abada3c7ee64c0726c26a8b9c379bdbbb25fd8d855d983c20a02fef69505feeb88a6978d37664"}, {0x64, 0x0, "d3b423418ccc60d86ff20ef2b388d322280796c7cf7be6d145074c1db067bbe94c2c137a07c281144407d7955c8d0450cd6f042407f4d6a7c3cafa04124442ac408b4a502b0f4c3b523a07fdb072ebf3e7e01ee0ca49ddd4e61ad61c8acfe653"}, {0x27, 0x0, "521c3442ad76a891a8ed8ea180ce66c2ec8bf8138e719b5f9648d01ef8f703ed954f4e"}, {0xfe, 0x0, "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"}, {0xf9, 0x0, "f225814640a876a217dfb8c67668f25fb2a8410d3b1ebee7acdf90d27560a99df58cc5c84d0d3c4dfc86cd609f2d82839f4f80678193e9cdbaaa1bf4b9cd0fbf1c211a61362e956284bffe2848e5678a87291c28775fe55b06099af5bd94ec1df64f1bffd6079b2f8e9d2182d902d38b08686fe7a4f678ef3b768a4be82a59c41eefd270cb60c41720742c427cba5fa32e01da60f36edaf8e0ef253025512f512cd6e2c216d1ad3895631e00a3a8520b9433e4ca244abda2b1f368a6c43961d9df0387d3101fb074c58d7ddba238939e8d56859befd1897875d439808244a3685e2e54ba4dd7ff21ffc3671d11cc9011a1f75e42b1"}, {0x48, 0x0, "2ad4772442063617eb04d0f771e81097f46bd2aea4143a35d1c1d28bf9a1b1631b0a017d65a3d29e9b29ee5aff883089b377ed4c7c346cdcdf3162bb3b609f19bb100d16"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x8}]}]}, 0xb80}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 11.088350624s ago: executing program 1 (id=1194): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0x74}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xc6, &(0x7f0000000080)=""/198, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.087540619s ago: executing program 0 (id=1891): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events.local\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x600000a, 0x8032, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003012000060ec970012301100fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) 1.930534955s ago: executing program 4 (id=1893): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x43eb}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x6}]}, 0x14}], 0x1}, 0x0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x80000000}]}, 0x3c}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x2b, 0x0, 0x0) 1.710910456s ago: executing program 0 (id=1894): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000300)=""/79, 0x4f}], 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast2, @private}, &(0x7f0000000080)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl1\x00', r3, 0x29, 0x53, 0x4, 0x5, 0x21, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0xc000, 0x80000001, 0x100}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newchain={0x6c, 0x64, 0x4, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xffff, 0x2}, {0x4, 0xf}, {0x1, 0xb}}, [@TCA_RATE={0x6, 0x5, {0xf, 0x7f}}, @TCA_RATE={0x6, 0x5, {0x3, 0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}, @TCA_RATE={0x6, 0x5, {0x98, 0x81}}, @TCA_RATE={0x6, 0x5, {0x0, 0x4}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x32}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0xfe}}]}, 0x6c}}, 0x0) (async, rerun: 64) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) (rerun: 64) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r5, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x8010) 1.710558682s ago: executing program 4 (id=1895): mmap(&(0x7f000067a000/0x400000)=nil, 0x400000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1d3000) r0 = socket$packet(0x11, 0x2, 0x300) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x100000000000000, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) 1.536236385s ago: executing program 0 (id=1896): r0 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000008800000088000000050000000700000009000004000000000800000003000000000001000000000005000000800000000e000000050000000e0000000e00000003000000100000000600000021000000010001000000000002000000000200000000000001000000060000001c00000005000000030000000900000002000000cc0000000800000000000001000000001c006b0400515f5f00269a8c5dfc359d0c885c01ebbcbc92f77b9dfcf51333fc18f4c72d"], &(0x7f00000003c0)=""/255, 0xa5, 0xff, 0x0, 0x5, 0x0, @void, @value}, 0x28) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async, rerun: 64) getsockopt$X25_QBITINCL(r3, 0x106, 0x1, 0x0, &(0x7f0000000040)=0xffffffffffffff5f) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xd, 0x4, 0x4, 0x22, 0x70841, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0xfffffffc, 0x0, 0x0, @void, @value, @value=r1}, 0x50) (async, rerun: 64) r5 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x7, 0x4, 0x300, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r6, &(0x7f0000000000), 0x0}, 0x20) connect$vsock_stream(r1, &(0x7f00000004c0)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x14, r9, 0xb05, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, r10, 0x1, 0x70bd27, 0x8, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}}, 0x0) (async) listen(r5, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r4, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r5}, 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r11) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x54, r12, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1\x00'}) 1.255216555s ago: executing program 4 (id=1897): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a0000000400000006000000ff00000042"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000380)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000500000085000000ba000000a70000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000080), 0x619, r0}, 0x38) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x5, 0x7fffffffffffffff}) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000900)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x0, 0x6c}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x0, 0x0, 0x2, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_aead={0x4c, 0x12, {{'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x0, 0x80}}]}, 0x184}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{0x1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)='%+9llu \x00'}, 0x20) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0x0, 0x5, 0x8}, 0xc) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32=0x1, @ANYBLOB="05000000000000000000000000000000000000001215d4195b79713cecbfed04944d54bbbc326c053165eb4cb4b5b839417b027b3e98ac1263cbb8bc775f2f754784f12b76fff8756a0e92e873f7308ac37ebbbddba8a14ef038da5ef2909736e7dc15be5b64ebd87e9c67b79421c3d9352a20ecaff12bc749067e9d45f64b403e5661a0eb084c50d1be4d1a595a39dd9da0df05c337731df669551fff9d2e95902ac24e643d1e96c79ed10175800dc2be7a7eb76e6edaa991b6ed593b89a77eb682c5d1949b827e1c8b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000400"/28], 0x50) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='./file0\x00'}, 0x18) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ff0100000000000028997d25181a0000", @ANYRES32=r0, @ANYBLOB='\x00'/16], &(0x7f0000000040)='GPL\x00', 0x2, 0x5a, &(0x7f0000000100)=""/90, 0x41000, 0x50, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0xf, 0x7fffffff, 0xffff}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000600)=[r2, 0x1, r3, r5, r6, r7, r8, 0xffffffffffffffff, r9], &(0x7f0000000640)=[{0x5, 0x3, 0x9, 0x2}, {0x4, 0x4, 0xa, 0x6}, {0x3, 0x4, 0xf, 0x8}, {0x5, 0x1, 0x3, 0xc}, {0x4, 0x3, 0xc, 0x1}], 0x10, 0x8, @void, @value}, 0x94) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) r12 = socket(0x28, 0x5, 0x0) accept4$vsock_stream(r10, &(0x7f00000007c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x81800) listen(r12, 0x0) r13 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r13, &(0x7f0000000080), 0x10) r14 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r14, &(0x7f00000003c0)='V', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r14, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r14, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) r15 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r15, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0xfffffffc, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0xffff, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b8000000140001000000000000000000e0000002000000000000000000000000000000000000344f0e1e6c32d929000000000000000000000a"], 0xb8}}, 0x0) 1.199443219s ago: executing program 0 (id=1898): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6, 0x0, 0x1, 0xb], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x400, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) sendto$inet6(r0, &(0x7f0000000700)='|', 0x1, 0x200088c5, &(0x7f0000000a80)={0xa, 0x2, 0x1000, @empty}, 0x1c) 1.008656821s ago: executing program 0 (id=1899): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000140)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x1, {0x4e23, 0x3}}, 0x10, &(0x7f0000000080), 0x0, &(0x7f00000000c0)="fb9f6a93a97d500d4caee2a2e54c9ae8d1fceb9e69ed731c8423bc5974b1147de261b078aed84ece86d6840819a4b2bd400e198278d9619de2721208c38c80cfd471a2daf31792607f3d09bb891a0be1a4b7b58dea8b3fc4603677149d588e0f89925902", 0x64, 0x2048040}, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x5e48715d}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000200)={r2, 0x93}, &(0x7f0000000240)=0x8) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r4, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20040841) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400)=0xffffffffffffffff, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/syz1\x00', 0x1ff) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000004c0)=@security={'security\x00', 0xe, 0x4, 0x458, 0xffffffff, 0x160, 0x240, 0x160, 0xffffffff, 0xffffffff, 0x388, 0x388, 0x388, 0xffffffff, 0x4, &(0x7f0000000480), {[{{@uncond, 0x0, 0x120, 0x160, 0x0, {}, [@common=@hbh={{0x48}, {0x2, 0x2, 0x0, [0x1, 0x9, 0x1, 0xffff, 0x0, 0x7, 0x1, 0x200, 0x6, 0x79b0, 0x2, 0x23f6, 0x4, 0x6, 0x8, 0x40]}}, @common=@frag={{0x30}, {[0x3], 0xe5, 0xa, 0x1}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "aa6cf44d65e38a6fa596b9e2218056dac3c27d338e085da89daac6dfccd1"}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xccd2ba7999fcfa8c, 0x0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x0, 0xff], 'macvtap0\x00', 'ip6tnl0\x00', {0xff}, {}, 0x5e, 0x7, 0x3, 0x11}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x5, 0x1}, {0x3, 0x1, 0x2}, {0x2, 0x6, 0x1}, 0x2822, 0x1}}}, {{@uncond, 0x0, 0x118, 0x148, 0x0, {}, [@common=@eui64={{0x28}}, @common=@dst={{0x48}, {0x2, 0x4, 0x0, [0x5, 0x60, 0x7, 0x101, 0x8, 0x8, 0x38c, 0x7, 0x9, 0x9, 0x1, 0x6a12, 0x81, 0x5, 0xfff, 0x6], 0x6}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7, 0x9, 0x4, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000009c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000a00)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000ac0)={'ip6_vti0\x00', &(0x7f0000000a40)={'ip6gre0\x00', 0x0, 0x0, 0x1, 0xec, 0x6, 0x9, @dev={0xfe, 0x80, '\x00', 0x37}, @mcast2, 0x80, 0x700, 0xffe, 0x8}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000b00)={'wg0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r7, &(0x7f0000000c40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0x88, r8, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0x88}, 0x1, 0x0, 0x0, 0xc05}, 0x1) setsockopt$sock_int(r6, 0x1, 0x22, &(0x7f0000000c80)=0x6, 0x4) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000cc0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000f00)={r3, 0xff00, 0xb5, "cc97c998bc882ef1bb41a6ae2b7d9e1046d09aad3b2f43e2f8b58c6e64eee596d06020fd484402ce03c05377dd42c65cb29de46068a28969dbda76b7118e63d798e48f6deafc012a1c9cea17a867510186c40b41c14ec72991f93e44332234fe5f508ae2ade5d7895357483e58db7d14e2970ec7a7cbe0b0b4c99d4f0b4601c9a3cf18b7eb2c2dedf16d25197bb803149f7dac5b150a0c98f96a7b53d4c105767b42860c58e7bf52ee102af54a401dfca9a98c1ebd"}, 0xbd) r12 = socket$packet(0x11, 0x2, 0x300) r13 = accept$ax25(0xffffffffffffffff, &(0x7f0000000fc0)={{}, [@default, @remote, @remote, @rose, @remote, @rose, @remote, @bcast]}, &(0x7f0000001040)=0x48) ioctl$BTRFS_IOC_QGROUP_CREATE(r13, 0x4010942a, &(0x7f0000001080)={0x0, 0x2}) getsockname$packet(r12, &(0x7f00000010c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001100)=0x14) r15 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001140)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=@base={0x6, 0x4, 0x800, 0x1000, 0x0, 0x1, 0x6, '\x00', r14, r15, 0x2, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) accept4(r7, &(0x7f0000001200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, &(0x7f0000001280)=0x80, 0x80800) r17 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001300), r7) sendmsg$TIPC_NL_MEDIA_GET(r16, &(0x7f0000001500)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001340)={0x144, r17, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe74}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4b9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x1}, 0x4048800) ioctl$sock_inet6_SIOCADDRT(r16, 0x890b, &(0x7f0000001540)={@rand_addr=' \x01\x00', @mcast1, @mcast1, 0xa, 0x4, 0x4, 0x500, 0x7, 0x40000}) 993.619073ms ago: executing program 4 (id=1900): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r1], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000bf98000000000000a6080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x16, 0x0, 0x0, 0x0, 0x10, '\x00', r1, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) 694.98068ms ago: executing program 4 (id=1901): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001800010000000000f8dbdf2102200008000000090000000008000100e000000206001c004e20000008000700e000000208000200ffffffff080001"], 0x4c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x68, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x40800}, 0x0) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1b2fd2c5}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0xe, 'wlan1\x00'}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001000010400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000001600"/17], 0x34}}, 0x0) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) (async) r7 = accept4(r6, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000000380), &(0x7f0000000480)=0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x11, 0x4, 0x4, 0xfffffffe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002e0003050000000000000000200000f8ffffffffffffff0008000000", @ANYRES32, @ANYBLOB="0c000f"], 0x34}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000140)={0x1d, r8}, 0x10) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r9, 0x29, 0x43, 0x0, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES32=r4, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018", @ANYRESOCT=r4], 0x50}, 0x1, 0x0, 0x0, 0x80208c4}, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) 694.323556ms ago: executing program 0 (id=1902): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req={0x0, 0xff}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002000)=ANY=[@ANYBLOB="3000000021000100000000fa0000000002000000000000000000000014001100637ee2fce945e99a11365f016e65743aab0116703a44750002000000"], 0x30}}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, r4, 0x1, 0x70bd22, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0xc890) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r6, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe", 0xd3}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365", 0xa4}], 0x3}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf64", 0x71}], 0x1}}], 0x2, 0xc0) recvfrom$inet(r6, &(0x7f0000000fc0)=""/4096, 0x1000, 0x20, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r6, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001fc0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000406030000000000000000000500000705000100828a0000"], 0x1c}, 0x1, 0x0, 0x0, 0x2004c040}, 0x20000081) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) write$bt_hci(r8, &(0x7f0000000040)=ANY=[], 0x6) r9 = socket$packet(0x11, 0xda711dd16767ee01, 0x300) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x3}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) bind$packet(r9, &(0x7f0000000000)={0x11, 0x1b, 0x0, 0x1, 0x81, 0x6, @remote}, 0x14) 345.223401ms ago: executing program 4 (id=1903): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0x10}, {0x1, 0xb}, {0xfff2, 0xe}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30000810}, 0x840) 0s ago: executing program 3 (id=1670): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x0, 0x93, &(0x7f0000000100)=[{}], 0x8, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x28, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000240)={@map, 0xffffffffffffffff, 0x24, 0x0, 0xffffffffffffffff, @void, @value}, 0x20) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): T11935] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.009035][T12312] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1403'. [ 223.080405][T11966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.214181][T12314] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 223.281849][T12317] netlink: 'syz.4.1405': attribute type 1 has an invalid length. [ 223.299236][ T9418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.308075][T12317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.320652][ T9418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.412693][T11966] veth0_vlan: entered promiscuous mode [ 223.413486][ T9418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.426091][ T9418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.544477][T11966] veth1_vlan: entered promiscuous mode [ 223.695593][T11966] veth0_macvtap: entered promiscuous mode [ 223.789997][T11966] veth1_macvtap: entered promiscuous mode [ 223.835686][T11966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.873329][T11966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.903628][T11966] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.920033][T11966] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.938598][T11966] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.956680][T11966] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.129570][ T9422] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.258398][ T9422] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.346779][ T9424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.366586][ T9424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.390259][ T9422] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.455602][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.490245][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.529689][ T9422] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.921067][T12362] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1418'. [ 225.009487][T12365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1418'. [ 225.130964][ T9422] bridge_slave_1: left allmulticast mode [ 225.154553][ T9422] bridge_slave_1: left promiscuous mode [ 225.165158][ T5156] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 225.167896][ T9422] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.185078][ T5156] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 225.195011][ T5156] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 225.204669][ T5156] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 225.204919][ T9422] bridge_slave_0: left allmulticast mode [ 225.221129][ T5156] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 225.261560][ T9422] bridge_slave_0: left promiscuous mode [ 225.284849][ T9422] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.666825][ T9422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.678062][ T9422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.689241][ T9422] bond0 (unregistering): Released all slaves [ 225.948671][ T9422] hsr_slave_0: left promiscuous mode [ 225.954888][ T9422] hsr_slave_1: left promiscuous mode [ 225.961504][ T9422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.971033][ T9422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.983365][ T9422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.993154][ T9422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.018949][ T9422] veth1_macvtap: left promiscuous mode [ 226.024529][ T9422] veth0_macvtap: left promiscuous mode [ 226.030427][ T9422] veth1_vlan: left promiscuous mode [ 226.035742][ T9422] veth0_vlan: left promiscuous mode [ 226.474609][T12382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.486495][T12384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1424'. [ 226.675525][ T9422] team0 (unregistering): Port device team_slave_1 removed [ 226.726409][ T9422] team0 (unregistering): Port device team_slave_0 removed [ 226.780708][ T5156] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 226.801587][ T5156] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 226.819928][ T5156] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 226.841619][ T5156] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 226.861506][ T5156] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 227.293428][ T51] Bluetooth: hci3: command tx timeout [ 227.460228][T12368] chnl_net:caif_netlink_parms(): no params data found [ 227.527941][T12401] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1428'. [ 227.705639][T12409] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1429'. [ 227.737715][T12408] netlink: 'syz.3.1430': attribute type 3 has an invalid length. [ 227.757917][T12411] netlink: 'syz.0.1431': attribute type 1 has an invalid length. [ 227.787073][T12368] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.794292][T12368] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.806620][T12368] bridge_slave_0: entered allmulticast mode [ 227.816898][T12368] bridge_slave_0: entered promiscuous mode [ 227.834216][T12411] netlink: 'syz.0.1431': attribute type 1 has an invalid length. [ 227.854010][T12368] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.862041][T12368] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.874201][T12368] bridge_slave_1: entered allmulticast mode [ 227.882255][T12368] bridge_slave_1: entered promiscuous mode [ 227.945510][T12419] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1433'. [ 227.963351][T12368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.001624][T12368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.019380][T12419] tipc: Started in network mode [ 228.024320][T12419] tipc: Node identity ac1414aa, cluster identity 4711 [ 228.033893][T12419] tipc: Enabled bearer , priority 10 [ 228.121822][T12368] team0: Port device team_slave_0 added [ 228.161140][ T9422] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.194243][T12422] netem: incorrect gi model size [ 228.199771][T12422] netem: change failed [ 228.209011][T12368] team0: Port device team_slave_1 added [ 228.360526][ T9422] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.377784][T12368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.388219][T12368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.418710][T12368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.443530][T12430] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1436'. [ 228.480214][ T9422] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.502054][T12368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.512032][T12368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.543716][T12368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.565575][T12430] bond0 (unregistering): left promiscuous mode [ 228.581927][T12430] bond_slave_0: left promiscuous mode [ 228.596479][T12430] bond_slave_1: left promiscuous mode [ 228.602174][T12430] bridge_slave_1: left promiscuous mode [ 228.613422][T12430] bond4: left promiscuous mode [ 228.624395][T12430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.653854][T12435] netlink: 'syz.4.1438': attribute type 1 has an invalid length. [ 228.662245][T12435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1438'. [ 228.663060][T12430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.714799][T12430] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 228.763029][T12430] bond0 (unregistering): (slave bond4): Releasing backup interface [ 228.788053][T12430] bond0 (unregistering): Released all slaves [ 228.807484][T12440] netlink: 'syz.3.1440': attribute type 5 has an invalid length. [ 228.966603][ T51] Bluetooth: hci4: command tx timeout [ 229.016106][ T9422] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.037690][T10072] tipc: Node number set to 2886997162 [ 229.135260][T12387] chnl_net:caif_netlink_parms(): no params data found [ 229.240367][T12460] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1447'. [ 229.292611][T12368] hsr_slave_0: entered promiscuous mode [ 229.299744][T12368] hsr_slave_1: entered promiscuous mode [ 229.307803][T12368] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.309989][T12463] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1447'. [ 229.315387][T12368] Cannot create hsr debugfs directory [ 229.330709][T12461] tap0: tun_chr_ioctl cmd 1074025677 [ 229.337072][T12461] tap0: linktype set to 65534 [ 229.366404][ T51] Bluetooth: hci3: command tx timeout [ 229.391762][T12453] gtp0: entered promiscuous mode [ 229.417078][T12453] gtp0: entered allmulticast mode [ 229.807921][T12484] netlink: 'syz.4.1452': attribute type 18 has an invalid length. [ 229.952471][T12387] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.987145][T12387] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.999382][T12387] bridge_slave_0: entered allmulticast mode [ 230.020625][T12387] bridge_slave_0: entered promiscuous mode [ 230.042569][ T9422] bridge_slave_1: left allmulticast mode [ 230.052308][T12495] atomic_op ffff88807aa5c998 conn xmit_atomic 0000000000000000 [ 230.055708][ T9422] bridge_slave_1: left promiscuous mode [ 230.066044][ T9422] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.077792][ T9422] bridge_slave_0: left allmulticast mode [ 230.083482][ T9422] bridge_slave_0: left promiscuous mode [ 230.091180][ T9422] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.470221][ T9422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.482552][ T9422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.494591][ T9422] bond0 (unregistering): Released all slaves [ 230.516039][T12488] vlan1: entered promiscuous mode [ 230.523824][T12488] bridge0: entered promiscuous mode [ 230.571143][T12387] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.581778][T12387] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.597133][T12387] bridge_slave_1: entered allmulticast mode [ 230.610587][T12387] bridge_slave_1: entered promiscuous mode [ 230.852901][T12387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.005770][T12387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.047938][ T51] Bluetooth: hci4: command tx timeout [ 231.238337][T12387] team0: Port device team_slave_0 added [ 231.244785][T12513] veth0: entered promiscuous mode [ 231.258880][T12509] veth0: left promiscuous mode [ 231.308290][T12387] team0: Port device team_slave_1 added [ 231.446740][ T51] Bluetooth: hci3: command tx timeout [ 231.453195][ T9422] hsr_slave_0: left promiscuous mode [ 231.461231][ T9422] hsr_slave_1: left promiscuous mode [ 231.482472][ T9422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.510521][ T9422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.553087][ T9422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.580030][ T9422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.611601][ T9422] veth1_macvtap: left promiscuous mode [ 231.622486][ T9422] veth0_macvtap: left promiscuous mode [ 231.636843][ T9422] veth1_vlan: left promiscuous mode [ 231.642255][ T9422] veth0_vlan: left promiscuous mode [ 231.686026][T12543] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1462'. [ 231.698997][T12543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1462'. [ 231.725589][T12545] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1463'. [ 232.150507][ T9422] team0 (unregistering): Port device team_slave_1 removed [ 232.192219][ T9422] team0 (unregistering): Port device team_slave_0 removed [ 232.652289][T12387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.659840][T12387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.688073][T12387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.753097][T12387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.781820][T12387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.843459][T12387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.025739][T12564] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.1464'. [ 233.131430][ T51] Bluetooth: hci4: command tx timeout [ 233.162213][T12387] hsr_slave_0: entered promiscuous mode [ 233.193363][T12387] hsr_slave_1: entered promiscuous mode [ 233.227553][T12387] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.254448][T12387] Cannot create hsr debugfs directory [ 233.527910][ T51] Bluetooth: hci3: command tx timeout [ 233.845367][T12590] bond0: entered promiscuous mode [ 233.875943][T12590] bond0: entered allmulticast mode [ 233.899816][T12590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.958210][T12368] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 234.003349][T12597] xt_CT: No such helper "netbios-ns" [ 234.066591][T12368] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 234.087310][T12368] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 234.185185][T12368] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 234.625433][T12636] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1478'. [ 234.674876][T12636] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 234.713665][T12368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.901464][T12649] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1480'. [ 234.906393][T12651] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1479'. [ 234.911567][T12368] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.958042][T12647] netlink: 'syz.0.1479': attribute type 29 has an invalid length. [ 235.005345][ T9424] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.012608][ T9424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.056242][ T9424] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.063446][ T9424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.113936][T12661] netlink: 'syz.0.1482': attribute type 1 has an invalid length. [ 235.146525][T12661] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 235.153793][T12661] IPv6: NLM_F_CREATE should be set when creating new route [ 235.171825][T12657] bond2: entered promiscuous mode [ 235.179809][T12657] bond2: entered allmulticast mode [ 235.202409][T12657] 8021q: adding VLAN 0 to HW filter on device bond2 [ 235.210632][ T51] Bluetooth: hci4: command tx timeout [ 235.379523][T12387] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 235.404956][T12387] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 235.441964][T12387] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 235.464103][T12674] netlink: 'syz.4.1485': attribute type 2 has an invalid length. [ 235.464103][T12675] netlink: 'syz.4.1485': attribute type 2 has an invalid length. [ 235.490737][T12387] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 235.502239][T12674] netlink: 'syz.4.1485': attribute type 2 has an invalid length. [ 235.663539][T12691] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 235.780462][T12387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.849840][T12387] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.875362][T12368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.890421][ T9424] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.897693][ T9424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.967603][ T9424] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.974807][ T9424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.159906][T12368] veth0_vlan: entered promiscuous mode [ 236.177400][T12368] veth1_vlan: entered promiscuous mode [ 236.284249][T12368] veth0_macvtap: entered promiscuous mode [ 236.328704][T12368] veth1_macvtap: entered promiscuous mode [ 236.400265][T12368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.464370][T12368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.598487][T12368] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.636266][T12368] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.645041][T12368] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.696304][T12368] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.915714][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.936407][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.993317][T12387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.023149][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.051331][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.131577][T12387] veth0_vlan: entered promiscuous mode [ 237.167839][T12387] veth1_vlan: entered promiscuous mode [ 237.440940][T12387] veth0_macvtap: entered promiscuous mode [ 237.482398][T12387] veth1_macvtap: entered promiscuous mode [ 237.531763][T12387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.563711][T12387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.595722][T12387] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.614621][T12387] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.628901][T12387] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.637996][T12387] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.741439][ T3526] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.949956][ T3526] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.043006][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.061408][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.090332][ T9424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.105158][ T9424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.128010][ T3526] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.400499][ T3526] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.568749][T12735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1497'. [ 238.679524][ T3526] bridge_slave_1: left allmulticast mode [ 238.685241][ T3526] bridge_slave_1: left promiscuous mode [ 238.695695][ T3526] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.743291][ T3526] bridge_slave_0: left allmulticast mode [ 238.756858][ T3526] bridge_slave_0: left promiscuous mode [ 238.774757][ T3526] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.010665][T12751] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20000 [ 239.262104][ T5156] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 239.276063][ T5156] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 239.294282][ T5156] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 239.303459][ T5156] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 239.316960][ T5156] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 239.530282][ T3526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.541802][ T3526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.554733][ T3526] bond0 (unregistering): Released all slaves [ 239.571280][T12744] vlan0: entered promiscuous mode [ 239.587275][T12744] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 239.894863][ T3526] hsr_slave_0: left promiscuous mode [ 239.902121][ T3526] hsr_slave_1: left promiscuous mode [ 239.909169][ T3526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.917737][ T3526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.925632][ T3526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.934706][ T3526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.957694][ T3526] veth1_macvtap: left promiscuous mode [ 239.963231][ T3526] veth0_macvtap: left promiscuous mode [ 239.970002][ T3526] veth1_vlan: left promiscuous mode [ 239.975331][ T3526] veth0_vlan: left promiscuous mode [ 240.381137][ T3526] team0 (unregistering): Port device team_slave_1 removed [ 240.463839][T12763] sctp: [Deprecated]: syz.4.1505 (pid 12763) Use of struct sctp_assoc_value in delayed_ack socket option. [ 240.463839][T12763] Use struct sctp_sack_info instead [ 240.535627][ T3526] team0 (unregistering): Port device team_slave_0 removed [ 240.895831][ T5156] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 240.905947][ T5156] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 240.924663][ T5156] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 240.934932][ T5156] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 240.945739][ T5156] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 241.161970][T12780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1507'. [ 241.235914][T12755] chnl_net:caif_netlink_parms(): no params data found [ 241.376696][ T5156] Bluetooth: hci3: command tx timeout [ 241.684369][T12803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1513'. [ 241.793799][T12811] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 241.793834][T12755] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.835879][T12755] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.853378][T12755] bridge_slave_0: entered allmulticast mode [ 241.876012][T12755] bridge_slave_0: entered promiscuous mode [ 241.931162][T12755] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.981651][T12755] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.020645][T12755] bridge_slave_1: entered allmulticast mode [ 242.043866][T12755] bridge_slave_1: entered promiscuous mode [ 242.228301][T12755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.242797][T12755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.361550][T12830] team0: No ports can be present during mode change [ 242.409294][ T3526] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.533124][T12755] team0: Port device team_slave_0 added [ 242.630138][ T3526] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.681599][T12755] team0: Port device team_slave_1 added [ 242.695131][T12782] chnl_net:caif_netlink_parms(): no params data found [ 242.760416][ T3526] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.818129][T12755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.825316][T12755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.866919][T12755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.903714][ T3526] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.943142][T12755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.950295][T12755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.976548][ T5156] Bluetooth: hci4: command tx timeout [ 242.988523][T12755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.231184][T12782] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.257630][T12782] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.266790][T12782] bridge_slave_0: entered allmulticast mode [ 243.274930][T12782] bridge_slave_0: entered promiscuous mode [ 243.332213][T12782] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.340012][T12782] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.352874][T12782] bridge_slave_1: entered allmulticast mode [ 243.361773][T12782] bridge_slave_1: entered promiscuous mode [ 243.382040][T12755] hsr_slave_0: entered promiscuous mode [ 243.389145][T12755] hsr_slave_1: entered promiscuous mode [ 243.395530][T12755] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.403648][T12755] Cannot create hsr debugfs directory [ 243.457439][ T5156] Bluetooth: hci3: command tx timeout [ 243.560906][T12869] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1528'. [ 243.611107][T12782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.645138][T12782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.880045][T12782] team0: Port device team_slave_0 added [ 243.921403][T12782] team0: Port device team_slave_1 added [ 243.970888][ T3526] bridge_slave_1: left allmulticast mode [ 243.982942][ T3526] bridge_slave_1: left promiscuous mode [ 243.991149][ T3526] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.002612][T12893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1534'. [ 244.012465][T12893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1534'. [ 244.023030][ T3526] bridge_slave_0: left allmulticast mode [ 244.033533][ T3526] bridge_slave_0: left promiscuous mode [ 244.039891][ T3526] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.175348][T12896] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1535'. [ 244.416737][ T3526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.429644][ T3526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.441073][ T3526] bond0 (unregistering): Released all slaves [ 244.612809][T12782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.624745][T12782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.657492][T12782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.675264][T12782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.693622][T12782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.702981][T12904] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1538'. [ 244.727839][T12782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.739277][T12899] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 245.049720][ T5156] Bluetooth: hci4: command tx timeout [ 245.134613][T12782] hsr_slave_0: entered promiscuous mode [ 245.161357][T12926] IPVS: set_ctl: invalid protocol: 0 172.20.20.57:20003 [ 245.169153][T12782] hsr_slave_1: entered promiscuous mode [ 245.175574][T12782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.185213][T12927] IPVS: set_ctl: invalid protocol: 0 172.20.20.57:20003 [ 245.203448][T12782] Cannot create hsr debugfs directory [ 245.372104][ T3526] hsr_slave_0: left promiscuous mode [ 245.380098][ T3526] hsr_slave_1: left promiscuous mode [ 245.386015][ T3526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.405083][ T3526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.427805][ T3526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.435449][ T3526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.458431][ T3526] veth1_macvtap: left promiscuous mode [ 245.464023][ T3526] veth0_macvtap: left promiscuous mode [ 245.470138][ T3526] veth1_vlan: left promiscuous mode [ 245.475497][ T3526] veth0_vlan: left promiscuous mode [ 245.526700][ T5156] Bluetooth: hci3: command tx timeout [ 245.560452][T12944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1545'. [ 246.014934][ T3526] team0 (unregistering): Port device team_slave_1 removed [ 246.054640][ T3526] team0 (unregistering): Port device team_slave_0 removed [ 246.448304][T12932] bridge_slave_0: left allmulticast mode [ 246.453985][T12932] bridge_slave_0: left promiscuous mode [ 246.463381][T12932] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.473878][T12932] bridge_slave_1: left allmulticast mode [ 246.480241][T12932] bridge_slave_1: left promiscuous mode [ 246.486134][T12932] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.522613][T12932] team0: Port device team_slave_0 removed [ 246.547916][T12932] team0: Port device team_slave_1 removed [ 246.554260][T12932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.568759][T12932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.578062][T12932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.585495][T12932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.603479][T12932] bond0: (slave ip6gretap1): Releasing backup interface [ 246.611485][T12932] bond0: (slave ip6gretap1): the permanent HWaddr of slave - 86:d9:2f:1d:d2:cd - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 246.645458][T12932] bond0: (slave veth3): Releasing backup interface [ 246.730213][T12944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.817895][T12944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.869182][T12947] vlan3: entered promiscuous mode [ 246.874249][T12947] bridge0: entered promiscuous mode [ 246.914708][T12953] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 247.130422][ T5156] Bluetooth: hci4: command tx timeout [ 247.373965][T12970] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1552'. [ 247.445311][T12970] 8021q: adding VLAN 0 to HW filter on device bond3 [ 247.491301][T12966] vlan1: entered allmulticast mode [ 247.500018][T12966] bond3: entered allmulticast mode [ 247.606816][ T5156] Bluetooth: hci3: command tx timeout [ 247.982811][T12755] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 248.015431][T12755] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 248.136701][T12755] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 248.198847][T12755] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 248.293681][T12782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 248.357984][T12782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 248.383715][T13007] netlink: 'syz.3.1560': attribute type 10 has an invalid length. [ 248.392683][T12782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 248.434049][T12782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 248.707359][T12755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.781754][T12755] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.819044][ T9422] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.826287][ T9422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.872066][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.879363][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.925240][T12782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.999585][T12782] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.026101][T12755] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 249.052986][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.060251][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.103387][ T9424] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.110736][ T9424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.207073][ T5156] Bluetooth: hci4: command tx timeout [ 249.270505][T13035] netlink: 'syz.4.1566': attribute type 1 has an invalid length. [ 249.296644][T13035] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1566'. [ 249.519006][T12782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.569853][T12755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.702706][T12782] veth0_vlan: entered promiscuous mode [ 249.762868][T12755] veth0_vlan: entered promiscuous mode [ 249.785905][T12782] veth1_vlan: entered promiscuous mode [ 249.892908][T12755] veth1_vlan: entered promiscuous mode [ 249.940338][T13060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1571'. [ 250.078843][T12782] veth0_macvtap: entered promiscuous mode [ 250.109219][T12782] veth1_macvtap: entered promiscuous mode [ 250.130605][T12755] veth0_macvtap: entered promiscuous mode [ 250.160413][T12755] veth1_macvtap: entered promiscuous mode [ 250.192856][T12782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.231102][T12782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.267593][T12755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.270875][T13077] xt_TPROXY: Can be used only with -p tcp or -p udp [ 250.279614][T13074] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1576'. [ 250.298287][T12755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.308365][T13076] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1576'. [ 250.332040][T12782] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.356899][T12782] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.365656][T12782] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.376570][T12782] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.415030][T12755] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.440227][T12755] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.456477][T12755] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.470034][T12755] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.751493][ T196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.779017][ T196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.902328][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.927191][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.999548][ T3526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.003338][T13093] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1580'. [ 251.017445][ T3526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.039167][ T196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.070790][ T196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.079821][T13096] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1580'. [ 251.199649][T13098] netlink: 'syz.4.1580': attribute type 1 has an invalid length. [ 251.255390][T13101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1582'. [ 251.343377][T13098] 8021q: adding VLAN 0 to HW filter on device bond7 [ 251.462148][T13108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1584'. [ 251.537482][T13112] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1584'. [ 251.750213][T13119] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.922007][T13124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1588'. [ 252.041347][ T196] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.322818][ T196] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.441375][ T196] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.551827][ T196] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.732702][ T196] bridge_slave_1: left allmulticast mode [ 252.738624][ T196] bridge_slave_1: left promiscuous mode [ 252.744431][ T196] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.759374][ T196] bridge_slave_0: left allmulticast mode [ 252.765073][ T196] bridge_slave_0: left promiscuous mode [ 252.775062][ T196] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.831472][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 252.842262][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 252.854569][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 252.872354][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 252.883992][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 253.260178][T13161] nbd: socks must be embedded in a SOCK_ITEM attr [ 253.518611][ T196] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.532046][ T196] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.543661][ T5156] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 253.556746][ T5156] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 253.568200][ T5156] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 253.575597][ T196] bond0 (unregistering): Released all slaves [ 253.584067][ T5156] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 253.594418][ T5156] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 253.821068][T13173] netlink: 'syz.0.1596': attribute type 1 has an invalid length. [ 254.093486][T13181] netlink: 'syz.3.1599': attribute type 19 has an invalid length. [ 254.192126][T13190] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 254.345546][T13197] unsupported nla_type 52263 [ 254.355436][ T196] hsr_slave_0: left promiscuous mode [ 254.367515][ T196] hsr_slave_1: left promiscuous mode [ 254.382330][ T196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.390199][ T196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.400881][ T196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.410426][ T196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.444388][ T196] veth1_macvtap: left promiscuous mode [ 254.450598][ T196] veth0_macvtap: left promiscuous mode [ 254.456832][ T196] veth1_vlan: left promiscuous mode [ 254.462399][ T196] veth0_vlan: left promiscuous mode [ 254.968356][ T51] Bluetooth: hci3: command tx timeout [ 255.134525][ T196] team0 (unregistering): Port device team_slave_1 removed [ 255.145752][T13210] __nla_validate_parse: 6 callbacks suppressed [ 255.145770][T13210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1606'. [ 255.221695][ T196] team0 (unregistering): Port device team_slave_0 removed [ 255.687442][ T51] Bluetooth: hci4: command tx timeout [ 255.944468][T13166] chnl_net:caif_netlink_parms(): no params data found [ 256.013939][T13145] chnl_net:caif_netlink_parms(): no params data found [ 256.178489][T13231] FAULT_INJECTION: forcing a failure. [ 256.178489][T13231] name failslab, interval 1, probability 0, space 0, times 1 [ 256.211423][T13231] CPU: 1 UID: 0 PID: 13231 Comm: syz.4.1610 Not tainted 6.16.0-rc2-syzkaller-00159-ge0fca6f2cebf #0 PREEMPT(full) [ 256.211456][T13231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 256.211469][T13231] Call Trace: [ 256.211477][T13231] [ 256.211486][T13231] dump_stack_lvl+0x189/0x250 [ 256.211526][T13231] ? __pfx____ratelimit+0x10/0x10 [ 256.211558][T13231] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.211590][T13231] ? __pfx__printk+0x10/0x10 [ 256.211620][T13231] ? __pfx___might_resched+0x10/0x10 [ 256.211649][T13231] ? fs_reclaim_acquire+0x7d/0x100 [ 256.211680][T13231] should_fail_ex+0x414/0x560 [ 256.211712][T13231] should_failslab+0xa8/0x100 [ 256.211737][T13231] kmem_cache_alloc_noprof+0x73/0x3c0 [ 256.211779][T13231] ? vm_area_dup+0x2b/0x680 [ 256.211808][T13231] vm_area_dup+0x2b/0x680 [ 256.211835][T13231] __split_vma+0x1a9/0xa00 [ 256.211867][T13231] ? mas_next_slot+0xc20/0xcf0 [ 256.211902][T13231] ? __pfx___split_vma+0x10/0x10 [ 256.211949][T13231] ? userfaultfd_unmap_prep+0x99/0x3e0 [ 256.211986][T13231] vms_gather_munmap_vmas+0x4ab/0x12b0 [ 256.212037][T13231] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 256.212089][T13231] mmap_region+0x678/0x1f30 [ 256.212142][T13231] ? __pfx_mmap_region+0x10/0x10 [ 256.212178][T13231] ? is_bpf_text_address+0x26/0x2b0 [ 256.212224][T13231] ? __lock_acquire+0xab9/0xd20 [ 256.212303][T13231] ? __pfx_aa_get_newest_label+0x10/0x10 [ 256.212338][T13231] ? rcu_is_watching+0x15/0xb0 [ 256.212372][T13231] ? apparmor_capable+0x137/0x1b0 [ 256.212394][T13231] ? bpf_lsm_capable+0x9/0x20 [ 256.212412][T13231] ? security_capable+0x7e/0x2e0 [ 256.212446][T13231] do_mmap+0xc45/0x10d0 [ 256.212493][T13231] ? __pfx_do_mmap+0x10/0x10 [ 256.212521][T13231] ? down_write_killable+0x178/0x230 [ 256.212544][T13231] ? __pfx_vfs_write+0x10/0x10 [ 256.212575][T13231] ? __pfx_down_write_killable+0x10/0x10 [ 256.212599][T13231] ? apparmor_mmap_file+0xc4/0xe0 [ 256.212626][T13231] vm_mmap_pgoff+0x31b/0x4c0 [ 256.212664][T13231] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 256.212688][T13231] ? ksys_write+0x22a/0x250 [ 256.212710][T13231] ? __pfx_ksys_write+0x10/0x10 [ 256.212726][T13231] ? rcu_is_watching+0x15/0xb0 [ 256.212765][T13231] ? ksys_mmap_pgoff+0xf4/0x760 [ 256.212785][T13231] ? __x64_sys_mmap+0x7f/0x140 [ 256.212820][T13231] do_syscall_64+0xfa/0x3b0 [ 256.212838][T13231] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.212868][T13231] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.212888][T13231] ? clear_bhb_loop+0x60/0xb0 [ 256.212913][T13231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.212933][T13231] RIP: 0033:0x7fecbb38e929 [ 256.212951][T13231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.212969][T13231] RSP: 002b:00007fecbc1ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 256.213000][T13231] RAX: ffffffffffffffda RBX: 00007fecbb5b5fa0 RCX: 00007fecbb38e929 [ 256.213015][T13231] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000200000001000 [ 256.213028][T13231] RBP: 00007fecbc1ba090 R08: ffffffffffffffff R09: 0000000000000000 [ 256.213041][T13231] R10: 0000000000003032 R11: 0000000000000246 R12: 0000000000000001 [ 256.213054][T13231] R13: 0000000000000000 R14: 00007fecbb5b5fa0 R15: 00007ffefb5ef008 [ 256.213086][T13231] [ 256.784363][T13253] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1613'. [ 256.855729][T13251] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 256.924275][T13145] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.932087][T13145] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.944091][T13145] bridge_slave_0: entered allmulticast mode [ 256.968462][T13145] bridge_slave_0: entered promiscuous mode [ 256.990840][T13145] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.009749][T13145] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.025429][T13145] bridge_slave_1: entered allmulticast mode [ 257.045910][T13145] bridge_slave_1: entered promiscuous mode [ 257.052361][ T51] Bluetooth: hci3: command tx timeout [ 257.062995][T13166] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.070618][T13166] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.079527][T13166] bridge_slave_0: entered allmulticast mode [ 257.087385][T13166] bridge_slave_0: entered promiscuous mode [ 257.096586][T13166] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.103814][T13166] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.111356][T13166] bridge_slave_1: entered allmulticast mode [ 257.119410][T13166] bridge_slave_1: entered promiscuous mode [ 257.207572][ T196] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.304011][T13145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.350497][T13166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.382148][ T196] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.411579][T13145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.439157][T13166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.617099][T13280] openvswitch: netlink: Flow key attribute not present in set flow. [ 257.628144][T13280] netlink: 'syz.3.1623': attribute type 39 has an invalid length. [ 257.654862][T13166] team0: Port device team_slave_0 added [ 257.723793][ T196] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.751516][T13284] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1625'. [ 257.764148][T13145] team0: Port device team_slave_0 added [ 257.767070][ T51] Bluetooth: hci4: command tx timeout [ 257.814856][T13166] team0: Port device team_slave_1 added [ 257.837588][T13145] team0: Port device team_slave_1 added [ 257.927748][ T196] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.027461][T13289] netlink: 'syz.4.1626': attribute type 29 has an invalid length. [ 258.037419][T13166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.044413][T13166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.075008][T13166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.117309][T13166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.145089][T13166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.194353][T13166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.216815][T13296] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1628'. [ 258.256668][T13145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.263763][T13145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.296522][T13145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.381047][T13145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.421549][T13145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.458141][T13145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.623736][T13306] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 258.631157][T13306] IPv6: NLM_F_CREATE should be set when creating new route [ 258.638488][T13306] IPv6: NLM_F_CREATE should be set when creating new route [ 258.655628][T13166] hsr_slave_0: entered promiscuous mode [ 258.684866][T13166] hsr_slave_1: entered promiscuous mode [ 258.710037][T13166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.724986][T13166] Cannot create hsr debugfs directory [ 258.911317][T13145] hsr_slave_0: entered promiscuous mode [ 258.925645][T13145] hsr_slave_1: entered promiscuous mode [ 258.942576][T13145] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.955248][T13313] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1631'. [ 258.964619][T13145] Cannot create hsr debugfs directory [ 259.128632][ T51] Bluetooth: hci3: command tx timeout [ 259.156853][T13319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1632'. [ 259.177659][ T196] bridge_slave_1: left allmulticast mode [ 259.183374][ T196] bridge_slave_1: left promiscuous mode [ 259.190116][ T196] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.202737][ T196] bridge_slave_0: left allmulticast mode [ 259.226245][ T196] bridge_slave_0: left promiscuous mode [ 259.236112][ T196] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.615578][ T196] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.628525][ T196] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.639560][ T196] bond0 (unregistering): Released all slaves [ 259.846507][ T51] Bluetooth: hci4: command tx timeout [ 259.914341][T13336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1636'. [ 260.156530][ T196] hsr_slave_0: left promiscuous mode [ 260.165548][ T196] hsr_slave_1: left promiscuous mode [ 260.185685][ T196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.194605][ T196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.215538][T13350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1638'. [ 260.217868][T13349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1639'. [ 260.235433][ T196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.240209][T13349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1639'. [ 260.258283][ T196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.292362][ T196] veth1_macvtap: left promiscuous mode [ 260.298157][ T196] veth0_macvtap: left promiscuous mode [ 260.303771][ T196] veth1_vlan: left promiscuous mode [ 260.312266][ T196] veth0_vlan: left promiscuous mode [ 260.832050][ T196] team0 (unregistering): Port device team_slave_1 removed [ 260.886136][ T196] team0 (unregistering): Port device team_slave_0 removed [ 261.206541][ T51] Bluetooth: hci3: command tx timeout [ 261.869531][T13387] netlink: 'syz.3.1650': attribute type 32 has an invalid length. [ 261.923972][T13387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1650'. [ 261.934166][ T51] Bluetooth: hci4: command tx timeout [ 261.940415][T13387] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 262.153281][T13394] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1651'. [ 262.192402][T13394] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1651'. [ 262.202077][T13394] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1651'. [ 262.212584][T13394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1651'. [ 262.249434][T13166] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 262.280916][T13166] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 262.321347][T13166] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 262.363769][T13166] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 262.416884][T13411] netlink: 'syz.0.1656': attribute type 1 has an invalid length. [ 262.500739][T13145] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 262.527295][T13418] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 262.545674][T13145] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 262.573075][T13411] veth11: entered promiscuous mode [ 262.583655][T13411] bond7: (slave veth11): Enslaving as a backup interface with a down link [ 262.607295][T13421] xt_CT: You must specify a L4 protocol and not use inversions on it [ 262.617258][T13145] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 262.658326][T13145] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 262.753936][T13423] syzkaller0: entered promiscuous mode [ 262.759877][T13423] syzkaller0: entered allmulticast mode [ 262.934171][T13145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.973058][T13166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.023347][T13145] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.040652][T13166] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.054988][T13437] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 263.076876][ T9422] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.084088][ T9422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.098648][T13437] netlink: 'syz.3.1661': attribute type 4 has an invalid length. [ 263.110372][ T9422] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.117600][ T9422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.151423][ T9422] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.158667][ T9422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.178588][ T9424] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.185783][ T9424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.772784][T13145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.863909][T13166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.971700][T13145] veth0_vlan: entered promiscuous mode [ 264.015334][T13166] veth0_vlan: entered promiscuous mode [ 264.035031][T13145] veth1_vlan: entered promiscuous mode [ 264.051205][T13166] veth1_vlan: entered promiscuous mode [ 264.135401][T13166] veth0_macvtap: entered promiscuous mode [ 264.152546][T13145] veth0_macvtap: entered promiscuous mode [ 264.181607][T13145] veth1_macvtap: entered promiscuous mode [ 264.210177][T13166] veth1_macvtap: entered promiscuous mode [ 264.270711][T13145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.288412][T13145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.341407][T13166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.361075][T13166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.383839][T13145] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.402594][T13145] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.415087][T13145] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.443956][T13145] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.463944][T13166] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.490856][T13166] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.516624][T13166] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.532175][T13166] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.722439][ T37] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.757738][ T37] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.878466][ T37] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.906803][ T37] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.057500][ T37] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.073192][ T37] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.204152][ T37] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.222398][ T37] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.263620][ T9424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.272262][ T9424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.389746][ T5156] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 265.400794][ T5156] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 265.409292][ T5156] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 265.417367][ T9422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.430935][ T9422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.439885][ T5156] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 265.443671][ T9424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.460063][ T9424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.468927][ T5156] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 266.391192][ T37] bond0 (unregistering): Released all slaves [ 266.495718][ T37] bond1 (unregistering): Released all slaves [ 266.599719][ T37] bond2 (unregistering): Released all slaves [ 266.700146][ T37] bond3 (unregistering): Released all slaves [ 266.779250][ T9424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.798449][ T9424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.837821][ T37] tipc: Disabling bearer [ 266.862134][ T37] tipc: Left network mode [ 266.963256][ T37] IPVS: stopping master sync thread 12811 ... [ 267.427140][T13487] chnl_net:caif_netlink_parms(): no params data found [ 267.492405][ T37] hsr_slave_0: left promiscuous mode [ 267.498676][ T37] hsr_slave_1: left promiscuous mode [ 267.511064][ T37] veth1_vlan: left promiscuous mode [ 267.526907][ T51] Bluetooth: hci2: command tx timeout [ 268.193614][ T5156] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 268.214002][ T5156] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 268.231365][ T5156] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 268.252180][ T5156] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 268.261854][ T5156] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 268.897994][T13534] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1685'. [ 268.939923][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 268.951504][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 268.959943][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 268.970784][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 268.980435][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 269.246352][T13487] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.253765][T13487] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.261810][T13487] bridge_slave_0: entered allmulticast mode [ 269.269963][T13487] bridge_slave_0: entered promiscuous mode [ 269.340273][T13487] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.354072][T13550] xt_hashlimit: size too large, truncated to 1048576 [ 269.369056][T13487] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.382434][T13487] bridge_slave_1: entered allmulticast mode [ 269.403001][T13487] bridge_slave_1: entered promiscuous mode [ 269.429200][T13552] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1688'. [ 269.611162][ T51] Bluetooth: hci2: command tx timeout [ 269.631116][T13548] C: renamed from lo [ 269.648996][T13548] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 269.748639][T13487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.763688][T13487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.929802][T13565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1691'. [ 269.939681][T13565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1691'. [ 269.973369][T13487] team0: Port device team_slave_0 added [ 269.993012][T13487] team0: Port device team_slave_1 added [ 270.091283][T13568] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1692'. [ 270.209309][T13487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.227437][T13487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.254072][T13487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.270989][T13487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.278794][T13487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.305501][T13487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.326837][ T51] Bluetooth: hci3: command tx timeout [ 270.532348][T13580] FAULT_INJECTION: forcing a failure. [ 270.532348][T13580] name failslab, interval 1, probability 0, space 0, times 0 [ 270.560838][T13580] CPU: 1 UID: 0 PID: 13580 Comm: syz.4.1696 Not tainted 6.16.0-rc2-syzkaller-00159-ge0fca6f2cebf #0 PREEMPT(full) [ 270.560869][T13580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 270.560882][T13580] Call Trace: [ 270.560890][T13580] [ 270.560899][T13580] dump_stack_lvl+0x189/0x250 [ 270.560937][T13580] ? __pfx____ratelimit+0x10/0x10 [ 270.560970][T13580] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.561002][T13580] ? __pfx__printk+0x10/0x10 [ 270.561031][T13580] ? __pfx___might_resched+0x10/0x10 [ 270.561077][T13580] should_fail_ex+0x414/0x560 [ 270.561110][T13580] should_failslab+0xa8/0x100 [ 270.561134][T13580] kmem_cache_alloc_noprof+0x73/0x3c0 [ 270.561167][T13580] ? mas_alloc_nodes+0x2e9/0x8e0 [ 270.561202][T13580] mas_alloc_nodes+0x2e9/0x8e0 [ 270.561243][T13580] mas_preallocate+0x39e/0x6b0 [ 270.561279][T13580] ? __pfx_mas_preallocate+0x10/0x10 [ 270.561322][T13580] ? __mas_set_range+0x12f/0x3c0 [ 270.561359][T13580] mmap_region+0xe1e/0x1f30 [ 270.561411][T13580] ? __pfx_mmap_region+0x10/0x10 [ 270.561447][T13580] ? is_bpf_text_address+0x26/0x2b0 [ 270.561493][T13580] ? __lock_acquire+0xab9/0xd20 [ 270.561571][T13580] ? __pfx_aa_get_newest_label+0x10/0x10 [ 270.561618][T13580] ? bpf_lsm_capable+0x9/0x20 [ 270.561636][T13580] ? security_capable+0x7e/0x2e0 [ 270.561670][T13580] do_mmap+0xc45/0x10d0 [ 270.561715][T13580] ? __pfx_do_mmap+0x10/0x10 [ 270.561743][T13580] ? down_write_killable+0x178/0x230 [ 270.561767][T13580] ? __pfx_vfs_write+0x10/0x10 [ 270.561803][T13580] ? __pfx_down_write_killable+0x10/0x10 [ 270.561826][T13580] ? apparmor_mmap_file+0xc4/0xe0 [ 270.561852][T13580] vm_mmap_pgoff+0x31b/0x4c0 [ 270.561888][T13580] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 270.561913][T13580] ? ksys_write+0x22a/0x250 [ 270.561933][T13580] ? __pfx_ksys_write+0x10/0x10 [ 270.561947][T13580] ? rcu_is_watching+0x15/0xb0 [ 270.561980][T13580] ? ksys_mmap_pgoff+0xf4/0x760 [ 270.561999][T13580] ? __x64_sys_mmap+0x7f/0x140 [ 270.562032][T13580] do_syscall_64+0xfa/0x3b0 [ 270.562057][T13580] ? lockdep_hardirqs_on+0x9c/0x150 [ 270.562086][T13580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.562106][T13580] ? clear_bhb_loop+0x60/0xb0 [ 270.562132][T13580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.562151][T13580] RIP: 0033:0x7fecbb38e929 [ 270.562170][T13580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.562188][T13580] RSP: 002b:00007fecbc1ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 270.562210][T13580] RAX: ffffffffffffffda RBX: 00007fecbb5b5fa0 RCX: 00007fecbb38e929 [ 270.562225][T13580] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000200000001000 [ 270.562238][T13580] RBP: 00007fecbc1ba090 R08: ffffffffffffffff R09: 0000000000000000 [ 270.562252][T13580] R10: 0000000000003032 R11: 0000000000000246 R12: 0000000000000002 [ 270.562270][T13580] R13: 0000000000000000 R14: 00007fecbb5b5fa0 R15: 00007ffefb5ef008 [ 270.562304][T13580] [ 271.045961][ T37] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.058593][ T51] Bluetooth: hci4: command tx timeout [ 271.072936][T13518] chnl_net:caif_netlink_parms(): no params data found [ 271.102113][T13535] chnl_net:caif_netlink_parms(): no params data found [ 271.123688][T13487] hsr_slave_0: entered promiscuous mode [ 271.157839][T13487] hsr_slave_1: entered promiscuous mode [ 271.174645][T13487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.198766][T13487] Cannot create hsr debugfs directory [ 271.275082][T13596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1700'. [ 271.339944][ T37] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.475662][ T37] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.660540][ T37] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.686648][ T51] Bluetooth: hci2: command tx timeout [ 271.799816][T13535] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.812801][T13535] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.823993][T13535] bridge_slave_0: entered allmulticast mode [ 271.836734][T13535] bridge_slave_0: entered promiscuous mode [ 271.866116][T13535] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.876059][T13535] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.884169][T13535] bridge_slave_1: entered allmulticast mode [ 271.892558][T13535] bridge_slave_1: entered promiscuous mode [ 271.908326][T13518] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.926703][T13518] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.934003][T13518] bridge_slave_0: entered allmulticast mode [ 271.958205][T13518] bridge_slave_0: entered promiscuous mode [ 271.968302][T13518] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.975583][T13518] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.984810][T13518] bridge_slave_1: entered allmulticast mode [ 271.993425][T13518] bridge_slave_1: entered promiscuous mode [ 272.011752][T13620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1703'. [ 272.019906][T13622] netlink: 'syz.4.1704': attribute type 1 has an invalid length. [ 272.059466][T13535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.152972][T13535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.220470][T13622] bridge0: port 1(batadv1) entered blocking state [ 272.230893][T13622] bridge0: port 1(batadv1) entered disabled state [ 272.241957][T13627] xt_TPROXY: Can be used only with -p tcp or -p udp [ 272.249628][T13622] batadv1: entered allmulticast mode [ 272.272960][T13622] batadv1: entered promiscuous mode [ 272.302005][T13518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.385533][T13518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.413017][ T51] Bluetooth: hci3: command tx timeout [ 272.442991][T13632] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 272.476018][T13535] team0: Port device team_slave_0 added [ 272.494702][T13634] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1708'. [ 272.572240][T13535] team0: Port device team_slave_1 added [ 272.595954][T13518] team0: Port device team_slave_0 added [ 272.694080][T13518] team0: Port device team_slave_1 added [ 272.727286][ T12] batman_adv: batadv1: IGMP Querier appeared [ 272.733693][ T12] batman_adv: batadv1: MLD Querier appeared [ 272.830675][T13641] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1709'. [ 272.839853][T13518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.839877][T13518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.839926][T13518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.914124][ T37] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.938493][T13535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.945761][T13535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.974590][T13535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.008465][T13518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.026614][T13518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.054215][T13518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.090325][T13535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.097706][T13535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.124481][T13535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.135573][ T51] Bluetooth: hci4: command tx timeout [ 273.176099][ T37] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.289303][ T37] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.324709][T13535] hsr_slave_0: entered promiscuous mode [ 273.331487][T13535] hsr_slave_1: entered promiscuous mode [ 273.342034][T13535] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.350205][T13535] Cannot create hsr debugfs directory [ 273.361378][T13518] hsr_slave_0: entered promiscuous mode [ 273.372352][T13518] hsr_slave_1: entered promiscuous mode [ 273.380236][T13518] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.388345][T13518] Cannot create hsr debugfs directory [ 273.420170][ T37] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.575723][T13487] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 273.589683][T13487] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 273.611579][T13487] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 273.668874][T13487] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 273.784884][ T51] Bluetooth: hci2: command tx timeout [ 273.807058][T13661] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1714'. [ 273.983438][T13661] netlink: 'syz.0.1714': attribute type 13 has an invalid length. [ 274.056829][T13661] macvtap0: entered allmulticast mode [ 274.065422][T13661] macvtap0: refused to change device tx_queue_len [ 274.125715][ T37] bridge_slave_1: left allmulticast mode [ 274.140700][ T37] bridge_slave_1: left promiscuous mode [ 274.148799][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.161787][ T37] bridge_slave_0: left allmulticast mode [ 274.192316][ T37] bridge_slave_0: left promiscuous mode [ 274.212943][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.245278][ T37] bridge_slave_1: left allmulticast mode [ 274.256448][ T37] bridge_slave_1: left promiscuous mode [ 274.262320][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.288433][ T37] bridge_slave_0: left allmulticast mode [ 274.294154][ T37] bridge_slave_0: left promiscuous mode [ 274.306795][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.496716][ T51] Bluetooth: hci3: command tx timeout [ 274.902414][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.918349][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.935574][ T37] bond0 (unregistering): Released all slaves [ 275.216976][ T51] Bluetooth: hci4: command tx timeout [ 275.256784][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.270345][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.280898][ T37] bond0 (unregistering): Released all slaves [ 275.315443][T13672] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 275.750942][T13487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.780870][T13487] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.810862][ T9418] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.818106][ T9418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.864325][T13683] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 275.894056][ T9422] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.901252][ T9422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.910893][T13683] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 275.978623][ T37] hsr_slave_0: left promiscuous mode [ 275.986155][ T37] hsr_slave_1: left promiscuous mode [ 276.009723][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.022840][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.030988][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.042939][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.054614][ T37] hsr_slave_0: left promiscuous mode [ 276.065586][ T37] hsr_slave_1: left promiscuous mode [ 276.071747][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.079954][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.089046][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.098019][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.137762][ T37] veth1_macvtap: left promiscuous mode [ 276.143473][ T37] veth0_macvtap: left promiscuous mode [ 276.149931][ T37] veth1_vlan: left promiscuous mode [ 276.155251][ T37] veth0_vlan: left promiscuous mode [ 276.162438][ T37] veth1_macvtap: left promiscuous mode [ 276.168480][ T37] veth0_macvtap: left promiscuous mode [ 276.174151][ T37] veth1_vlan: left promiscuous mode [ 276.179553][ T37] veth0_vlan: left promiscuous mode [ 276.569236][ T51] Bluetooth: hci3: command tx timeout [ 276.975598][ T37] team0 (unregistering): Port device team_slave_1 removed [ 277.024484][ T37] team0 (unregistering): Port device team_slave_0 removed [ 277.286595][ T51] Bluetooth: hci4: command tx timeout [ 277.765986][ T37] team0 (unregistering): Port device team_slave_1 removed [ 277.808951][ T37] team0 (unregistering): Port device team_slave_0 removed [ 278.585543][T13518] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 278.662085][T13518] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 278.698651][T13518] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 278.795104][T13518] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 279.140250][T13518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.157629][T13738] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1733'. [ 279.200409][T13740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1734'. [ 279.202131][T13487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.215324][T13740] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 279.218500][T13737] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1733'. [ 279.270102][T13741] Bluetooth: MGMT ver 1.23 [ 279.293352][T13518] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.368213][ T51] Bluetooth: hci4: command tx timeout [ 279.409701][ T196] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.416963][ T196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.451549][T13535] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 279.508072][T13535] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 279.521885][T13535] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 279.534264][T13535] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 279.567198][ T9424] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.574423][ T9424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.674417][T13487] veth0_vlan: entered promiscuous mode [ 279.733399][T13751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1736'. [ 279.803425][T13487] veth1_vlan: entered promiscuous mode [ 279.973358][T13487] veth0_macvtap: entered promiscuous mode [ 280.001556][T13487] veth1_macvtap: entered promiscuous mode [ 280.060955][T13487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.081688][T13487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.155232][T13487] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.195508][T13487] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.205032][T13487] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.224632][T13487] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.269096][T13535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.350074][T13535] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.412690][ T3492] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.419919][ T3492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.520630][T13518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.528834][T13778] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1742'. [ 280.543812][ T3526] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.551054][ T3526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.664626][ T3492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.687624][ T3492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.723424][T13783] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1744'. [ 280.765498][T13783] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1744'. [ 280.812258][T13535] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 280.817258][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.824964][T13535] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 280.873272][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.945958][T13518] veth0_vlan: entered promiscuous mode [ 280.962371][T13786] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1743'. [ 281.042307][T13518] veth1_vlan: entered promiscuous mode [ 281.199434][T13518] veth0_macvtap: entered promiscuous mode [ 281.228312][T13518] veth1_macvtap: entered promiscuous mode [ 281.291223][T13518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.307186][T13797] netlink: 'syz.0.1747': attribute type 21 has an invalid length. [ 281.333497][T13518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.364694][T13797] netlink: 'syz.0.1747': attribute type 1 has an invalid length. [ 281.405530][T13518] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.415860][T13797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1747'. [ 281.451686][T13518] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.464440][T13518] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.483299][T13518] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.679155][T13535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.779772][T13805] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1749'. [ 281.901692][ T3492] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.037846][ T3492] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.081882][T13535] veth0_vlan: entered promiscuous mode [ 282.097525][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.105430][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.188919][ T3492] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.248896][T13535] veth1_vlan: entered promiscuous mode [ 282.263872][ T9424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.282567][ T9424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.370158][ T3492] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.541637][T13535] veth0_macvtap: entered promiscuous mode [ 282.590670][T13535] veth1_macvtap: entered promiscuous mode [ 282.751417][T13535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.863771][T13535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.921523][ T5156] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 282.932648][ T5156] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 282.942445][ T5156] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 282.952556][ T5156] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 282.964203][ T5156] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 282.972504][T13535] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.982065][T13535] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.992217][T13535] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.001265][T13535] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.018355][ T3492] bridge_slave_1: left allmulticast mode [ 283.024050][ T3492] bridge_slave_1: left promiscuous mode [ 283.060303][ T3492] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.083816][ T3492] bridge_slave_0: left allmulticast mode [ 283.103792][ T3492] bridge_slave_0: left promiscuous mode [ 283.117462][ T3492] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.611482][ T3492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.628760][ T3492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.639360][ T3492] bond0 (unregistering): Released all slaves [ 283.843119][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.862424][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.975239][ T196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.988775][ T196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.988807][ T3492] hsr_slave_0: left promiscuous mode [ 284.004925][ T3492] hsr_slave_1: left promiscuous mode [ 284.013058][ T3492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.021203][ T3492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.032345][ T3492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.040404][ T3492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.061793][ T3492] veth1_macvtap: left promiscuous mode [ 284.067534][ T3492] veth0_macvtap: left promiscuous mode [ 284.073147][ T3492] veth1_vlan: left promiscuous mode [ 284.078617][ T3492] veth0_vlan: left promiscuous mode [ 284.534804][ T3492] team0 (unregistering): Port device team_slave_1 removed [ 284.580734][ T3492] team0 (unregistering): Port device team_slave_0 removed [ 285.047084][ T51] Bluetooth: hci2: command tx timeout [ 285.200992][ T5156] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 285.211747][ T5156] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 285.221729][ T5156] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 285.242770][ T5156] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 285.252381][ T5156] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 285.593121][T13857] vlan3: entered promiscuous mode [ 285.599108][T13859] netlink: 'syz.4.1761': attribute type 1 has an invalid length. [ 285.924299][T13827] chnl_net:caif_netlink_parms(): no params data found [ 286.160601][T13850] chnl_net:caif_netlink_parms(): no params data found [ 286.234141][T13827] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.242046][T13827] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.250352][T13827] bridge_slave_0: entered allmulticast mode [ 286.258413][T13827] bridge_slave_0: entered promiscuous mode [ 286.266299][T13827] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.273499][T13827] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.282096][T13827] bridge_slave_1: entered allmulticast mode [ 286.289860][T13827] bridge_slave_1: entered promiscuous mode [ 286.318816][ T3492] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.404371][ T3492] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.425440][T13827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.461493][T13827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.523379][T13850] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.532410][T13850] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.540281][T13850] bridge_slave_0: entered allmulticast mode [ 286.548687][T13850] bridge_slave_0: entered promiscuous mode [ 286.556832][T13850] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.563938][T13850] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.571675][T13850] bridge_slave_1: entered allmulticast mode [ 286.579965][T13850] bridge_slave_1: entered promiscuous mode [ 286.605854][ T3492] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.626946][T13827] team0: Port device team_slave_0 added [ 286.651906][T13827] team0: Port device team_slave_1 added [ 286.709858][ T3492] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.733994][T13850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.748428][T13850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.774561][T13827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.781879][T13827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.809419][T13827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.020749][T13850] team0: Port device team_slave_0 added [ 287.050377][T13827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.070205][T13827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.133751][ T5156] Bluetooth: hci2: command tx timeout [ 287.151995][T13827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.189295][T13850] team0: Port device team_slave_1 added [ 287.286712][ T5156] Bluetooth: hci3: command tx timeout [ 287.329279][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 287.338836][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 287.346876][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 287.355843][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 287.364462][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 287.418500][T13850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.425512][T13850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.451969][T13850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.485988][T13827] hsr_slave_0: entered promiscuous mode [ 287.493841][T13827] hsr_slave_1: entered promiscuous mode [ 287.500330][T13827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.509277][T13827] Cannot create hsr debugfs directory [ 287.548918][T13850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.556355][T13850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.612701][T13850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.669853][T13902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1770'. [ 287.962837][ T3492] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.998541][T13850] hsr_slave_0: entered promiscuous mode [ 288.007631][T13850] hsr_slave_1: entered promiscuous mode [ 288.014139][T13850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.023425][T13850] Cannot create hsr debugfs directory [ 288.128832][ T3492] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.320047][ T3492] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.384870][T13925] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1776'. [ 288.454836][ T3492] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.752008][T13936] netlink: 'syz.0.1780': attribute type 10 has an invalid length. [ 288.931549][T13893] chnl_net:caif_netlink_parms(): no params data found [ 289.047135][T13949] SET target dimension over the limit! [ 289.104702][ T3492] bridge_slave_1: left allmulticast mode [ 289.114876][ T3492] bridge_slave_1: left promiscuous mode [ 289.127155][ T3492] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.150153][T13954] netlink: 'syz.4.1784': attribute type 2 has an invalid length. [ 289.165234][ T3492] bridge_slave_0: left allmulticast mode [ 289.172611][ T3492] bridge_slave_0: left promiscuous mode [ 289.180853][ T3492] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.206671][ T5156] Bluetooth: hci2: command tx timeout [ 289.216630][ T3492] bridge_slave_1: left allmulticast mode [ 289.227487][ T3492] bridge_slave_1: left promiscuous mode [ 289.233315][ T3492] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.260959][ T3492] bridge_slave_0: left allmulticast mode [ 289.272912][ T3492] bridge_slave_0: left promiscuous mode [ 289.279251][ T3492] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.327549][T13964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1786'. [ 289.337342][T13964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1786'. [ 289.366329][ T5156] Bluetooth: hci3: command tx timeout [ 289.450979][ T5156] Bluetooth: hci4: command tx timeout [ 289.709756][ T3492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.721195][ T3492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.732045][ T3492] bond0 (unregistering): Released all slaves [ 290.036879][ T3492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.052288][ T3492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.063045][ T3492] bond0 (unregistering): Released all slaves [ 290.089612][T13954] mac80211_hwsim hwsim58 ÿ: renamed from wlan1 [ 290.264626][T13893] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.284880][T13893] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.300670][T13893] bridge_slave_0: entered allmulticast mode [ 290.313635][T13893] bridge_slave_0: entered promiscuous mode [ 290.343091][T13975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1787'. [ 290.372352][T13975] bridge_slave_0: entered promiscuous mode [ 290.384707][T13977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1789'. [ 290.441377][T13893] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.454132][T13893] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.462311][T13893] bridge_slave_1: entered allmulticast mode [ 290.475547][T13893] bridge_slave_1: entered promiscuous mode [ 290.639541][T13893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.688273][T13893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.941549][T13827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 291.025585][T13893] team0: Port device team_slave_0 added [ 291.058516][T13827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 291.107949][T13893] team0: Port device team_slave_1 added [ 291.127901][T13827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 291.261117][T13827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 291.274703][T13893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.282128][T13893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.309087][ T5156] Bluetooth: hci2: command tx timeout [ 291.314706][T13893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.348948][ T3492] hsr_slave_0: left promiscuous mode [ 291.355808][ T3492] hsr_slave_1: left promiscuous mode [ 291.362584][ T3492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.384832][ T3492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.393586][ T3492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.406362][ T3492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.426296][ T3492] hsr_slave_0: left promiscuous mode [ 291.432627][ T3492] hsr_slave_1: left promiscuous mode [ 291.439519][ T3492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.447276][ T5156] Bluetooth: hci3: command tx timeout [ 291.453322][ T3492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.467747][ T3492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.475660][ T3492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.526510][ T5156] Bluetooth: hci4: command tx timeout [ 291.541510][ T3492] veth1_macvtap: left promiscuous mode [ 291.547294][ T3492] veth0_macvtap: left promiscuous mode [ 291.553016][ T3492] veth1_vlan: left promiscuous mode [ 291.558491][ T3492] veth0_vlan: left promiscuous mode [ 291.565509][ T3492] veth1_macvtap: left promiscuous mode [ 291.571711][ T3492] veth0_macvtap: left promiscuous mode [ 291.577488][ T3492] veth1_vlan: left promiscuous mode [ 291.582884][ T3492] veth0_vlan: left promiscuous mode [ 291.727521][T14017] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1802'. [ 291.728259][T14016] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1802'. [ 292.445550][ T3492] team0 (unregistering): Port device team_slave_1 removed [ 292.490911][ T3492] team0 (unregistering): Port device team_slave_0 removed [ 293.247936][ T3492] team0 (unregistering): Port device team_slave_1 removed [ 293.293946][ T3492] team0 (unregistering): Port device team_slave_0 removed [ 293.536642][ T5156] Bluetooth: hci3: command tx timeout [ 293.611625][ T5156] Bluetooth: hci4: command tx timeout [ 293.733915][T13893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.751539][T13893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.778825][T13893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.023828][T14042] netlink: 176604 bytes leftover after parsing attributes in process `syz.4.1809'. [ 294.033870][T14042] netlink: zone id is out of range [ 294.061978][T14042] netlink: zone id is out of range [ 294.072064][T14042] netlink: zone id is out of range [ 294.077998][T14042] netlink: zone id is out of range [ 294.083721][T14042] netlink: zone id is out of range [ 294.088311][T13893] hsr_slave_0: entered promiscuous mode [ 294.089304][T14042] netlink: zone id is out of range [ 294.100124][T14042] netlink: zone id is out of range [ 294.104718][T13893] hsr_slave_1: entered promiscuous mode [ 294.105341][T14042] netlink: zone id is out of range [ 294.116499][T14042] netlink: zone id is out of range [ 294.118248][T13893] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.121708][T14042] netlink: get zone limit has 8 unknown bytes [ 294.156740][T13893] Cannot create hsr debugfs directory [ 294.424354][T13850] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 294.470589][T13850] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 294.504170][T13850] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 294.540985][T13850] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 294.611921][T13827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.640992][T14057] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1815'. [ 294.710214][T14065] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1815'. [ 294.772968][T13827] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.790969][ T3526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.800919][ T3526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.845650][ T3526] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.852902][ T3526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.909924][ T3526] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.917109][ T3526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.179806][T13850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.291595][T13850] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.364097][ T9422] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.371455][ T9422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.391947][ T9422] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.399219][ T9422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.414748][T13893] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 295.444541][T13893] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 295.487189][T13893] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 295.542829][T13893] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 295.687711][ T5156] Bluetooth: hci4: command tx timeout [ 295.812419][T13827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.951527][T13893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.993726][T13827] veth0_vlan: entered promiscuous mode [ 296.052295][T13827] veth1_vlan: entered promiscuous mode [ 296.085783][T13893] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.141662][T14104] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1825'. [ 296.148126][ T9422] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.157901][ T9422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.205330][T13827] veth0_macvtap: entered promiscuous mode [ 296.237439][ T9422] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.244767][ T9422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.260130][T13827] veth1_macvtap: entered promiscuous mode [ 296.280563][T13850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.351626][T13827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.367769][T13827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.424108][T13827] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.435078][T13827] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.449889][T13827] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.460105][T13827] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.522064][T13850] veth0_vlan: entered promiscuous mode [ 296.620738][T13850] veth1_vlan: entered promiscuous mode [ 296.890228][T14129] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1831'. [ 296.907034][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.931425][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.948604][T13850] veth0_macvtap: entered promiscuous mode [ 297.016366][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.025626][T13850] veth1_macvtap: entered promiscuous mode [ 297.039270][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.101883][T13850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.168388][T13850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.251600][T13850] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.262883][T13850] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.275281][T13850] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.284644][T13850] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.401830][T13893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.559940][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.576300][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.598001][T14147] xt_recent: Unsupported userspace flags (00000061) [ 297.717746][T14153] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1837'. [ 297.763341][ T9424] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.880332][T13893] veth0_vlan: entered promiscuous mode [ 297.927309][ T9424] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.967437][ T9422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.977020][ T9422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.983257][T13893] veth1_vlan: entered promiscuous mode [ 298.040510][ T9424] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.283363][ T9424] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.316635][T14166] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1839'. [ 298.356777][T14160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1839'. [ 298.387981][T13893] veth0_macvtap: entered promiscuous mode [ 298.426174][T13893] veth1_macvtap: entered promiscuous mode [ 298.507637][T14160] sctp: [Deprecated]: syz.0.1839 (pid 14160) Use of int in max_burst socket option deprecated. [ 298.507637][T14160] Use struct sctp_assoc_value instead [ 298.575051][T13893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.602071][T13893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.666999][T13893] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.686266][T13893] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.695013][T13893] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.721829][T13893] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.781956][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 298.791580][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 298.800760][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 298.809921][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 298.821716][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 298.839523][ T9424] bridge_slave_1: left allmulticast mode [ 298.845221][ T9424] bridge_slave_1: left promiscuous mode [ 298.869011][ T9424] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.880120][ T9424] bridge_slave_0: left allmulticast mode [ 298.885826][ T9424] bridge_slave_0: left promiscuous mode [ 298.893948][ T9424] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.232533][ T9424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.244237][ T9424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.255554][ T9424] bond0 (unregistering): Released all slaves [ 299.544268][ T9422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.560904][ T9422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.649147][ T196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.659019][ T196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.682011][ T9424] hsr_slave_0: left promiscuous mode [ 299.698154][ T9424] hsr_slave_1: left promiscuous mode [ 299.704247][ T9424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.712027][ T9424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.720015][ T9424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.727572][ T9424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.748849][ T9424] veth1_macvtap: left promiscuous mode [ 299.754399][ T9424] veth0_macvtap: left promiscuous mode [ 299.760111][ T9424] veth1_vlan: left promiscuous mode [ 299.765462][ T9424] veth0_vlan: left promiscuous mode [ 300.204509][ T9424] team0 (unregistering): Port device team_slave_1 removed [ 300.244733][ T9424] team0 (unregistering): Port device team_slave_0 removed [ 300.821526][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 300.831372][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 300.846010][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 300.871604][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 300.887485][ T51] Bluetooth: hci2: command tx timeout [ 300.888329][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 300.969741][T14171] chnl_net:caif_netlink_parms(): no params data found [ 301.474892][T14171] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.483119][T14171] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.490959][T14171] bridge_slave_0: entered allmulticast mode [ 301.499875][T14171] bridge_slave_0: entered promiscuous mode [ 301.532871][T14171] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.546623][T14171] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.555250][T14171] bridge_slave_1: entered allmulticast mode [ 301.566090][T14171] bridge_slave_1: entered promiscuous mode [ 301.898532][T14171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.971277][T14171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.045016][T14171] team0: Port device team_slave_0 added [ 302.055437][T14171] team0: Port device team_slave_1 added [ 302.109218][T14171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.116246][T14171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.143808][T14171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.180187][T14171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.190002][T14171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.216364][T14171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.262055][ T9424] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.342243][ T9424] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.403441][T14171] hsr_slave_0: entered promiscuous mode [ 302.413678][T14171] hsr_slave_1: entered promiscuous mode [ 302.422615][T14171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 302.433506][T14171] Cannot create hsr debugfs directory [ 302.454834][ T9424] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.481107][T14188] chnl_net:caif_netlink_parms(): no params data found [ 302.557323][ T9424] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.715295][T14188] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.722592][T14188] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.730816][T14188] bridge_slave_0: entered allmulticast mode [ 302.739158][T14188] bridge_slave_0: entered promiscuous mode [ 302.747341][T14188] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.754509][T14188] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.762043][T14188] bridge_slave_1: entered allmulticast mode [ 302.770445][T14188] bridge_slave_1: entered promiscuous mode [ 302.952390][T14188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.968170][ T5835] Bluetooth: hci2: command tx timeout [ 302.974154][ T5835] Bluetooth: hci3: command tx timeout [ 303.080183][T14188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.320035][ T9424] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.398719][T14188] team0: Port device team_slave_0 added [ 303.400396][ T5156] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 303.416721][ T5156] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 303.426472][ T5156] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 303.435185][T14188] team0: Port device team_slave_1 added [ 303.443228][ T5156] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 303.452249][ T5156] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 303.542004][ T9424] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.679387][T14188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.693031][T14188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.721398][T14188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.778701][ T9424] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.827400][T14188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.834411][T14188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.866255][T14188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.282802][ T9424] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.323792][T14256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1860'. [ 304.379567][T14188] hsr_slave_0: entered promiscuous mode [ 304.393131][T14188] hsr_slave_1: entered promiscuous mode [ 304.407171][T14188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.414786][T14188] Cannot create hsr debugfs directory [ 304.694952][T14171] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 304.735500][T14171] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 304.792583][T14171] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 304.815620][T14171] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 304.946100][ T9424] bridge_slave_1: left allmulticast mode [ 304.960698][ T9424] bridge_slave_1: left promiscuous mode [ 304.969675][ T9424] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.984929][ T9424] bridge_slave_0: left allmulticast mode [ 304.993027][ T9424] bridge_slave_0: left promiscuous mode [ 305.003971][ T9424] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.020145][ T9424] bridge_slave_1: left allmulticast mode [ 305.025936][ T9424] bridge_slave_1: left promiscuous mode [ 305.037861][ T9424] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.049259][ T5156] Bluetooth: hci3: command tx timeout [ 305.049257][ T5835] Bluetooth: hci2: command tx timeout [ 305.074137][ T9424] bridge_slave_0: left allmulticast mode [ 305.079887][ T9424] bridge_slave_0: left promiscuous mode [ 305.085722][ T9424] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.470622][ T9424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.481995][ T9424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.492841][ T9424] bond0 (unregistering): Released all slaves [ 305.540258][ T5835] Bluetooth: hci4: command tx timeout [ 305.789520][ T9424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.804211][ T9424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.815166][ T9424] bond0 (unregistering): Released all slaves [ 306.568476][T14241] chnl_net:caif_netlink_parms(): no params data found [ 307.034219][ T9424] hsr_slave_0: left promiscuous mode [ 307.040536][ T9424] hsr_slave_1: left promiscuous mode [ 307.046670][ T9424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.054113][ T9424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.063145][ T9424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.075562][ T9424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.099222][ T9424] hsr_slave_0: left promiscuous mode [ 307.105553][ T9424] hsr_slave_1: left promiscuous mode [ 307.116539][ T9424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.124029][ T9424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.131554][ T5835] Bluetooth: hci3: command tx timeout [ 307.131587][ T5156] Bluetooth: hci2: command tx timeout [ 307.143798][ T9424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.151626][ T9424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.190687][ T9424] veth1_macvtap: left promiscuous mode [ 307.196536][ T9424] veth0_macvtap: left promiscuous mode [ 307.202170][ T9424] veth1_vlan: left promiscuous mode [ 307.208743][ T9424] veth0_vlan: left promiscuous mode [ 307.215252][ T9424] veth1_macvtap: left promiscuous mode [ 307.220908][ T9424] veth0_macvtap: left promiscuous mode [ 307.226726][ T9424] veth1_vlan: left promiscuous mode [ 307.232057][ T9424] veth0_vlan: left promiscuous mode [ 307.616538][ T5156] Bluetooth: hci4: command tx timeout [ 307.832088][ T9424] team0 (unregistering): Port device team_slave_1 removed [ 307.874525][ T9424] team0 (unregistering): Port device team_slave_0 removed [ 308.615211][ T9424] team0 (unregistering): Port device team_slave_1 removed [ 308.662548][ T9424] team0 (unregistering): Port device team_slave_0 removed [ 309.056041][T14188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 309.116453][T14241] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.123657][T14241] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.142531][T14241] bridge_slave_0: entered allmulticast mode [ 309.150744][T14241] bridge_slave_0: entered promiscuous mode [ 309.161080][T14188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 309.178639][T14188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 309.194992][T14241] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.204716][T14241] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.211791][ T5156] Bluetooth: hci3: command tx timeout [ 309.234556][T14241] bridge_slave_1: entered allmulticast mode [ 309.251447][T14241] bridge_slave_1: entered promiscuous mode [ 309.258524][T14331] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1880'. [ 309.296556][T14171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.305892][T14188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 309.395854][T14241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.415653][T14241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.553672][T14241] team0: Port device team_slave_0 added [ 309.589996][T14241] team0: Port device team_slave_1 added [ 309.639846][T14346] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 309.656085][T14346] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 309.674313][T14345] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 309.683778][T14345] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 309.696316][ T5156] Bluetooth: hci4: command tx timeout [ 309.794634][T14241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.816834][T14241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.857007][T14241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.873223][T14171] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.913825][T14241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.921038][T14241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.929912][T14352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1885'. [ 309.976663][T14241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.031143][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.038439][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.059566][T14352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1885'. [ 310.108567][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.115773][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.252480][T14241] hsr_slave_0: entered promiscuous mode [ 310.261341][T14241] hsr_slave_1: entered promiscuous mode [ 310.277483][T14241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.285200][T14241] Cannot create hsr debugfs directory [ 310.329067][T14367] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1888'. [ 310.522980][T14371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1890'. [ 310.780118][T14188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.833131][T14383] tipc: Started in network mode [ 310.838461][T14383] tipc: Node identity ac14140f, cluster identity 4711 [ 310.845515][T14383] tipc: New replicast peer: 255.255.255.255 [ 310.853869][T14383] tipc: Enabled bearer , priority 10 [ 310.921445][T14188] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.004236][ T196] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.011458][ T196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.080767][ T196] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.088004][ T196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.135463][T14171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.299076][T14171] veth0_vlan: entered promiscuous mode [ 311.324372][T14171] veth1_vlan: entered promiscuous mode [ 311.398212][T14171] veth0_macvtap: entered promiscuous mode [ 311.441682][T14171] veth1_macvtap: entered promiscuous mode [ 311.567865][T14241] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 311.604699][T14241] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 311.648650][T14241] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 311.664354][T14171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.696746][T14241] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 311.724541][T14171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.772652][ T5156] Bluetooth: hci4: command tx timeout [ 311.791236][T14171] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.821377][T14171] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.837221][T14171] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.845953][T14171] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.942819][T14188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.969720][ T8593] tipc: Node number set to 2886997007 [ 312.111613][T14188] veth0_vlan: entered promiscuous mode [ 312.183568][T14188] veth1_vlan: entered promiscuous mode [ 312.203322][ T196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.216764][ T196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.291927][ T9422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.298412][T14188] veth0_macvtap: entered promiscuous mode [ 312.309102][ T9422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.335329][T14241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.361207][T14188] veth1_macvtap: entered promiscuous mode [ 312.475251][T14188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.490426][T14435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1903'. [ 312.498827][T14241] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.512348][T14188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.548305][T14188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.559159][T14188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.568955][T14188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.578578][T14188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.591572][ T9424] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.598792][ T9424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.620273][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.627450][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.841506][ T9424] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI [ 312.853459][ T9424] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 312.863014][ T9424] CPU: 0 UID: 0 PID: 9424 Comm: kworker/u8:13 Not tainted 6.16.0-rc2-syzkaller-00159-ge0fca6f2cebf #0 PREEMPT(full) [ 312.875259][ T9424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 312.885325][ T9424] Workqueue: netns cleanup_net [ 312.890108][ T9424] RIP: 0010:mld_clear_delrec+0x34a/0x5d0 [ 312.895757][ T9424] Code: ff ff ff e8 c8 3c 41 01 89 c5 31 ff 89 c6 e8 ed 31 9b f7 85 ed 74 40 e8 a4 2d 9b f7 eb 05 e8 9d 2d 9b f7 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 a7 ab fe f7 4d 8b 27 49 8d 7f 30 [ 312.915389][ T9424] RSP: 0018:ffffc90003f9f070 EFLAGS: 00010206 [ 312.921473][ T9424] RAX: 000000001fffe000 RBX: ffff888052c78538 RCX: ffff88802a051e00 [ 312.929460][ T9424] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 312.937440][ T9424] RBP: 0000000000000001 R08: ffffffff8fa110f7 R09: 1ffffffff1f4221e [ 312.945423][ T9424] R10: dffffc0000000000 R11: fffffbfff1f4221f R12: ffff88807a5b8828 [ 312.953403][ T9424] R13: dffffc0000000000 R14: ffff88807a5b8800 R15: 00000000ffff0000 [ 312.961384][ T9424] FS: 0000000000000000(0000) GS:ffff888125c51000(0000) knlGS:0000000000000000 [ 312.970322][ T9424] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 312.976915][ T9424] CR2: 00007fecbb580ab8 CR3: 0000000027ac2000 CR4: 00000000003526f0 [ 312.984903][ T9424] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 312.992884][ T9424] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 313.000863][ T9424] Call Trace: [ 313.004158][ T9424] [ 313.007108][ T9424] ipv6_mc_destroy_dev+0x45/0x5a0 [ 313.012151][ T9424] ? addrconf_ifdown+0x1396/0x1880 [ 313.017275][ T9424] addrconf_ifdown+0x139e/0x1880 [ 313.022228][ T9424] ? tls_dev_event+0x717/0xec0 [ 313.026997][ T9424] ? __pfx_addrconf_ifdown+0x10/0x10 [ 313.032300][ T9424] addrconf_notify+0x1bc/0x1010 [ 313.037165][ T9424] notifier_call_chain+0x1b3/0x3e0 [ 313.042300][ T9424] unregister_netdevice_many_notify+0x15d8/0x2320 [ 313.048737][ T9424] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 313.055517][ T9424] ? rcu_is_watching+0x15/0xb0 [ 313.060299][ T9424] ? trace_contention_end+0x39/0x120 [ 313.065595][ T9424] ? __mutex_lock+0x330/0xe80 [ 313.070277][ T9424] ? rtnl_net_dev_lock+0x36/0x2f0 [ 313.075317][ T9424] ? rtnl_is_locked+0x15/0x20 [ 313.080008][ T9424] ? nsim_destroy+0xdb/0x670 [ 313.084617][ T9424] unregister_netdevice_queue+0x33c/0x380 [ 313.090356][ T9424] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 313.096620][ T9424] nsim_destroy+0x1f6/0x670 [ 313.101142][ T9424] __nsim_dev_port_del+0x14d/0x1b0 [ 313.106264][ T9424] nsim_dev_reload_destroy+0x288/0x490 [ 313.111735][ T9424] nsim_dev_reload_down+0x8a/0xc0 [ 313.116772][ T9424] devlink_reload+0x1b3/0x8d0 [ 313.121456][ T9424] ? xa_get_mark+0x67/0x7b0 [ 313.125972][ T9424] ? __pfx_devlink_reload+0x10/0x10 [ 313.131185][ T9424] ? xa_get_mark+0x70f/0x7b0 [ 313.135793][ T9424] devlink_pernet_pre_exit+0x1d9/0x3d0 [ 313.141267][ T9424] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 313.147269][ T9424] ? class_remove_file_ns+0x121/0x160 [ 313.152687][ T9424] ops_undo_list+0x184/0x990 [ 313.157296][ T9424] ? __pfx_ops_undo_list+0x10/0x10 [ 313.162418][ T9424] cleanup_net+0x4c5/0x800 [ 313.166845][ T9424] ? __pfx_cleanup_net+0x10/0x10 [ 313.171794][ T9424] ? _raw_spin_unlock_irq+0x23/0x50 [ 313.177007][ T9424] ? process_scheduled_works+0x9ef/0x17b0 [ 313.182744][ T9424] ? process_scheduled_works+0x9ef/0x17b0 [ 313.188478][ T9424] process_scheduled_works+0xae1/0x17b0 [ 313.194050][ T9424] ? __pfx_process_scheduled_works+0x10/0x10 [ 313.200054][ T9424] worker_thread+0x8a0/0xda0 [ 313.204649][ T9424] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 313.210996][ T9424] ? __kthread_parkme+0x7b/0x200 [ 313.215948][ T9424] kthread+0x70e/0x8a0 [ 313.220030][ T9424] ? __pfx_worker_thread+0x10/0x10 [ 313.225159][ T9424] ? __pfx_kthread+0x10/0x10 [ 313.229760][ T9424] ? _raw_spin_unlock_irq+0x23/0x50 [ 313.234970][ T9424] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.240180][ T9424] ? __pfx_kthread+0x10/0x10 [ 313.244778][ T9424] ret_from_fork+0x3f9/0x770 [ 313.249396][ T9424] ? __pfx_ret_from_fork+0x10/0x10 [ 313.254535][ T9424] ? __switch_to_asm+0x39/0x70 [ 313.259396][ T9424] ? __switch_to_asm+0x33/0x70 [ 313.264178][ T9424] ? __pfx_kthread+0x10/0x10 [ 313.268778][ T9424] ret_from_fork_asm+0x1a/0x30 [ 313.273556][ T9424] [ 313.276581][ T9424] Modules linked in: [ 313.283666][ T9424] ---[ end trace 0000000000000000 ]--- [ 313.308971][ T9424] RIP: 0010:mld_clear_delrec+0x34a/0x5d0 [ 313.315018][ T9424] Code: ff ff ff e8 c8 3c 41 01 89 c5 31 ff 89 c6 e8 ed 31 9b f7 85 ed 74 40 e8 a4 2d 9b f7 eb 05 e8 9d 2d 9b f7 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 a7 ab fe f7 4d 8b 27 49 8d 7f 30 [ 313.335425][ T9424] RSP: 0018:ffffc90003f9f070 EFLAGS: 00010206 [ 313.357776][ T9424] RAX: 000000001fffe000 RBX: ffff888052c78538 RCX: ffff88802a051e00 [ 313.365823][ T9424] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 313.375008][ T9424] RBP: 0000000000000001 R08: ffffffff8fa110f7 R09: 1ffffffff1f4221e [ 313.385143][ T9424] R10: dffffc0000000000 R11: fffffbfff1f4221f R12: ffff88807a5b8828 [ 313.393423][ T9424] R13: dffffc0000000000 R14: ffff88807a5b8800 R15: 00000000ffff0000 [ 313.402555][ T9424] FS: 0000000000000000(0000) GS:ffff888125c51000(0000) knlGS:0000000000000000 [ 313.411916][ T9424] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 313.418789][ T9424] CR2: 00007fecbb580ab8 CR3: 000000003185a000 CR4: 00000000003526f0 [ 313.427151][ T9424] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 313.435152][ T9424] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 313.443169][ T9424] Kernel panic - not syncing: Fatal exception [ 313.449557][ T9424] Kernel Offset: disabled [ 313.453889][ T9424] Rebooting in 86400 seconds..