last executing test programs: 4.256693784s ago: executing program 2 (id=2878): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000005000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x2, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c100000", @ANYRES16=r1, @ANYBLOB="0100000000000000000012000000180001801400020073797a5f74756e000000000000000000"], 0x2c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a3000000000140007800500150000000000080012400006000011000300686173683a69702c6d61726b000000000500050002000000"], 0x60}}, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8], 0x3c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, 0x0, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r9, 0xee00}}}], 0x20}}], 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000fefffffb000000000000000085000000bc000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", ['\x00']}, 0x178) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) write(r8, &(0x7f0000000040)="0a03000019002551075c0165ff0ffc02802000030004000500e1000cee020f001a000000", 0x33a) 4.017000623s ago: executing program 2 (id=2881): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x15, 0x5, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) unshare(0x68040200) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5d8, 0x438, 0x0, 0x208, 0x0, 0xf8, 0x508, 0x508, 0x508, 0x508, 0x508, 0x6, 0x0, {[{{@uncond, 0x2ac, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ipv6={@loopback, @local, [], [], 'veth0_to_bond\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@unspec=@state={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@ipv6={@mcast2, @loopback, [], [], 'ip6gretap0\x00', 'bridge_slave_0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@mcast2}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@local, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x638) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = socket$isdn(0x22, 0x3, 0x24) accept(r5, &(0x7f00000002c0)=@xdp, &(0x7f0000000340)=0x80) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet(r6, &(0x7f0000001fc0)={0x2, 0x0, @remote}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x5, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180058000000000000000000000000009500040000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x40000}, 0x90) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x11e, 0x13, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000380)={'ip_vti0\x00', r4, 0x8, 0x80, 0x88, 0x5, {{0x46, 0x4, 0x1, 0x20, 0x118, 0x64, 0x0, 0x97, 0x29, 0x0, @local, @loopback, {[@cipso={0x86, 0x92, 0x0, [{0x1, 0xa, "9e38f146316821ee"}, {0x1, 0x5, "86521d"}, {0x7, 0xc, "a889e9bbf67cdbdbce82"}, {0x5, 0x11, "d0cc636b4a51aa59b6794523fff76d"}, {0x5, 0xb, "8cc3fc160cc03df6b9"}, {0x0, 0x12, "ae04cd78b3d244c7efa73e91b3f031f8"}, {0x0, 0xf, "0d367e78623b1597fb7c565423"}, {0x0, 0xa, "b55f6cc9ae986157"}, {0x0, 0x9, "5bdb79852cb1ce"}, {0x1, 0xa, "8cadf7bc6e3eada6"}, {0x6, 0x6, "2bf3a108"}, {0x1, 0x11, "74584747f85d0dce3a0bba47254d3b"}]}, @end, @end, @timestamp={0x44, 0x10, 0x6d, 0x0, 0xa, [0x80000000, 0x5, 0x6]}, @rr={0x7, 0x1b, 0x24, [@broadcast, @private=0xa010102, @remote, @multicast1, @broadcast, @empty]}, @end, @cipso={0x86, 0x43, 0xffffffffffffffff, [{0x0, 0x3, '*'}, {0x2, 0x11, "19208e56ac04e038759c2cef54c667"}, {0x6, 0x9, "5458067183595b"}, {0x7, 0x2}, {0x1, 0x11, "a26e150ce167ef2b534f61fb7a2b05"}, {0x5, 0xd, "87d7ce96abf7f4cbb4ea7e"}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@bridge_delvlan={0x3c, 0x71, 0x400, 0x70bd28, 0x25dfdbff, {0x7, 0x0, 0x0, r8}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x6, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x9}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x8}}]}, 0x3c}}, 0x80) 2.392279392s ago: executing program 4 (id=2898): syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x4000400) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendfile(r1, r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, 0x4, 0x8, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x4, 0x1, 'veth1\x00'}, {0x14, 0x1, 'dvmrp1\x00'}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r0], 0x3c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) write(r6, 0x0, 0x0) 2.022748898s ago: executing program 4 (id=2900): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$nl_route_sched(r0, &(0x7f0000004b80)={0x0, 0x0, &(0x7f0000004b40)={&(0x7f0000000280)=@newqdisc={0x24}, 0x24}}, 0x0) socket(0x10, 0x803, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x6) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041feff5aff2b0000000000000700"/68, 0x44}, {&(0x7f0000000080)="c1130389", 0x4}], 0x2) readv(r1, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/94, 0x5e}], 0x1) 1.887990711s ago: executing program 4 (id=2902): unshare(0x2000400) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000000, 0xe00, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000200), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r4, 0x0) connect$rds(r4, &(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10) r5 = socket(0x1, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xbf, &(0x7f000000cf3d)=""/191, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff}, 0x10}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r5}, 0x20) bind$unix(r5, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) r8 = socket(0x1, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x16, &(0x7f0000000580)=@raw=[@generic={0x40, 0x2, 0x3, 0x7, 0x401}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x8, 0x7, 0x8, 0x7, 0x4}, @call={0x85, 0x0, 0x0, 0x71}, @map_fd={0x18, 0x0, 0x1, 0x0, r7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x2c, &(0x7f0000000480)=""/44, 0x41000, 0x25, '\x00', r2, 0x25, r4, 0x8, &(0x7f00000004c0)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000640)=[{0x3, 0x2, 0xa, 0x7}], 0x10, 0x4}, 0x90) sendmmsg$unix(r8, &(0x7f0000001680)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r3, 0x40047451, 0x2000000a) 1.746466981s ago: executing program 2 (id=2903): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x24}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', r0, 0x15}, 0x90) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfb}, 0xc) accept(r2, &(0x7f0000000180), &(0x7f0000001200)=0x80) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbff}, 0xc) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001780)={r1, 0x0, 0x15, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.710865077s ago: executing program 3 (id=2904): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x8b}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='memory.numa_stat\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'macvtap0\x00', 0x1000}) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x24020400) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x200, 0x5, 0x6, 0x0, r0, 0x9, '\x00', 0x0, r2, 0x1, 0x4, 0x4}, 0x48) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000640)={'vxcan1\x00', 0x0}) sendto$packet(r6, &(0x7f0000000080)="18", 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r8}, 0x38) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x22020400) setsockopt$inet_udp_int(r9, 0x11, 0xb, &(0x7f00000006c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2219}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) unshare(0x0) 1.680742275s ago: executing program 0 (id=2905): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x7b}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x8}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.572007703s ago: executing program 2 (id=2906): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000080)=""/74, &(0x7f0000000000)=0x4a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_alloc\x00', r0}, 0x10) r2 = socket(0x25, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x38, 0x1406, 0x10, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c044}, 0x20000011) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000040), 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x75) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000009c0)='m ', 0x2}], 0x1}, 0x4000005) recvmsg$unix(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xcd, 0x1}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r6}, 0x10) 1.431703833s ago: executing program 0 (id=2908): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000002c0)={'team_slave_1\x00', 0x400}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x405, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x7, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000000000002eeed88696", @ANYRES32=r6], 0x20}}, 0x0) 1.265582918s ago: executing program 3 (id=2910): syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x4000400) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendfile(r1, r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, 0x4, 0x8, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x4, 0x1, 'veth1\x00'}, {0x14, 0x1, 'dvmrp1\x00'}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r0], 0x3c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) write(r6, 0x0, 0x0) 1.179624678s ago: executing program 1 (id=2911): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) 1.072352385s ago: executing program 0 (id=2912): unshare(0x400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x0, 0x11, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x108, 0x19, &(0x7f00000003c0)=@bpq0, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) 1.035351095s ago: executing program 1 (id=2913): r0 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000280)="875b8029d93ec7c63d0c270fefb4126e6da83d2222a9264bac365d40809b097b1fe487920de009812e44e96b5edad8fa96fa76591c92bd6c0d1d90e7f43ccaf74c3022a3eab00563565c68ab982bcc95ad725237dd22a819a73d004d086cbebf13367737e52deb68743797f0fb0f1ae2f2b2", 0x72}], 0x1) 926.19971ms ago: executing program 4 (id=2914): unshare(0x28000600) socket(0x25, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3be) 911.398064ms ago: executing program 0 (id=2915): setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = epoll_create1(0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) (async) poll(&(0x7f0000000100)=[{r1}, {r0}], 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) (async) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r2, &(0x7f00000000c0)="044a", 0x2, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 868.148691ms ago: executing program 3 (id=2916): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) socket$packet(0x11, 0x0, 0x300) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="260669486b08f0513b2a30b269e29abd"], 0x11}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket(0x1, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r4}, 0x20) bind$unix(r4, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x5452, &(0x7f0000000000)={'syztnl1\x00', 0x0}) recvmsg(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0) sendmmsg$unix(r4, &(0x7f0000002100)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x143ffd, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r6, &(0x7f0000000180), 0x20000000}, 0x20) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000000c0)={r6, &(0x7f0000000180), 0x0}, 0x20) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) 830.498098ms ago: executing program 1 (id=2917): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000005000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x2, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c100000", @ANYRES16=r1, @ANYBLOB="0100000000000000000012000000180001801400020073797a5f74756e000000000000000000"], 0x2c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a3000000000140007800500150000000000080012400006000011000300686173683a69702c6d61726b000000000500050002000000"], 0x60}}, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8], 0x3c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, 0x0, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r9, 0xee00}}}], 0x20}}], 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000fefffffb000000000000000085000000bc000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", ['\x00']}, 0x178) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) write(r8, &(0x7f0000000040)="0a03000019002551075c0165ff0ffc02802000030004000500e1000cee020f001a000000", 0x33a) 590.935855ms ago: executing program 0 (id=2918): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x7b}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x8}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 531.293517ms ago: executing program 1 (id=2919): sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)={0x14}, 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@deltaction={0x2bc, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x90, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x6c, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x2bc}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0xc}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x1bc}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 530.171242ms ago: executing program 2 (id=2920): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100f1ff000000c5d3000000000000107b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000072"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x10, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 464.114995ms ago: executing program 4 (id=2921): r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xc0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x4, &(0x7f0000000700)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x7f, 0x42, 0x40}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r4}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001480)={&(0x7f0000001300), 0x0, 0x0, 0x0, 0x7, r4}, 0x38) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) close(r5) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmsg$NL80211_CMD_GET_SURVEY(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[], 0xfdef}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)={0xbc, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x56, 0xe, {{{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_FTM_RESPONDER={0x18, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x5, 0x2, "e9"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x5, 0x3, "d7"}]}, @NL80211_ATTR_IE_PROBE_RESP={0xd, 0x7f, [@sec_chan_ofs={0x3e, 0x1}, @chsw_timing={0x68, 0x4}]}, @NL80211_ATTR_PROBE_RESP={0x5, 0x91, '3'}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xbc}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xa, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x50}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="05000000000000000000000000080000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000000001"], 0x48}}, 0x0) 392.947208ms ago: executing program 3 (id=2922): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_PIM(r0, 0x29, 0x48, 0x0, 0x2000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{}]}, 0x10) 385.378389ms ago: executing program 1 (id=2923): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0) 351.372857ms ago: executing program 0 (id=2924): unshare(0x2000400) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000000, 0xe00, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000200), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r4, 0x0) connect$rds(r4, &(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10) r5 = socket(0x1, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xbf, &(0x7f000000cf3d)=""/191, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff}, 0x10}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r5}, 0x20) bind$unix(r5, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) r8 = socket(0x1, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x16, &(0x7f0000000580)=@raw=[@generic={0x40, 0x2, 0x3, 0x7, 0x401}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x8, 0x7, 0x8, 0x7, 0x4}, @call={0x85, 0x0, 0x0, 0x71}, @map_fd={0x18, 0x0, 0x1, 0x0, r7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x2c, &(0x7f0000000480)=""/44, 0x41000, 0x25, '\x00', r2, 0x25, r4, 0x8, &(0x7f00000004c0)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000640)=[{0x3, 0x2, 0xa, 0x7}], 0x10, 0x4}, 0x90) sendmmsg$unix(r8, &(0x7f0000001680)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r3, 0x40047451, 0x2000000a) 292.28114ms ago: executing program 2 (id=2925): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) socket$packet(0x11, 0x0, 0x300) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="260669486b08f0513b2a30b269e29abd"], 0x11}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket(0x1, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r4}, 0x20) bind$unix(r4, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x5452, &(0x7f0000000000)={'syztnl1\x00', 0x0}) recvmsg(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x143ffd, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r6, &(0x7f0000000180), 0x20000000}, 0x20) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000000c0)={r6, &(0x7f0000000180), 0x0}, 0x20) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) 287.026617ms ago: executing program 1 (id=2926): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000013c0)=0xc) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmmsg$unix(r3, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)='8', 0x1}], 0x1, &(0x7f0000000040)=[@cred={{0x1c, 0x1, 0x2, {r4, 0x0, r6}}}], 0x20}}], 0x1, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2800000013002108000000000000000005000080370000000600000021a50097fdfc59bf", @ANYRES32=r4, @ANYBLOB], 0x28}], 0x1}, 0x0) write$binfmt_script(r1, 0x0, 0x4e) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) tee(r0, r7, 0x3, 0x0) vmsplice(r0, &(0x7f0000000680)=[{&(0x7f0000000000)='*', 0x1}], 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0xb0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000, 0x44}, 0x1e) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="180000002a00090000000000000000000400002c040012809aa2e133794053e7bb1dbd3ebcc11075e072c3254ec95927762fcd4cfb6a236461bcc77861f1a0c9a2fbb1f180bc06a74fda8a8b5fbb9507733681523e922f4048abe57660106cb577c7aeaaf5c9c15efe2f32af363fc93a307a7109c2e8e68c05020000007a148a3177"], 0x18}, 0x1, 0x3000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e00)=ANY=[@ANYBLOB="a881628892e6ddecc9fa00f8ffffffffffff944c59ae5102100000ed0500000000000000000000000300050000"], 0x28}}, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r11}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x2c, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x810}, 0x60c4) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000000000000000800070900010073797a3000000000140000001100010004a498c2e2ff00000000000a00"/72], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 222.536894ms ago: executing program 3 (id=2927): r0 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r0, &(0x7f0000000080), 0x0) 74.347235ms ago: executing program 4 (id=2928): socket$kcm(0x2, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x0, 0x10}, 0xc) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x1d, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x40000000015, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2717, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "922ff5", 0x10, 0x21, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "114f84", 0x0, "8e269c"}}}}}}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000}, 0x1c) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x60, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x43, 0x33, @beacon={{{}, {}, @broadcast}, 0x0, @random=0xffff, 0xe552, @val={0x0, 0x7, @random="2c1f0000006568"}, @val, @void, @val={0x4, 0x6}, @void, @void, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @void, @void, @void}}]}, 0x60}}, 0x0) 0s ago: executing program 3 (id=2929): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000005000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x2, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c100000", @ANYRES16=r1, @ANYBLOB="0100000000000000000012000000180001801400020073797a5f74756e000000000000000000"], 0x2c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8], 0x3c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, 0x0, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r10, 0xee00}}}], 0x20}}], 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000fefffffb000000000000000085000000bc000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", ['\x00']}, 0x178) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) write(r9, &(0x7f0000000040)="0a03000019002551075c0165ff0ffc02802000030004000500e1000cee020f001a000000", 0x33a) kernel console output (not intermixed with test programs): z.3.977': attribute type 15 has an invalid length. [ 159.306298][ T8162] netlink: 56 bytes leftover after parsing attributes in process `syz.4.979'. [ 159.474272][ T8174] dccp_invalid_packet: P.Data Offset(100) too large [ 159.637901][ T8177] ip6gretap0: entered promiscuous mode [ 159.676688][ T8177] ip6gretap0: left promiscuous mode [ 159.870895][ T8191] netlink: 1 bytes leftover after parsing attributes in process `syz.0.991'. [ 159.932259][ T8189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.993'. [ 160.116299][ T8200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.995'. [ 160.147048][ T8200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.995'. [ 160.215611][ T8203] pimreg: entered allmulticast mode [ 160.447432][ T8213] dccp_invalid_packet: P.Data Offset(100) too large [ 160.676245][ T8222] dccp_invalid_packet: P.Data Offset(100) too large [ 161.069386][ T8248] dccp_invalid_packet: P.Data Offset(100) too large [ 161.625969][ T8268] ip6gretap0: entered promiscuous mode [ 161.674337][ T8268] ip6gretap0: left promiscuous mode [ 161.675135][ T8271] dccp_invalid_packet: P.Data Offset(100) too large [ 161.936330][ T8274] dccp_invalid_packet: P.Data Offset(100) too large [ 162.421881][ T8300] ip6gretap0: entered promiscuous mode [ 162.438942][ T8300] ip6gretap0: left promiscuous mode [ 162.653645][ T8312] dccp_invalid_packet: P.Data Offset(100) too large [ 163.145628][ T8331] __nla_validate_parse: 25 callbacks suppressed [ 163.145667][ T8331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1040'. [ 163.178247][ T8332] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1041'. [ 163.212235][ T8332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1041'. [ 163.249500][ T8332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1041'. [ 163.430660][ T8336] netlink: zone id is out of range [ 163.437355][ T8336] netlink: zone id is out of range [ 163.446276][ T8336] netlink: zone id is out of range [ 163.456362][ T8336] netlink: zone id is out of range [ 163.467603][ T8336] netlink: zone id is out of range [ 163.480866][ T8336] netlink: zone id is out of range [ 163.662300][ T8350] ip6gretap0: entered promiscuous mode [ 163.679573][ T8350] ip6gretap0: left promiscuous mode [ 163.725048][ T8354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1050'. [ 163.852295][ T8358] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1052'. [ 163.889545][ T8358] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1052'. [ 163.929598][ T8361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1053'. [ 163.978262][ T8371] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1052'. [ 164.350448][ T8390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1064'. [ 164.397894][ T8394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.059927][ T8425] tipc: Enabling of bearer rejected, media not registered [ 165.238249][ T8430] ip6gretap0: entered promiscuous mode [ 165.281380][ T8430] ip6gretap0: left promiscuous mode [ 165.437537][ T8443] sit0: entered promiscuous mode [ 165.508521][ T8443] netlink: 'syz.1.1079': attribute type 1 has an invalid length. [ 166.076478][ T8456] net_ratelimit: 600 callbacks suppressed [ 166.076501][ T8456] netlink: zone id is out of range [ 166.132906][ T8456] netlink: zone id is out of range [ 166.138094][ T8456] netlink: zone id is out of range [ 166.173645][ T8465] netlink: zone id is out of range [ 166.178831][ T8465] netlink: zone id is out of range [ 166.199529][ T8470] netlink: zone id is out of range [ 166.205059][ T8470] netlink: zone id is out of range [ 166.207683][ T8456] netlink: zone id is out of range [ 166.213222][ T8470] netlink: zone id is out of range [ 166.220852][ T8456] netlink: zone id is out of range [ 166.683922][ T8484] ip6gretap0: entered promiscuous mode [ 166.736015][ T8484] ip6gretap0: left promiscuous mode [ 167.279396][ T8511] netlink: 'syz.3.1102': attribute type 15 has an invalid length. [ 167.557599][ T8523] netlink: 'syz.2.1105': attribute type 12 has an invalid length. [ 167.842331][ T8531] ip6gretap0: entered promiscuous mode [ 167.875588][ T8531] ip6gretap0: left promiscuous mode [ 168.327303][ T8545] __nla_validate_parse: 23 callbacks suppressed [ 168.327326][ T8545] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1113'. [ 168.363983][ T8545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1113'. [ 168.404720][ T8545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1113'. [ 168.775502][ T8572] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1119'. [ 168.823766][ T8558] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1118'. [ 169.078223][ T8584] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1125'. [ 169.109594][ T8584] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1125'. [ 169.141861][ T8584] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1125'. [ 169.447262][ T8591] ip6gretap0: entered promiscuous mode [ 169.469804][ T8591] ip6gretap0: left promiscuous mode [ 169.853126][ T8600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.262868][ T8606] ip6gretap0: entered promiscuous mode [ 170.281058][ T8606] ip6gretap0: left promiscuous mode [ 170.650412][ T8621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.991768][ T8631] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1138'. [ 171.245920][ T8638] net_ratelimit: 1143 callbacks suppressed [ 171.245944][ T8638] dccp_invalid_packet: P.Data Offset(100) too large [ 171.348086][ T8641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1142'. [ 171.643871][ T8657] netlink: zone id is out of range [ 171.649154][ T8657] netlink: zone id is out of range [ 171.671278][ T8657] netlink: zone id is out of range [ 171.677997][ T8657] netlink: zone id is out of range [ 171.691706][ T8657] netlink: zone id is out of range [ 171.733705][ T8657] netlink: zone id is out of range [ 171.760180][ T8657] netlink: zone id is out of range [ 171.769942][ T8657] netlink: zone id is out of range [ 171.788365][ T8657] netlink: zone id is out of range [ 172.313294][ T8674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.042938][ T8672] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 173.056268][ T8672] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 173.420194][ T8705] __nla_validate_parse: 2 callbacks suppressed [ 173.420214][ T8705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1164'. [ 173.585283][ T8716] netlink: 'syz.3.1164': attribute type 15 has an invalid length. [ 173.641680][ T8719] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1167'. [ 174.592191][ T8722] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 174.615167][ T8722] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 176.269264][ T8790] netlink: 'syz.3.1192': attribute type 13 has an invalid length. [ 176.285741][ T8790] veth0_macvtap: left promiscuous mode [ 176.298923][ T8788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1191'. [ 176.322609][ T8790] macvtap0: entered allmulticast mode [ 176.365292][ T8790] macvtap0: refused to change device tx_queue_len [ 176.374389][ T8777] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 176.395372][ T8777] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 176.630091][ T8792] netlink: 'syz.0.1191': attribute type 15 has an invalid length. [ 176.658301][ T8797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1195'. [ 176.773651][ T8810] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1193'. [ 176.945060][ T8817] net_ratelimit: 578 callbacks suppressed [ 176.945085][ T8817] dccp_invalid_packet: P.Data Offset(100) too large [ 177.271822][ T8829] dccp_invalid_packet: P.Data Offset(100) too large [ 177.319105][ T8832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1204'. [ 177.367072][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1204'. [ 177.772087][ T8845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.138102][ T8852] ip6gretap0: entered promiscuous mode [ 178.169895][ T8852] ip6gretap0: left promiscuous mode [ 178.259416][ T8857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1211'. [ 178.425040][ T8863] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1213'. [ 178.841690][ T8877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.043389][ T8885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1217'. [ 179.082126][ T8885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1217'. [ 179.416060][ T8898] dccp_invalid_packet: P.Data Offset(100) too large [ 179.686625][ T8900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1225'. [ 179.863997][ T8903] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1226'. [ 179.931746][ T8892] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 179.941921][ T8892] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 180.107902][ T8916] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1228'. [ 180.125415][ T8916] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1228'. [ 180.302289][ T8921] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1228'. [ 180.569735][ T8929] netlink: 'syz.3.1234': attribute type 33 has an invalid length. [ 180.632732][ T8935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1233'. [ 180.634292][ T8932] dccp_invalid_packet: P.Data Offset(100) too large [ 180.674080][ T8935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1233'. [ 180.727354][ T8939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1233'. [ 181.655216][ T8969] dccp_invalid_packet: P.Data Offset(100) too large [ 181.887215][ T8944] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 181.910833][ T8944] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 182.424086][ T5108] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 182.438641][ T5108] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 182.451578][ T5108] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 182.461428][ T5108] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 182.471865][ T5108] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 182.479502][ T5108] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 182.576988][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.681367][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.777615][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.835146][ T9014] dccp_invalid_packet: P.Data Offset(100) too large [ 182.887280][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.228191][ T11] bridge_slave_0: left allmulticast mode [ 183.240183][ T11] bridge_slave_0: left promiscuous mode [ 183.256528][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.289957][ T11] veth1_to_bond: left allmulticast mode [ 183.309750][ T11] veth1_to_bond: left promiscuous mode [ 183.328104][ T11] bridge1: port 2(veth1_to_bond) entered disabled state [ 183.343786][ T11] bridge_slave_1: left allmulticast mode [ 183.350154][ T11] bridge_slave_1: left promiscuous mode [ 183.356096][ T11] bridge1: port 1(bridge_slave_1) entered disabled state [ 183.649313][ T11] bridge0 (unregistering): left promiscuous mode [ 183.858987][ T11] bond0 (unregistering): left promiscuous mode [ 183.866269][ T11] bond_slave_0: left promiscuous mode [ 183.873331][ T11] bond_slave_1: left promiscuous mode [ 183.895064][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.917801][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.929046][ T11] bond0 (unregistering): Released all slaves [ 183.963476][ T9002] chnl_net:caif_netlink_parms(): no params data found [ 183.975206][ T9023] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 183.995905][ T9023] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 184.253806][ T9049] dccp_invalid_packet: P.Data Offset(100) too large [ 184.357877][ T9055] __nla_validate_parse: 12 callbacks suppressed [ 184.357900][ T9055] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1273'. [ 184.503727][ T9002] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.528993][ T9002] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.531288][ T5098] Bluetooth: hci0: command tx timeout [ 184.538281][ T9002] bridge_slave_0: entered allmulticast mode [ 184.549428][ T9002] bridge_slave_0: entered promiscuous mode [ 184.579415][ T9002] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.594046][ T9002] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.604542][ T9002] bridge_slave_1: entered allmulticast mode [ 184.623318][ T9002] bridge_slave_1: entered promiscuous mode [ 184.679661][ T11] hsr_slave_0: left promiscuous mode [ 184.705820][ T11] hsr_slave_1: left promiscuous mode [ 184.725110][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.738586][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.763184][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.783304][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.823526][ T11] veth1_macvtap: left promiscuous mode [ 184.829117][ T11] veth0_macvtap: left promiscuous mode [ 184.840393][ T11] veth1_vlan: left promiscuous mode [ 184.845708][ T11] @ÿ: left promiscuous mode [ 185.551351][ T9071] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 185.559551][ T9071] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 185.713166][ T9081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1279'. [ 185.780270][ T11] team0 (unregistering): Port device team_slave_1 removed [ 185.819601][ T11] team0 (unregistering): Port device team_slave_0 removed [ 186.211812][ T9002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.238286][ T9083] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1280'. [ 186.270266][ T9084] netlink: 'syz.2.1279': attribute type 15 has an invalid length. [ 186.303606][ T9002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.458483][ T9002] team0: Port device team_slave_0 added [ 186.488002][ T9002] team0: Port device team_slave_1 added [ 186.601324][ T9002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.608727][ T9002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.640637][ T5098] Bluetooth: hci0: command tx timeout [ 186.647093][ T9002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.679297][ T9002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.702508][ T9002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.736114][ T9002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.803834][ T9106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1287'. [ 186.867262][ T9106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1287'. [ 186.901515][ T9106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1287'. [ 186.914996][ T9002] hsr_slave_0: entered promiscuous mode [ 186.947513][ T9002] hsr_slave_1: entered promiscuous mode [ 186.954153][ T9002] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.962430][ T9002] Cannot create hsr debugfs directory [ 187.157249][ T9119] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1291'. [ 187.182727][ T9120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1292'. [ 187.184384][ T9119] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1291'. [ 187.245778][ T9120] netlink: 'syz.3.1292': attribute type 15 has an invalid length. [ 187.257583][ T9119] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1291'. [ 187.413035][ T9102] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 187.432062][ T9102] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 187.910616][ T9002] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 187.935066][ T9002] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 187.993952][ T9002] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 188.024058][ T9002] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 188.080916][ T9151] dccp_invalid_packet: P.Data Offset(100) too large [ 188.391003][ T9002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.443675][ T9002] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.472547][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.479796][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.524476][ T5183] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.531739][ T5183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.691293][ T5098] Bluetooth: hci0: command tx timeout [ 188.955811][ T9182] bridge1: entered promiscuous mode [ 188.963827][ T9182] bridge1: entered allmulticast mode [ 189.018765][ T9002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.168803][ T9158] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 189.188872][ T9158] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 189.372845][ T9201] __nla_validate_parse: 10 callbacks suppressed [ 189.372868][ T9201] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1313'. [ 189.420996][ T9197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1312'. [ 189.469640][ T9197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1312'. [ 189.474611][ T9205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1315'. [ 189.544329][ T9209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1314'. [ 189.574143][ T9209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1314'. [ 189.630848][ T9215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1314'. [ 189.698258][ T9217] dccp_invalid_packet: P.Data Offset(100) too large [ 189.748987][ T9002] veth0_vlan: entered promiscuous mode [ 189.813510][ T9002] veth1_vlan: entered promiscuous mode [ 189.899033][ T9002] veth0_macvtap: entered promiscuous mode [ 189.933173][ T9002] veth1_macvtap: entered promiscuous mode [ 190.012842][ T9002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.047240][ T9002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.064830][ T9002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.096508][ T9002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.120306][ T9002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.150430][ T9002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.161622][ T9002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.174397][ T9002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.186219][ T9002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.249683][ T9002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.267847][ T9002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.279093][ T9002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.299216][ T9002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.318385][ T9002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.329523][ T9002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.346578][ T9002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.357466][ T9002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.369578][ T9002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.419132][ T9002] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.437582][ T9002] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.447571][ T9002] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.463922][ T9002] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.479328][ T9243] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1325'. [ 190.639560][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.666783][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.728347][ T9245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1326'. [ 190.739539][ T9245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1326'. [ 190.757230][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.770331][ T5098] Bluetooth: hci0: command tx timeout [ 190.782724][ T9251] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 190.796722][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.811163][ T9251] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 190.955070][ T9235] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 190.974981][ T9235] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 191.440413][ T9279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.577703][ T9285] netlink: 'syz.0.1334': attribute type 15 has an invalid length. [ 191.659505][ T9293] @ÿ: renamed from veth0_vlan (while UP) [ 192.324658][ T9317] ip6gretap0: entered promiscuous mode [ 192.339182][ T9317] ip6gretap0: left promiscuous mode [ 192.611649][ T9300] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 192.630550][ T9300] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 194.046960][ T9407] netlink: 'syz.2.1376': attribute type 3 has an invalid length. [ 194.116752][ T9410] ip6gretap0: entered promiscuous mode [ 194.162412][ T9410] ip6gretap0: left promiscuous mode [ 194.163229][ T9415] netlink: 'syz.1.1380': attribute type 6 has an invalid length. [ 194.207398][ T9416] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 194.367522][ T9429] dccp_invalid_packet: P.Data Offset(100) too large [ 194.699638][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.706161][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.732828][ T9445] __nla_validate_parse: 56 callbacks suppressed [ 194.732850][ T9445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1390'. [ 194.758096][ T9439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1390'. [ 194.899551][ T9456] ip6gretap0: entered promiscuous mode [ 194.916180][ T9456] ip6gretap0: left promiscuous mode [ 194.924896][ T9459] dccp_invalid_packet: P.Data Offset(100) too large [ 194.975552][ T9461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1398'. [ 195.184583][ T9473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1399'. [ 195.222699][ T9477] dccp_invalid_packet: P.Data Offset(100) too large [ 195.231013][ T9473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1399'. [ 195.253238][ T9473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1399'. [ 195.393549][ T9483] netlink: 'syz.1.1406': attribute type 1 has an invalid length. [ 195.406014][ T9483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1406'. [ 195.493984][ T9485] netlink: 'syz.3.1407': attribute type 10 has an invalid length. [ 195.539532][ T9489] dccp_invalid_packet: P.Data Offset(100) too large [ 195.619217][ T9494] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1411'. [ 195.646659][ T9495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1412'. [ 195.647957][ T9494] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1411'. [ 195.788461][ T9505] dccp_invalid_packet: P.Data Offset(100) too large [ 196.046290][ T9521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.135152][ T9519] ip6gretap0: entered promiscuous mode [ 196.165680][ T9519] ip6gretap0: left promiscuous mode [ 196.553557][ T9531] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 196.735840][ T9540] dccp_invalid_packet: P.Data Offset(100) too large [ 196.771116][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 196.784763][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 196.922157][ T9550] dccp_invalid_packet: P.Data Offset(100) too large [ 197.038008][ T9553] syzkaller1: entered promiscuous mode [ 197.048295][ T9553] syzkaller1: entered allmulticast mode [ 197.432647][ T9569] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 197.594923][ T9577] ip6gretap0: entered promiscuous mode [ 197.624723][ T9577] bridge0: entered promiscuous mode [ 197.642393][ T9577] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 197.674577][ T9577] Cannot create hsr debugfs directory [ 198.268729][ T9612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.594669][ T9622] ip6gretap0: entered promiscuous mode [ 198.613924][ T9622] ip6gretap0: left promiscuous mode [ 198.785517][ T9628] netlink: 'syz.2.1459': attribute type 15 has an invalid length. [ 198.928434][ T9631] netlink: 'syz.3.1458': attribute type 15 has an invalid length. [ 199.365583][ T9652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.752938][ T9666] net_ratelimit: 1 callbacks suppressed [ 199.752963][ T9666] dccp_invalid_packet: P.Data Offset(100) too large [ 199.951947][ T9670] __nla_validate_parse: 29 callbacks suppressed [ 199.951968][ T9670] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1470'. [ 200.088979][ T9675] IPv6: sit1: Disabled Multicast RS [ 200.192342][ T9677] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1473'. [ 200.230091][ T9677] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 200.364111][ T9681] ip6gretap0: entered promiscuous mode [ 200.388455][ T9681] ip6gretap0: left promiscuous mode [ 200.405630][ T9684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1472'. [ 200.423190][ T9684] netlink: 'syz.4.1472': attribute type 15 has an invalid length. [ 200.746382][ T9691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1479'. [ 200.821470][ T9691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1479'. [ 200.944381][ T9706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.960238][ T9691] netlink: 740 bytes leftover after parsing attributes in process `syz.2.1479'. [ 200.987535][ T9708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1484'. [ 201.157389][ T9708] netlink: 'syz.4.1484': attribute type 15 has an invalid length. [ 201.354619][ T5098] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 201.363626][ T5098] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 201.372675][ T5098] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 201.381569][ T5098] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 201.390344][ T5098] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 201.397908][ T5098] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 201.464352][ T9716] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1485'. [ 201.500626][ T9720] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1486'. [ 201.663913][ T9730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1490'. [ 201.698003][ T9730] netlink: 'syz.4.1490': attribute type 15 has an invalid length. [ 201.815579][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.934534][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.043361][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.207895][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.259816][ T9756] netlink: 'syz.3.1496': attribute type 15 has an invalid length. [ 202.278214][ T9721] chnl_net:caif_netlink_parms(): no params data found [ 202.519225][ T9739] infiniband syz2: set active [ 202.526213][ T9739] infiniband syz2: added team_slave_1 [ 202.538528][ T9739] syz2: rxe_create_cq: returned err = -12 [ 202.546399][ T9739] infiniband syz2: Couldn't create ib_mad CQ [ 202.559381][ T9739] infiniband syz2: Couldn't open port 1 [ 202.702565][ T9739] RDS/IB: syz2: added [ 202.714959][ T9739] smc: adding ib device syz2 with port count 1 [ 202.717914][ T9767] ip6gretap0: entered promiscuous mode [ 202.729867][ T9739] smc: ib device syz2 port 1 has pnetid [ 202.758646][ T9767] ip6gretap0: left promiscuous mode [ 202.819530][ T9775] netlink: 'syz.4.1501': attribute type 15 has an invalid length. [ 202.847068][ T9721] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.865456][ T9721] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.880922][ T9721] bridge_slave_0: entered allmulticast mode [ 202.901185][ T9721] bridge_slave_0: entered promiscuous mode [ 202.935780][ T9772] delete_channel: no stack [ 202.950408][ T9721] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.967888][ T9721] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.985451][ T9721] bridge_slave_1: entered allmulticast mode [ 203.001419][ T9721] bridge_slave_1: entered promiscuous mode [ 203.014497][ T11] bridge_slave_1: left allmulticast mode [ 203.022596][ T11] bridge_slave_1: left promiscuous mode [ 203.028397][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.064277][ T11] bridge_slave_0: left allmulticast mode [ 203.078944][ T11] bridge_slave_0: left promiscuous mode [ 203.089151][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.490811][ T5108] Bluetooth: hci2: command tx timeout [ 203.564248][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.581765][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.592804][ T11] bond0 (unregistering): Released all slaves [ 203.609783][ T11] bond1 (unregistering): Released all slaves [ 203.718078][ T9721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.759110][ T9721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.853467][ T9721] team0: Port device team_slave_0 added [ 203.952190][ T9721] team0: Port device team_slave_1 added [ 204.183968][ T9721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.213162][ T9721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.260070][ T9721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.404646][ T9721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.420344][ T9721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.457082][ T9721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.624450][ T9816] netlink: 'syz.3.1512': attribute type 15 has an invalid length. [ 204.658215][ T9721] hsr_slave_0: entered promiscuous mode [ 204.723009][ T9721] hsr_slave_1: entered promiscuous mode [ 204.735267][ T9721] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.749052][ T9721] Cannot create hsr debugfs directory [ 205.021031][ T9828] netlink: zone id is out of range [ 205.050155][ T9828] netlink: zone id is out of range [ 205.059935][ T9828] netlink: zone id is out of range [ 205.079438][ T9828] netlink: zone id is out of range [ 205.098850][ T9828] netlink: zone id is out of range [ 205.139102][ T9828] netlink: zone id is out of range [ 205.153406][ T9828] netlink: zone id is out of range [ 205.172203][ T9828] netlink: zone id is out of range [ 205.187454][ T9828] netlink: zone id is out of range [ 205.206084][ T9828] netlink: zone id is out of range [ 205.570658][ T5108] Bluetooth: hci2: command tx timeout [ 205.842782][ T9843] __nla_validate_parse: 19 callbacks suppressed [ 205.842805][ T9843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1522'. [ 205.882654][ T9843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1522'. [ 205.937640][ T9843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1522'. [ 206.134648][ T9721] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 206.193870][ T9721] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 206.205687][ T9850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1525'. [ 206.262585][ T9850] netlink: 'syz.3.1525': attribute type 15 has an invalid length. [ 206.286404][ T9721] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 206.316138][ T9721] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 206.397093][ T9857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1527'. [ 206.635886][ T9721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.679696][ T9721] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.742395][ T9863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1530'. [ 206.769703][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.776975][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.867657][ T9863] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1530'. [ 206.917296][ T9863] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1530'. [ 206.935066][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.942307][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.967730][ T9865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1529'. [ 206.997833][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1531'. [ 207.048873][ T11] hsr_slave_0: left promiscuous mode [ 207.077650][ T11] hsr_slave_1: left promiscuous mode [ 207.105832][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.124487][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.147920][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.156565][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.214044][ T11] veth1_vlan: left promiscuous mode [ 207.219666][ T11] @ÿ: left promiscuous mode [ 207.650241][ T5108] Bluetooth: hci2: command tx timeout [ 207.968865][ T11] team0 (unregistering): Port device team_slave_1 removed [ 208.064996][ T11] team0 (unregistering): Port device team_slave_0 removed [ 209.730259][ T5108] Bluetooth: hci2: command tx timeout [ 210.027213][ T5098] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 210.044408][ T5098] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 210.059909][ T5098] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 210.072005][ T5098] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 210.079884][ T5098] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 210.089324][ T5098] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 210.282584][ T9721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.396607][ T1091] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.436196][ T1091] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.603282][ T1091] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.640281][ T1091] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.788654][ T1091] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.837590][ T1091] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.975164][ T1091] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.001917][ T1091] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.333736][ T9933] net_ratelimit: 136 callbacks suppressed [ 211.333759][ T9933] dccp_invalid_packet: P.Data Offset(100) too large [ 211.358959][ T9721] veth0_vlan: entered promiscuous mode [ 211.412200][ T1091] bridge_slave_0: left allmulticast mode [ 211.418661][ T1091] bridge_slave_0: left promiscuous mode [ 211.430344][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.447123][ T1091] veth1_to_bond: left allmulticast mode [ 211.458823][ T1091] veth1_to_bond: left promiscuous mode [ 211.464912][ T1091] bridge1: port 2(veth1_to_bond) entered disabled state [ 211.480929][ T1091] bridge_slave_1: left allmulticast mode [ 211.486755][ T1091] bridge_slave_1: left promiscuous mode [ 211.496782][ T1091] bridge1: port 1(bridge_slave_1) entered disabled state [ 211.619551][ T1091] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 211.769368][ T1091] dvmrp1 (unregistering): left allmulticast mode [ 211.815927][ T1091] bridge0 (unregistering): left promiscuous mode [ 212.029317][ T1091] bond0 (unregistering): left promiscuous mode [ 212.035628][ T1091] bond_slave_0: left promiscuous mode [ 212.042377][ T1091] bond_slave_1: left promiscuous mode [ 212.064434][ T1091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.076484][ T1091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.087454][ T1091] bond0 (unregistering): Released all slaves [ 212.102527][ T1091] bond1 (unregistering): Released all slaves [ 212.117758][ T1091] bond2 (unregistering): Released all slaves [ 212.132276][ T5108] Bluetooth: hci1: command 0x0406 tx timeout [ 212.142852][ T5098] Bluetooth: hci3: command tx timeout [ 212.309124][ T9721] veth1_vlan: entered promiscuous mode [ 212.393697][ T9908] chnl_net:caif_netlink_parms(): no params data found [ 212.426614][ T9945] __nla_validate_parse: 6 callbacks suppressed [ 212.426636][ T9945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1549'. [ 212.444549][ T9948] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1550'. [ 212.472288][ T9945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1549'. [ 212.506853][ T9945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1549'. [ 212.648169][ T9721] veth0_macvtap: entered promiscuous mode [ 212.765502][ T9961] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1552'. [ 212.786082][ T9721] veth1_macvtap: entered promiscuous mode [ 212.898828][ T9968] raw_sendmsg: syz.4.1555 forgot to set AF_INET. Fix it! [ 212.907751][ T9969] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1555'. [ 212.919060][ T9969] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1555'. [ 212.931571][ T9969] netlink: 'syz.4.1555': attribute type 6 has an invalid length. [ 212.939341][ T9969] netlink: 'syz.4.1555': attribute type 5 has an invalid length. [ 212.947377][ T9969] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1555'. [ 213.006510][ T9721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.031188][ T9721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.047325][ T9721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.077439][ T9721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.101732][ T9721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.118677][ T9721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.137751][ T9721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.149296][ T9721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.169729][ T9721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.204163][ T9721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.228136][ T9721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.239929][ T9721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.252602][ T9721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.262975][ T9721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.273987][ T9721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.284649][ T9721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.315711][ T9721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.342216][ T9721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.358218][ T9969] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1555'. [ 213.381633][ T9908] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.389207][ T9908] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.407274][ T9908] bridge_slave_0: entered allmulticast mode [ 213.424278][ T9908] bridge_slave_0: entered promiscuous mode [ 213.561509][ T1091] hsr_slave_0: left promiscuous mode [ 213.579556][ T1091] hsr_slave_1: left promiscuous mode [ 213.597268][ T1091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.609803][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.626215][ T1091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.643414][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.716208][ T1091] veth1_macvtap: left promiscuous mode [ 213.726896][ T1091] veth1_vlan: left promiscuous mode [ 213.741694][ T1091] @ÿ: left allmulticast mode [ 213.746979][ T1091] @ÿ: left promiscuous mode [ 213.985825][ T1091] pimreg (unregistering): left allmulticast mode [ 214.032072][ T1091] team0 (unregistering): Port device macvlan3 removed [ 214.210141][ T5098] Bluetooth: hci3: command tx timeout [ 214.570535][ T1091] team0 (unregistering): Port device team_slave_1 removed [ 214.620205][ T1091] team0 (unregistering): Port device team_slave_0 removed [ 215.006819][ T9908] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.016905][ T9908] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.030734][ T9908] bridge_slave_1: entered allmulticast mode [ 215.039450][ T9908] bridge_slave_1: entered promiscuous mode [ 215.069128][ T9996] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1561'. [ 215.097094][ T9721] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.107832][ T9721] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.130170][ T9721] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.140382][ T9721] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.298150][ T9908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.355121][ T9908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.355932][T10006] netlink: 'syz.4.1565': attribute type 1 has an invalid length. [ 215.543419][ T9908] team0: Port device team_slave_0 added [ 215.582718][ T9908] team0: Port device team_slave_1 added [ 215.702724][ T9908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.721055][ T9908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.760916][ T9908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.775282][ T9908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.782493][ T9908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.809018][ T9908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.864013][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.885666][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.922241][ T9908] hsr_slave_0: entered promiscuous mode [ 215.928983][ T9908] hsr_slave_1: entered promiscuous mode [ 215.950253][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.967893][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.291400][ T5098] Bluetooth: hci3: command tx timeout [ 216.295298][T10041] ip6gretap0: entered promiscuous mode [ 216.327429][T10041] ip6gretap0: left promiscuous mode [ 216.898077][ T9908] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 216.976648][ T9908] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 217.013749][ T9908] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 217.056019][ T9908] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 217.335126][ T9908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.407168][ T9908] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.447987][ T5146] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.455303][ T5146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.486433][ T5146] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.493700][ T5146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.534858][T10092] __nla_validate_parse: 12 callbacks suppressed [ 217.534880][T10092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1588'. [ 217.709884][ T9908] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 217.722943][ T9908] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 217.779365][T10096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1590'. [ 217.957354][T10102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1591'. [ 218.004203][T10102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1591'. [ 218.058421][T10109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1591'. [ 218.181012][ T9908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.372607][ T5098] Bluetooth: hci3: command tx timeout [ 218.438144][ T9908] veth0_vlan: entered promiscuous mode [ 218.473686][ T9908] veth1_vlan: entered promiscuous mode [ 218.573599][ T9908] veth0_macvtap: entered promiscuous mode [ 218.599751][ T9908] veth1_macvtap: entered promiscuous mode [ 218.656651][ T9908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.681835][ T9908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.702860][ T9908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.714171][ T9908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.728493][ T9908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.739193][ T9908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.749708][ T9908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.764826][ T9908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.781790][ T9908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.836505][ T9908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.873994][ T9908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.915085][ T9908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.935954][ T9908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.966138][ T9908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.020098][ T9908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.030146][ T9908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.046123][ T9908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.061870][ T9908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.084002][ T9908] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.120096][ T9908] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.128863][ T9908] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.150103][ T9908] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.373339][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.390715][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.439402][ T2803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.458582][ T2803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.609411][T10147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1537'. [ 219.718185][T10149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1602'. [ 219.984792][T10159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1604'. [ 220.008358][T10155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1604'. [ 220.040865][T10155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1604'. [ 220.547286][T10184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.271521][T10217] ip6gretap0: entered promiscuous mode [ 222.341486][T10217] bridge0: entered promiscuous mode [ 222.387809][T10217] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 222.410621][T10217] Cannot create hsr debugfs directory [ 222.847698][T10226] team_slave_1: mtu less than device minimum [ 223.044908][T10236] netlink: 'syz.0.1627': attribute type 13 has an invalid length. [ 223.686342][T10256] __nla_validate_parse: 6 callbacks suppressed [ 223.686366][T10256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1635'. [ 223.725496][T10246] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1632'. [ 223.802706][T10257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1633'. [ 223.841803][T10257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1633'. [ 223.899816][T10265] @ÿ: renamed from veth0_vlan (while UP) [ 223.916956][T10257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1633'. [ 224.311009][T10281] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1643'. [ 224.720846][T10293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1648'. [ 224.966683][T10306] netlink: 'syz.4.1651': attribute type 4 has an invalid length. [ 225.072446][T10312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1652'. [ 225.111918][T10312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1652'. [ 225.182425][T10308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1652'. [ 225.525142][T10325] dccp_invalid_packet: P.Data Offset(100) too large [ 225.576454][T10326] netlink: 'syz.4.1656': attribute type 6 has an invalid length. [ 225.601395][T10326] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.610262][T10326] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.619099][T10326] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.629044][T10326] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.659187][T10326] vxlan0: entered promiscuous mode [ 226.545842][T10357] netlink: 'syz.4.1667': attribute type 1 has an invalid length. [ 228.054880][T10396] dccp_invalid_packet: P.Data Offset(100) too large [ 228.745109][T10429] Cannot find add_set index 0 as target [ 228.889616][T10440] __nla_validate_parse: 21 callbacks suppressed [ 228.889638][T10440] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1693'. [ 229.172368][T10453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1700'. [ 229.199820][T10455] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1701'. [ 229.379731][T10458] netlink: 'syz.4.1703': attribute type 10 has an invalid length. [ 229.419317][T10458] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.427586][T10458] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.531381][T10464] dccp_invalid_packet: P.Data Offset(100) too large [ 229.896596][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1709'. [ 229.933767][T10474] netlink: 'syz.0.1709': attribute type 15 has an invalid length. [ 229.981838][T10475] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1706'. [ 230.015100][T10475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1706'. [ 230.203468][T10479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1710'. [ 230.351062][T10490] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1714'. [ 230.523694][T10500] dccp_invalid_packet: P.Data Offset(100) too large [ 230.582149][T10498] netlink: 'syz.0.1716': attribute type 10 has an invalid length. [ 230.599798][T10498] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.607695][T10498] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.627810][T10498] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.635150][T10498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.642796][T10498] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.650204][T10498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.675431][T10498] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 231.015769][T10515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1721'. [ 231.046214][T10515] netlink: 'syz.1.1721': attribute type 15 has an invalid length. [ 231.485411][T10532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1724'. [ 231.617039][T10532] openvswitch: netlink: Key type 29 is not supported [ 232.017320][T10542] netlink: 'syz.4.1728': attribute type 1 has an invalid length. [ 234.668046][T10578] __nla_validate_parse: 9 callbacks suppressed [ 234.668071][T10578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1738'. [ 234.763703][T10586] dccp_invalid_packet: P.Data Offset(100) too large [ 234.832621][T10578] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1738'. [ 234.867849][T10578] openvswitch: netlink: Key type 29 is not supported [ 234.931202][T10597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1745'. [ 234.983325][T10597] netlink: 'syz.4.1745': attribute type 15 has an invalid length. [ 235.127958][T10592] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1744'. [ 235.337980][T10609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1748'. [ 235.509153][T10611] SET target dimension over the limit! [ 235.841556][T10618] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1752'. [ 235.860165][T10618] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1752'. [ 236.936959][T10631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1756'. [ 237.070730][T10634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1757'. [ 237.129011][T10634] netlink: 'syz.4.1757': attribute type 15 has an invalid length. [ 237.265269][T10642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1759'. [ 237.488847][T10646] netlink: 'syz.0.1760': attribute type 10 has an invalid length. [ 238.288969][T10688] dccp_invalid_packet: P.Data Offset(100) too large [ 239.763380][T10727] __nla_validate_parse: 5 callbacks suppressed [ 239.763405][T10727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1785'. [ 239.880473][T10733] dccp_invalid_packet: P.Data Offset(100) too large [ 240.282697][T10752] dccp_invalid_packet: P.Data Offset(100) too large [ 240.488433][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1798'. [ 240.523548][T10768] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1799'. [ 240.552802][T10768] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1799'. [ 240.593349][T10765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1800'. [ 240.707616][T10779] dccp_invalid_packet: P.Data Offset(100) too large [ 241.460992][T10800] netlink: 'syz.3.1809': attribute type 10 has an invalid length. [ 241.843952][T10820] dccp_invalid_packet: P.Data Offset(100) too large [ 241.881237][T10807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1813'. [ 241.943262][T10813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1812'. [ 242.125608][T10835] dccp_invalid_packet: P.Data Offset(100) too large [ 242.432781][T10853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1827'. [ 242.602322][T10856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1828'. [ 242.608830][T10863] dccp_invalid_packet: P.Data Offset(100) too large [ 243.309283][T10888] dccp_invalid_packet: P.Data Offset(100) too large [ 243.404621][T10890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1839'. [ 243.506292][T10898] dccp_invalid_packet: P.Data Offset(100) too large [ 243.784967][T10868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.840020][T10937] __nla_validate_parse: 3 callbacks suppressed [ 244.840050][T10937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1856'. [ 244.882262][T10937] netlink: 'syz.4.1856': attribute type 15 has an invalid length. [ 245.100502][T10944] pim6reg1: entered promiscuous mode [ 245.105873][T10944] pim6reg1: entered allmulticast mode [ 245.120680][T10949] Bluetooth: MGMT ver 1.22 [ 245.279694][T10952] netlink: 'syz.1.1861': attribute type 10 has an invalid length. [ 245.550334][T10958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1864'. [ 245.764651][ T5098] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 245.786522][ T5098] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 245.797585][ T5098] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 245.812038][ T5098] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 245.833903][ T5098] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 245.848091][ T5098] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 246.750301][T10960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.138372][T10965] chnl_net:caif_netlink_parms(): no params data found [ 247.542978][T11010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1876'. [ 247.566779][T10965] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.581600][T10965] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.599072][T10965] bridge_slave_0: entered allmulticast mode [ 247.614660][T10965] bridge_slave_0: entered promiscuous mode [ 247.640950][T10965] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.667116][T10965] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.696434][T10965] bridge_slave_1: entered allmulticast mode [ 247.718668][T10965] bridge_slave_1: entered promiscuous mode [ 247.864400][T11022] dccp_invalid_packet: P.Data Offset(100) too large [ 247.890524][ T53] Bluetooth: hci0: command tx timeout [ 248.008259][T10965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.104136][T10965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.211495][T10965] team0: Port device team_slave_0 added [ 248.255611][T10965] team0: Port device team_slave_1 added [ 248.358993][T10965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.376686][T10965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.404246][T10965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.446515][T10965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.467387][T10965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.525910][T10965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.696279][T10965] hsr_slave_0: entered promiscuous mode [ 248.708189][T10965] hsr_slave_1: entered promiscuous mode [ 248.719715][T10965] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.737433][T10965] Cannot create hsr debugfs directory [ 248.902780][T11057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1891'. [ 248.938317][T11057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1891'. [ 248.992549][T11061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1891'. [ 249.170868][T11063] Bluetooth: MGMT ver 1.22 [ 249.371016][T10965] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.383832][T10965] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.555262][T11069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1893'. [ 249.582574][T11069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1893'. [ 249.621066][T11065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1893'. [ 249.659729][T11074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1894'. [ 249.764044][T10965] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.781292][T10965] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.938247][T10965] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.956893][T10965] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.970475][ T53] Bluetooth: hci0: command tx timeout [ 250.162414][T10965] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.179838][T10965] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.574776][T11091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1900'. [ 250.622127][T11091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1900'. [ 250.660568][T11091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1900'. [ 250.740820][T10965] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 250.763654][T10965] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 250.774602][T11099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1902'. [ 250.787312][T11099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1902'. [ 250.801275][T10965] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 250.837827][T11099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1902'. [ 250.842815][T10965] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 251.065827][T11104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1904'. [ 251.116864][T11106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1905'. [ 251.118019][T10965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.188761][T10965] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.242993][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.250242][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.281608][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.288842][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.460776][T11112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1906'. [ 251.477541][T11118] ax25_connect(): syz.2.1908 uses autobind, please contact jreuter@yaina.de [ 251.495707][T10965] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 251.522285][T11112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1906'. [ 251.764850][T11128] dccp_invalid_packet: P.Data Offset(100) too large [ 252.017802][T10965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.050450][ T53] Bluetooth: hci0: command tx timeout [ 252.270628][T11147] @ÿ: renamed from veth0_vlan (while UP) [ 252.842821][T10965] veth0_vlan: entered promiscuous mode [ 252.902468][T10965] veth1_vlan: entered promiscuous mode [ 253.109308][T10965] veth0_macvtap: entered promiscuous mode [ 253.129462][T10965] veth1_macvtap: entered promiscuous mode [ 253.217054][T10965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.248093][T10965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.287014][T10965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.307883][T10965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.332455][T10965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.368204][T10965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.399124][T10965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.420181][T10965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.450101][T10965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.471634][T10965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.504505][T10965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.583015][T10965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.614096][T10965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.640214][T10965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.641307][T11176] dccp_invalid_packet: P.Data Offset(100) too large [ 253.670276][T10965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.700168][T10965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.720000][T10965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.741193][T10965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.762272][T10965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.780111][T10965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.800110][T10965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.835074][T10965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.921965][T10965] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.961140][T10965] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.989676][T10965] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.017022][T10965] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.130620][ T53] Bluetooth: hci0: command tx timeout [ 254.508390][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.538953][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.677195][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.687713][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.994734][T11203] IPVS: Error joining to the multicast group [ 255.551704][T11222] dccp_invalid_packet: P.Data Offset(100) too large [ 255.749617][T11228] __nla_validate_parse: 23 callbacks suppressed [ 255.749640][T11228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1935'. [ 255.820155][T11229] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1936'. [ 256.142622][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.149163][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.409190][T11244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1940'. [ 256.426537][T11244] netlink: 'syz.4.1940': attribute type 15 has an invalid length. [ 256.723541][T11260] dccp_invalid_packet: P.Data Offset(100) too large [ 256.833708][T11266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1946'. [ 256.885389][T11266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1946'. [ 256.932808][T11266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1946'. [ 256.966462][T11269] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1949'. [ 257.182405][T11280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1952'. [ 257.191899][T11278] netlink: 'syz.3.1951': attribute type 10 has an invalid length. [ 257.220625][T11280] netlink: 'syz.4.1952': attribute type 15 has an invalid length. [ 257.235009][T11283] netlink: 'syz.0.1953': attribute type 10 has an invalid length. [ 257.257161][T11283] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.265858][T11283] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.379267][T11316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1963'. [ 258.398857][T11315] netlink: 'syz.3.1964': attribute type 10 has an invalid length. [ 258.416425][T11316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1963'. [ 258.734579][T11327] netlink: 'syz.1.1967': attribute type 10 has an invalid length. [ 258.793328][T11328] netlink: 'syz.2.1966': attribute type 15 has an invalid length. [ 258.989817][T11330] netlink: 'syz.0.1968': attribute type 10 has an invalid length. [ 259.109470][ T53] Bluetooth: hci0: command tx timeout [ 259.336729][T11348] netlink: 'syz.3.1975': attribute type 10 has an invalid length. [ 259.541021][T11361] netlink: 'syz.0.1979': attribute type 10 has an invalid length. [ 259.607279][ T1105] bridge_slave_1: left allmulticast mode [ 259.620464][ T1105] bridge_slave_1: left promiscuous mode [ 259.632944][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.660914][ T1105] bridge_slave_0: left allmulticast mode [ 259.666822][ T1105] bridge_slave_0: left promiscuous mode [ 259.676393][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.864553][ T1105] ip6gretap0 (unregistering): left promiscuous mode [ 260.257338][ T1105] bridge0 (unregistering): left promiscuous mode [ 260.677889][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.707301][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.727264][ T1105] bond0 (unregistering): Released all slaves [ 260.758986][T11369] __nla_validate_parse: 7 callbacks suppressed [ 260.759011][T11369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1981'. [ 261.865006][T11417] dccp_invalid_packet: P.Data Offset(100) too large [ 261.928624][T11419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1998'. [ 262.007642][T11419] validate_nla: 3 callbacks suppressed [ 262.007669][T11419] netlink: 'syz.3.1998': attribute type 15 has an invalid length. [ 262.220138][ T1105] hsr_slave_0: left promiscuous mode [ 262.279070][ T1105] hsr_slave_1: left promiscuous mode [ 262.311165][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.323595][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.339486][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.347586][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.385173][T11430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2001'. [ 262.407485][ T1105] veth1_macvtap: left promiscuous mode [ 262.420323][ T1105] veth0_macvtap: left promiscuous mode [ 262.427657][ T1105] veth1_vlan: left promiscuous mode [ 262.454981][ T1105] @ÿ: left promiscuous mode [ 263.212432][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 263.258111][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 263.728556][T11435] netlink: 'syz.1.2003': attribute type 10 has an invalid length. [ 264.046700][T11437] netlink: 'syz.0.2004': attribute type 10 has an invalid length. [ 264.280965][T11452] dccp_invalid_packet: P.Data Offset(100) too large [ 264.487026][T11453] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2011'. [ 264.886682][T11485] netlink: 'syz.3.2019': attribute type 10 has an invalid length. [ 264.925877][T11485] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.933870][T11485] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.325924][T11495] netlink: 'syz.3.2021': attribute type 10 has an invalid length. [ 265.411972][T11503] dccp_invalid_packet: P.Data Offset(100) too large [ 265.482491][T11507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2026'. [ 265.569493][T11509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2026'. [ 265.608739][T11509] bond1 (unregistering): Released all slaves [ 265.984754][T11527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2032'. [ 266.161104][T11538] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 266.321670][T11548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2036'. [ 266.362082][T11548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2036'. [ 266.430197][T11551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2036'. [ 266.584417][T11554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2039'. [ 266.661895][T11554] netlink: 'syz.2.2039': attribute type 15 has an invalid length. [ 267.029769][T11580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2045'. [ 267.167971][T11590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2048'. [ 267.181362][T11590] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2048'. [ 267.506930][T11599] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 267.724318][T11598] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2050'. [ 267.958766][T11613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2053'. [ 268.003060][T11613] netlink: 'syz.0.2053': attribute type 15 has an invalid length. [ 268.066348][T11624] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 268.205502][T11625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.973720][T11654] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 269.857120][T11670] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 270.258907][T11675] netlink: 'syz.4.2072': attribute type 10 has an invalid length. [ 270.670936][T11697] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 271.173797][T11721] __nla_validate_parse: 12 callbacks suppressed [ 271.173819][T11721] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2078'. [ 271.413783][T11739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2085'. [ 271.463167][T11739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2085'. [ 271.480990][T11742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2086'. [ 271.528609][T11739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2085'. [ 271.552140][T11742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2086'. [ 271.599305][T11742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2086'. [ 271.787146][T11750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2088'. [ 271.859588][T11750] xt_CT: You must specify a L4 protocol and not use inversions on it [ 272.283818][T11775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2096'. [ 272.409752][T11773] netlink: 'syz.4.2095': attribute type 10 has an invalid length. [ 272.546268][T11786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2098'. [ 272.821144][T11798] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 273.044790][T11808] x_tables: duplicate underflow at hook 3 [ 273.862052][T11860] netlink: 'syz.2.2121': attribute type 13 has an invalid length. [ 273.883082][T11860] veth0_macvtap: left promiscuous mode [ 273.902614][T11860] macvtap0: entered allmulticast mode [ 273.935942][T11860] macvtap0: refused to change device tx_queue_len [ 275.814275][T11920] netlink: 'syz.3.2140': attribute type 2 has an invalid length. [ 275.911189][T11926] x_tables: ip_tables: ah match: only valid for protocol 51 [ 276.281943][T11941] __nla_validate_parse: 28 callbacks suppressed [ 276.281965][T11941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2145'. [ 276.323041][T11941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2145'. [ 276.369801][T11941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2145'. [ 276.466349][T11946] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2146'. [ 276.776672][T11957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2150'. [ 276.802689][T11957] netlink: 'syz.2.2150': attribute type 6 has an invalid length. [ 276.826421][T11957] netlink: 'syz.2.2150': attribute type 14 has an invalid length. [ 276.874887][T11957] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.883826][T11957] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.892733][T11957] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.901535][T11957] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.970162][T11957] vxlan0: entered promiscuous mode [ 277.683791][T11967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2155'. [ 277.986868][T11978] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2159'. [ 278.290790][T11986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2162'. [ 278.326916][T11986] netlink: 'syz.2.2162': attribute type 15 has an invalid length. [ 278.379702][T11988] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2163'. [ 278.753850][T12001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2168'. [ 279.637457][T12038] netlink: 'syz.2.2182': attribute type 11 has an invalid length. [ 279.746313][T12040] netlink: 'syz.0.2183': attribute type 33 has an invalid length. [ 280.082459][T12056] netlink: 'syz.2.2188': attribute type 10 has an invalid length. [ 280.108035][T12056] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.115962][T12056] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.589278][T12074] tipc: Started in network mode [ 280.599155][T12074] tipc: Node identity 92bc63dd45e6, cluster identity 4711 [ 280.614482][T12074] tipc: Enabled bearer , priority 10 [ 281.388530][T12110] netlink: 'syz.0.2202': attribute type 10 has an invalid length. [ 281.559253][T12116] __nla_validate_parse: 12 callbacks suppressed [ 281.559278][T12116] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2208'. [ 281.707343][T12127] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2210'. [ 281.739652][ T5182] tipc: Node number set to 3613025245 [ 281.774385][T12128] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2211'. [ 281.835776][T12120] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2209'. [ 282.013732][T12135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2213'. [ 282.564085][T12157] netlink: 'syz.4.2219': attribute type 10 has an invalid length. [ 282.612512][T12157] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.620429][T12157] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.693778][T12157] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.701046][T12157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.708637][T12157] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.715990][T12157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.746434][T12157] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 282.758119][T12159] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2220'. [ 282.997523][T12170] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2224'. [ 283.103495][T12174] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2226'. [ 283.151142][T12174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2226'. [ 283.193172][T12172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2225'. [ 283.506079][T12193] netlink: 'syz.4.2233': attribute type 15 has an invalid length. [ 283.571660][T12200] netlink: 'syz.0.2234': attribute type 10 has an invalid length. [ 284.497239][T12233] netlink: 'syz.4.2247': attribute type 15 has an invalid length. [ 284.641299][T12236] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 284.925661][T12250] netlink: 'syz.4.2254': attribute type 2 has an invalid length. [ 286.633081][T12337] __nla_validate_parse: 20 callbacks suppressed [ 286.633106][T12337] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2289'. [ 286.782933][T12346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2291'. [ 286.850757][ T35] bond0: (slave bond_slave_0): interface is now down [ 286.865564][T12350] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 286.884744][ T35] bond0: (slave bond_slave_1): interface is now down [ 286.921320][ T35] bond0: now running without any active interface! [ 287.134817][T12364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2298'. [ 287.225699][T12369] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2297'. [ 287.346341][T12373] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2300'. [ 287.480662][T12377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2302'. [ 287.503953][T12379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2303'. [ 287.591217][T12383] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2305'. [ 288.022079][T12405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2312'. [ 288.072344][T12405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2312'. [ 288.123840][T12404] openvswitch: netlink: Flow key attr not present in new flow. [ 288.442168][T12424] netlink: 'syz.1.2317': attribute type 7 has an invalid length. [ 288.849044][T12436] netlink: 'syz.0.2324': attribute type 1 has an invalid length. [ 288.863469][T12436] netlink: 'syz.0.2324': attribute type 4 has an invalid length. [ 289.467321][T12455] netlink: 'syz.4.2331': attribute type 1 has an invalid length. [ 289.487791][T12455] netlink: 'syz.4.2331': attribute type 1 has an invalid length. [ 289.512779][T12455] netlink: 'syz.4.2331': attribute type 2 has an invalid length. [ 290.341712][T12498] netlink: 'syz.4.2344': attribute type 1 has an invalid length. [ 290.363626][T12498] netlink: 'syz.4.2344': attribute type 1 has an invalid length. [ 290.390184][T12498] netlink: 'syz.4.2344': attribute type 2 has an invalid length. [ 290.583794][T12500] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 291.311658][T12534] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 291.471615][T12543] dccp_invalid_packet: P.Data Offset(100) too large [ 291.619653][T12551] openvswitch: netlink: Multiple metadata blocks provided [ 291.729570][T12553] __nla_validate_parse: 35 callbacks suppressed [ 291.729597][T12553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2363'. [ 291.847421][T12556] netlink: 'syz.2.2364': attribute type 10 has an invalid length. [ 292.156736][T12569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2367'. [ 292.189420][T12563] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2365'. [ 292.229367][T12566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2367'. [ 292.417176][T12581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2369'. [ 292.461452][T12581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2369'. [ 292.514430][T12588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2369'. [ 293.175693][T12616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2376'. [ 293.400811][T12631] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2380'. [ 293.477497][T12631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2380'. [ 293.649874][T12643] netlink: 'syz.3.2383': attribute type 15 has an invalid length. [ 294.004060][T12662] netlink: 'syz.1.2390': attribute type 1 has an invalid length. [ 294.020256][T12662] netlink: 'syz.1.2390': attribute type 1 has an invalid length. [ 294.029240][T12662] netlink: 'syz.1.2390': attribute type 2 has an invalid length. [ 294.571785][T12693] veth0_to_batadv: entered allmulticast mode [ 294.654542][T12691] netlink: 'syz.1.2397': attribute type 15 has an invalid length. [ 294.655954][T12699] x_tables: unsorted entry at hook 3 [ 294.765317][T12703] syz2: rxe_newlink: already configured on team_slave_1 [ 295.436255][T12734] netlink: 'syz.0.2412': attribute type 15 has an invalid length. [ 295.909602][T12760] dccp_invalid_packet: P.Data Offset(100) too large [ 295.928290][T12761] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 296.246706][T12779] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 0, id = 0 [ 296.277921][T12771] netlink: 'syz.0.2424': attribute type 15 has an invalid length. [ 296.936909][T12805] __nla_validate_parse: 33 callbacks suppressed [ 296.936940][T12805] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2433'. [ 296.980548][T12810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2435'. [ 297.004924][T12805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2433'. [ 297.049178][T12800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2433'. [ 297.270333][T12820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2439'. [ 297.338210][T12820] netlink: 'syz.0.2439': attribute type 15 has an invalid length. [ 297.358666][T12826] xt_limit: Overflow, try lower: 16384/524288 [ 297.368030][T12823] netlink: zone id is out of range [ 297.390855][T12823] netlink: zone id is out of range [ 297.396093][T12823] netlink: zone id is out of range [ 297.428089][T12823] netlink: zone id is out of range [ 297.468189][T12823] netlink: zone id is out of range [ 297.503553][T12823] netlink: zone id is out of range [ 297.523042][T12823] netlink: zone id is out of range [ 297.528492][T12823] netlink: zone id is out of range [ 297.553793][T12832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2443'. [ 297.672340][T12838] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2446'. [ 297.745110][T12844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2449'. [ 298.164564][T12865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2458'. [ 298.257509][T12864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2457'. [ 299.311199][T12918] netlink: 'syz.0.2478': attribute type 10 has an invalid length. [ 299.544251][T12926] netlink: 'syz.1.2483': attribute type 10 has an invalid length. [ 299.833750][T12939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.151863][T12947] netlink: 'syz.1.2491': attribute type 10 has an invalid length. [ 300.243120][T12954] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 300.253687][T12954] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 300.279657][T12958] netlink: 'syz.3.2496': attribute type 10 has an invalid length. [ 300.694551][T12985] xt_ecn: cannot match TCP bits for non-tcp packets [ 301.155381][T13007] netlink: 'syz.3.2508': attribute type 10 has an invalid length. [ 301.451497][T13015] vlan2: entered promiscuous mode [ 301.461932][T13015] ip6gretap0: entered promiscuous mode [ 301.478093][T13015] ip6gretap0: left promiscuous mode [ 301.875356][T13033] unknown channel width for channel at 909000KHz? [ 301.975479][T13021] delete_channel: no stack [ 302.046122][T13043] netlink: 'syz.0.2519': attribute type 10 has an invalid length. [ 302.178817][T13053] __nla_validate_parse: 16 callbacks suppressed [ 302.178842][T13053] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2523'. [ 302.236531][T13055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2522'. [ 302.271397][T13055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2522'. [ 302.331350][T13049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2522'. [ 302.394602][T13060] Bluetooth: MGMT ver 1.22 [ 302.590177][T13070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2530'. [ 302.651091][T13074] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2532'. [ 302.729531][T13076] netlink: 'syz.0.2533': attribute type 10 has an invalid length. [ 302.968220][T13086] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2537'. [ 303.191496][T13092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2539'. [ 303.247572][T13092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2539'. [ 303.288002][T13099] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2540'. [ 303.546687][ T5098] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 303.578792][ T5098] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 303.588040][ T5098] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 303.610314][ T5098] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 303.619651][ T5098] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 303.627654][ T5098] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 303.831486][T13113] netlink: 'syz.2.2546': attribute type 10 has an invalid length. [ 304.012746][T13120] ip6t_srh: unknown srh match flags 5294 [ 304.356930][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 304.367103][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 304.375709][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 304.386962][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 304.395126][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 304.403908][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 304.619717][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.753974][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.813698][T13105] chnl_net:caif_netlink_parms(): no params data found [ 304.896389][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.087932][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.332760][T13105] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.351768][T13105] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.369650][T13105] bridge_slave_0: entered allmulticast mode [ 305.377566][T13105] bridge_slave_0: entered promiscuous mode [ 305.393770][T13156] netlink: 'syz.2.2556': attribute type 11 has an invalid length. [ 305.448874][T13105] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.487754][T13105] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.519060][T13105] bridge_slave_1: entered allmulticast mode [ 305.536947][T13105] bridge_slave_1: entered promiscuous mode [ 305.553096][T13159] netlink: 'syz.0.2557': attribute type 10 has an invalid length. [ 305.675762][T13105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.730623][ T53] Bluetooth: hci0: command tx timeout [ 305.842421][T13105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.136728][T13165] team0: Port device wlan1 added [ 306.166425][T13105] team0: Port device team_slave_0 added [ 306.193594][T13105] team0: Port device team_slave_1 added [ 306.259152][T13129] chnl_net:caif_netlink_parms(): no params data found [ 306.453069][ T53] Bluetooth: hci1: command tx timeout [ 306.967173][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.976753][ T51] bond_slave_0: left promiscuous mode [ 306.985091][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.995717][ T51] bond_slave_1: left promiscuous mode [ 307.004706][ T51] bond0 (unregistering): Released all slaves [ 307.025667][T13105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.033416][T13105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.064859][T13105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.134168][ T51] IPVS: stopping backup sync thread 12779 ... [ 307.198745][T13105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.207020][T13105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.241806][T13105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.261185][T13189] netlink: 'syz.2.2566': attribute type 10 has an invalid length. [ 307.270667][T13191] __nla_validate_parse: 8 callbacks suppressed [ 307.270683][T13191] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2565'. [ 307.311774][T13191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2565'. [ 307.626058][T13129] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.638378][T13129] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.660224][T13129] bridge_slave_0: entered allmulticast mode [ 307.667812][T13129] bridge_slave_0: entered promiscuous mode [ 307.693792][T13129] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.710190][T13129] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.738776][T13129] bridge_slave_1: entered allmulticast mode [ 307.751776][T13129] bridge_slave_1: entered promiscuous mode [ 307.783035][T13105] hsr_slave_0: entered promiscuous mode [ 307.812196][T13105] hsr_slave_1: entered promiscuous mode [ 307.817938][ T53] Bluetooth: hci0: command tx timeout [ 307.837287][T13105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 307.844968][T13105] Cannot create hsr debugfs directory [ 308.239659][T13129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.398221][ T51] hsr_slave_0: left promiscuous mode [ 308.406955][ T51] hsr_slave_1: left promiscuous mode [ 308.421484][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.436239][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.447306][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.467013][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.515413][ T51] veth1_vlan: left promiscuous mode [ 308.527536][ T51] @ÿ: left promiscuous mode [ 308.532440][ T53] Bluetooth: hci1: command tx timeout [ 309.117427][T13233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2575'. [ 309.140929][T13233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2575'. [ 309.162235][T13230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2575'. [ 309.183862][ T51] team0 (unregistering): Port device team_slave_1 removed [ 309.221370][ T51] team0 (unregistering): Port device team_slave_0 removed [ 309.533487][T13129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.634543][T13129] team0: Port device team_slave_0 added [ 309.731733][T13129] team0: Port device team_slave_1 added [ 309.738037][T13235] netlink: 'syz.0.2576': attribute type 10 has an invalid length. [ 309.751832][T13238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2577'. [ 309.884722][T13243] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2579'. [ 309.888463][T13241] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2579'. [ 309.906984][ T53] Bluetooth: hci0: command tx timeout [ 309.913631][T13238] : entered promiscuous mode [ 309.957637][T13129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.984493][T13129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.011826][T13129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.026137][T13129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.033972][T13129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.076323][T13129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.132696][T13252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2582'. [ 310.253636][T13129] hsr_slave_0: entered promiscuous mode [ 310.261286][T13129] hsr_slave_1: entered promiscuous mode [ 310.268902][T13129] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.276880][T13129] Cannot create hsr debugfs directory [ 310.415027][T13105] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.454379][T13262] netlink: 'syz.2.2586': attribute type 10 has an invalid length. [ 310.552404][T13105] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.611745][ T53] Bluetooth: hci1: command tx timeout [ 310.727064][T13273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2587'. [ 310.779336][T13105] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.881033][T13105] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.166485][T13105] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 311.204280][T13105] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 311.249594][T13290] netlink: 'syz.2.2595': attribute type 10 has an invalid length. [ 311.266838][T13105] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 311.305366][T13105] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 311.687641][T13105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.755255][T13105] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.763287][T13129] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 311.781919][T13129] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 311.801567][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.808730][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.820712][T13129] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 311.835786][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.843046][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.858184][T13129] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 311.966096][T13105] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 311.977440][ T53] Bluetooth: hci0: command tx timeout [ 312.078504][T13129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.112857][T13129] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.132600][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.139816][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.174732][ T5147] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.181998][ T5147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.506657][T13105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.519074][T13332] netlink: 'syz.3.2605': attribute type 10 has an invalid length. [ 312.552712][T13335] __nla_validate_parse: 6 callbacks suppressed [ 312.552731][T13335] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2604'. [ 312.690566][ T53] Bluetooth: hci1: command tx timeout [ 312.696559][T13129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.837036][T13129] veth0_vlan: entered promiscuous mode [ 312.872043][T13129] veth1_vlan: entered promiscuous mode [ 312.961946][T13129] veth0_macvtap: entered promiscuous mode [ 312.983535][T13129] veth1_macvtap: entered promiscuous mode [ 313.017987][T13354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2608'. [ 313.050945][T13354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2608'. [ 313.067475][T13129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.080249][T13129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.092364][T13129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.105821][T13356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2608'. [ 313.114828][T13129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.124907][T13129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.135545][T13129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.146395][T13129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.157155][T13129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.169366][T13129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.207068][T13129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.222981][T13129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.233177][T13129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.258344][T13129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.270714][T13129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.282151][T13129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.292581][T13129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.304553][T13129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.316508][T13129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.362816][T13129] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.372268][T13129] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.383020][T13129] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.392402][T13129] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.623033][T13105] veth0_vlan: entered promiscuous mode [ 313.673969][T13105] veth1_vlan: entered promiscuous mode [ 313.681324][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.689785][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.718183][T13368] netlink: 'syz.2.2614': attribute type 10 has an invalid length. [ 313.781755][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.799158][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.834051][T13105] veth0_macvtap: entered promiscuous mode [ 313.869441][T13105] veth1_macvtap: entered promiscuous mode [ 313.941957][T13105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.977124][T13105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.997133][T13105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.022749][T13105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.054350][T13105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.068167][T13105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.078980][T13105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.095627][T13105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.107936][T13105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.124738][T13105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.154583][T13389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2618'. [ 314.159828][T13105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.198798][T13385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2618'. [ 314.228225][T13377] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2617'. [ 314.268955][T13378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2618'. [ 314.278459][T13105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.303451][T13105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.317135][T13105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.334880][T13105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.347220][T13105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.358770][T13394] xt_cgroup: path and classid specified [ 314.362526][T13105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.390377][T13105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.408538][T13105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.419758][T13105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.437026][T13105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.448994][T13105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.492112][T13105] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.503631][T13105] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.517240][T13105] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.537404][T13105] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.720738][T13399] netlink: 'syz.2.2622': attribute type 2 has an invalid length. [ 314.743903][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.748205][T13399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2622'. [ 314.762337][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.875639][T13405] netlink: 'syz.2.2622': attribute type 1 has an invalid length. [ 314.899681][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.920700][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.117543][T13412] netlink: 'syz.2.2624': attribute type 10 has an invalid length. [ 315.275093][T13420] net_ratelimit: 140 callbacks suppressed [ 315.275120][T13420] dccp_invalid_packet: P.Data Offset(100) too large [ 315.347734][T13424] veth0_virt_wifi: mtu less than device minimum [ 315.540485][T13428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.634810][T13424] syzkaller0: entered allmulticast mode [ 317.577704][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.585420][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.773266][T13442] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2631'. [ 317.785745][T13439] netlink: 'syz.4.2631': attribute type 7 has an invalid length. [ 317.816122][T13446] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2632'. [ 318.000804][T13459] netlink: 'syz.2.2636': attribute type 10 has an invalid length. [ 318.075843][T13464] netlink: zone id is out of range [ 318.094158][T13464] netlink: zone id is out of range [ 318.099361][T13464] netlink: zone id is out of range [ 318.164363][T13464] netlink: zone id is out of range [ 318.177101][T13464] netlink: zone id is out of range [ 318.189295][T13464] netlink: zone id is out of range [ 318.207571][T13464] netlink: zone id is out of range [ 318.221356][T13464] netlink: zone id is out of range [ 318.670217][T13493] netlink: 'syz.4.2645': attribute type 1 has an invalid length. [ 318.678119][T13493] netlink: 9352 bytes leftover after parsing attributes in process `syz.4.2645'. [ 318.760291][T13493] netlink: 'syz.4.2645': attribute type 1 has an invalid length. [ 318.789252][T13493] netlink: 'syz.4.2645': attribute type 2 has an invalid length. [ 319.291173][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.323244][T13505] netlink: 'syz.3.2648': attribute type 10 has an invalid length. [ 319.665345][T13525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2656'. [ 320.219704][T13539] netlink: 'syz.2.2662': attribute type 10 has an invalid length. [ 320.460515][T13555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2665'. [ 320.966061][T13569] net_ratelimit: 280 callbacks suppressed [ 320.966086][T13569] netlink: zone id is out of range [ 320.980490][T13569] netlink: zone id is out of range [ 321.000413][T13569] netlink: zone id is out of range [ 321.071656][T13569] netlink: zone id is out of range [ 321.077223][T13569] netlink: zone id is out of range [ 321.110968][T13569] netlink: zone id is out of range [ 321.162776][T13569] netlink: zone id is out of range [ 321.179370][T13569] netlink: zone id is out of range [ 321.207467][T13569] netlink: zone id is out of range [ 321.214818][T13580] Bluetooth: MGMT ver 1.22 [ 321.226659][T13569] netlink: zone id is out of range [ 321.373045][T13588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2677'. [ 321.407127][T13584] netlink: 'syz.3.2675': attribute type 10 has an invalid length. [ 321.443455][T13590] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2674'. [ 321.540330][T13596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2680'. [ 321.593718][T13596] netlink: 'syz.0.2680': attribute type 15 has an invalid length. [ 322.342969][T13634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2691'. [ 322.396711][T13631] netlink: 'syz.2.2692': attribute type 10 has an invalid length. [ 322.414753][T13637] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2693'. [ 322.783150][T13656] __nla_validate_parse: 5 callbacks suppressed [ 322.783172][T13656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2698'. [ 322.833612][T13660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2699'. [ 322.960809][T13666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2704'. [ 323.157502][T13671] validate_nla: 2 callbacks suppressed [ 323.157526][T13671] netlink: 'syz.0.2705': attribute type 10 has an invalid length. [ 323.248848][T13680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2709'. [ 323.303521][T13680] netlink: 'syz.1.2709': attribute type 15 has an invalid length. [ 323.406436][T13691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2711'. [ 323.438714][T13691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2711'. [ 323.497302][T13698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2711'. [ 323.633155][T13701] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2714'. [ 323.667062][T13701] bridge_slave_1: left allmulticast mode [ 323.680310][T13701] bridge_slave_1: left promiscuous mode [ 323.693572][T13701] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.316577][T13727] netlink: 'syz.4.2721': attribute type 10 has an invalid length. [ 324.434304][T13731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2723'. [ 324.682825][T13738] netlink: 'syz.1.2723': attribute type 15 has an invalid length. [ 324.772440][ T5098] Bluetooth: hci2: command 0x0406 tx timeout [ 324.785418][T13742] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2726'. [ 326.028352][T13786] net_ratelimit: 135 callbacks suppressed [ 326.028377][T13786] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 326.105117][T13790] cannot load conntrack support for proto=3 [ 326.198470][T13793] netlink: 'syz.0.2739': attribute type 15 has an invalid length. [ 326.485562][T13811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.773942][T13814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.489320][T13844] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 327.753623][T13850] netlink: 'syz.2.2753': attribute type 15 has an invalid length. [ 328.150386][T13855] __nla_validate_parse: 9 callbacks suppressed [ 328.150411][T13855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2754'. [ 328.211546][T13855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2754'. [ 328.260784][T13855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2754'. [ 328.811386][T13861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2756'. [ 328.850917][T13861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2756'. [ 328.912123][T13861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2756'. [ 329.306068][T13877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2761'. [ 329.422515][T13877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2761'. [ 329.510374][T13877] cannot load conntrack support for proto=3 [ 329.542016][T13880] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2760'. [ 329.575286][T13880] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2760'. [ 329.585949][T13880] vlan0: entered allmulticast mode [ 329.592029][T13880] @ÿ: entered allmulticast mode [ 329.606050][T13886] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 329.654953][T13878] syzkaller1: entered promiscuous mode [ 329.691681][T13878] syzkaller1: entered allmulticast mode [ 329.864564][T13889] @ÿ: renamed from veth0_vlan (while UP) [ 330.658679][T13922] netlink: zone id is out of range [ 330.740357][T13922] netlink: zone id is out of range [ 330.745735][T13922] netlink: zone id is out of range [ 330.788777][T13929] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 330.849635][T13922] netlink: zone id is out of range [ 330.909542][T13922] netlink: zone id is out of range [ 330.915872][T13935] bond1: (slave bridge4): Enslaving as an active interface with an up link [ 330.931551][T13922] netlink: zone id is out of range [ 331.432099][T13962] net_ratelimit: 138 callbacks suppressed [ 331.432123][T13962] dccp_invalid_packet: P.Data Offset(100) too large [ 332.468828][T14024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.497048][T14025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.135761][T14040] netlink: 'syz.3.2803': attribute type 15 has an invalid length. [ 333.150645][T14046] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 333.157541][ T35] bridge_slave_1: left allmulticast mode [ 333.190065][ T35] bridge_slave_1: left promiscuous mode [ 333.205980][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.267640][ T35] bridge_slave_0: left allmulticast mode [ 333.273006][T14048] __nla_validate_parse: 14 callbacks suppressed [ 333.273030][T14048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2805'. [ 333.282407][ T35] bridge_slave_0: left promiscuous mode [ 333.324336][T14048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2805'. [ 333.325895][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.384218][ T35] tipc: Resetting bearer [ 333.663729][ T35] tipc: Disabling bearer [ 333.777661][ T35] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 334.099979][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.111977][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.127514][ T35] bond0 (unregistering): Released all slaves [ 334.294778][ T35] tipc: Left network mode [ 334.629632][T14077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2812'. [ 334.658154][T14078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2811'. [ 334.691203][T14078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2811'. [ 334.718843][T14075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2811'. [ 335.020084][ T5098] Bluetooth: hci3: command 0x0405 tx timeout [ 335.162082][T14090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2816'. [ 335.224992][T14090] netlink: 'syz.0.2816': attribute type 15 has an invalid length. [ 335.468069][T14096] ieee802154 phy0 wpan0: encryption failed: -90 [ 335.505751][T14096] ieee802154 phy0 wpan0: encryption failed: -22 [ 335.605771][T14096] ieee802154 phy0 wpan0: encryption failed: -22 [ 335.879074][ T35] hsr_slave_0: left promiscuous mode [ 335.892067][ T35] hsr_slave_1: left promiscuous mode [ 335.906293][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.917494][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.929826][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.938173][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.965635][ T35] veth1_vlan: left promiscuous mode [ 335.974820][ T35] veth0_vlan: left promiscuous mode [ 336.422496][T14131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2826'. [ 336.443025][T14131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2826'. [ 336.529488][ T35] team0 (unregistering): Port device team_slave_1 removed [ 336.574977][ T35] team0 (unregistering): Port device team_slave_0 removed [ 337.037569][T14111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2822'. [ 337.283283][T14137] netlink: 'syz.0.2829': attribute type 15 has an invalid length. [ 337.511913][T14152] netlink: 'syz.4.2833': attribute type 15 has an invalid length. [ 337.701991][T14159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.310783][T14175] __nla_validate_parse: 4 callbacks suppressed [ 338.310805][T14175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2839'. [ 338.667544][T14179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2840'. [ 338.709208][T14179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2840'. [ 338.761972][T14177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2840'. [ 338.898085][T14185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2842'. [ 338.944066][T14185] netlink: 'syz.1.2842': attribute type 15 has an invalid length. [ 339.034232][T14186] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2841'. [ 339.082073][T14186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2841'. [ 339.113247][T14182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2841'. [ 339.354402][T14202] @ÿ: renamed from veth0_vlan (while UP) [ 339.552506][T14207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2850'. [ 340.035494][T14226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2853'. [ 340.539540][T14248] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 340.844002][T14258] netlink: 'syz.1.2863': attribute type 15 has an invalid length. [ 341.027592][T14271] netdevsim netdevsim1 netdevsim0: Unsupported IPsec algorithm [ 341.082097][T14275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.418967][T14294] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 342.107103][T14318] netlink: 'syz.2.2878': attribute type 15 has an invalid length. [ 342.419766][T14333] xt_TPROXY: Can be used only with -p tcp or -p udp [ 342.700374][T14343] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 342.711811][T14341] No such timeout policy "syz0" [ 343.243278][T14357] netlink: 'syz.1.2891': attribute type 15 has an invalid length. [ 343.863000][T14377] __nla_validate_parse: 18 callbacks suppressed [ 343.863025][T14377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2897'. [ 343.895672][T14379] netlink: 'syz.4.2898': attribute type 1 has an invalid length. [ 344.380623][T14393] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 344.631541][T14401] batadv1: entered allmulticast mode [ 345.048172][T14414] netlink: 'syz.3.2910': attribute type 1 has an invalid length. [ 345.540514][T14430] netlink: 'syz.1.2917': attribute type 15 has an invalid length. [ 346.041628][T14452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2926'. [ 346.277059][T14463] netlink: 'syz.3.2929': attribute type 15 has an invalid length. [ 346.299701][T14464] Oops: stack segment: 0000 [#1] PREEMPT SMP KASAN PTI [ 346.306660][T14464] CPU: 0 PID: 14464 Comm: syz.4.2928 Not tainted 6.10.0-rc5-syzkaller-01176-g19e6ad2c7578 #0 [ 346.316861][T14464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 346.326977][T14464] RIP: 0010:bpf_xdp_redirect+0x59/0x1a0 [ 346.332627][T14464] Code: 81 c3 08 18 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 65 1a 99 f8 48 8b 1b 4c 8d 63 38 4c 89 e5 48 c1 ed 03 <42> 0f b6 44 2d 00 84 c0 0f 85 d0 00 00 00 45 8b 34 24 44 89 f6 83 [ 346.352376][T14464] RSP: 0018:ffffc9000b5cf970 EFLAGS: 00010202 [ 346.358519][T14464] RAX: 1ffff11005326a81 RBX: 0000000000000000 RCX: 0000000000040000 [ 346.366564][T14464] RDX: ffffc9000e178000 RSI: 00000000000001b9 RDI: 00000000000001ba [ 346.374590][T14464] RBP: 0000000000000007 R08: ffffffff8665e83f R09: 1ffffffff25f78b0 [ 346.382611][T14464] R10: dffffc0000000000 R11: fffffbfff25f78b1 R12: 0000000000000038 [ 346.390632][T14464] R13: dffffc0000000000 R14: ffffc9000c1cf048 R15: 000000000000a020 [ 346.398655][T14464] FS: 00007f9e625cf6c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 346.407635][T14464] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 346.414270][T14464] CR2: 00007f9e619000a0 CR3: 0000000067e04000 CR4: 00000000003506f0 [ 346.422289][T14464] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 346.430394][T14464] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 346.438506][T14464] Call Trace: [ 346.441844][T14464] [ 346.444817][T14464] ? __die_body+0x88/0xe0 [ 346.449214][T14464] ? die+0xcf/0x110 [ 346.453085][T14464] ? do_trap+0x15a/0x3a0 [ 346.457383][T14464] ? do_error_trap+0x1dc/0x2c0 [ 346.462201][T14464] ? __pfx_do_error_trap+0x10/0x10 [ 346.467345][T14464] ? rcu_is_watching+0x15/0xb0 [ 346.472143][T14464] ? exc_stack_segment+0x38/0x50 [ 346.477104][T14464] ? asm_exc_stack_segment+0x26/0x30 [ 346.482498][T14464] ? tun_get_user+0x30df/0x4560 [ 346.487484][T14464] ? bpf_xdp_redirect+0x59/0x1a0 [ 346.492448][T14464] bpf_prog_bc55b47b7a2429cd+0x1d/0x1f [ 346.497934][T14464] tun_get_user+0x3321/0x4560 [ 346.502648][T14464] ? tun_get_user+0x84c/0x4560 [ 346.507445][T14464] ? __pfx_tun_get_user+0x10/0x10 [ 346.512499][T14464] ? tun_get+0x1e/0x2f0 [ 346.516686][T14464] ? tun_get+0x1e/0x2f0 [ 346.520867][T14464] ? tun_get+0x27d/0x2f0 [ 346.525145][T14464] tun_chr_write_iter+0x113/0x1f0 [ 346.530205][T14464] vfs_write+0xa72/0xc90 [ 346.534478][T14464] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 346.540046][T14464] ? __pfx_vfs_write+0x10/0x10 [ 346.544837][T14464] ? do_futex+0x33b/0x560 [ 346.549195][T14464] ksys_write+0x1a0/0x2c0 [ 346.553559][T14464] ? __pfx_ksys_write+0x10/0x10 [ 346.558430][T14464] ? do_syscall_64+0x100/0x230 [ 346.563241][T14464] ? do_syscall_64+0xb6/0x230 [ 346.567958][T14464] do_syscall_64+0xf3/0x230 [ 346.572481][T14464] ? clear_bhb_loop+0x35/0x90 [ 346.577183][T14464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.583115][T14464] RIP: 0033:0x7f9e61774a9f [ 346.587555][T14464] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 346.607188][T14464] RSP: 002b:00007f9e625cf010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 346.615632][T14464] RAX: ffffffffffffffda RBX: 00007f9e61904038 RCX: 00007f9e61774a9f [ 346.623626][T14464] RDX: 0000000000000046 RSI: 00000000200002c0 RDI: 00000000000000c8 [ 346.631614][T14464] RBP: 00007f9e617e4bcd R08: 0000000000000000 R09: 0000000000000000 [ 346.639635][T14464] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000000 [ 346.647672][T14464] R13: 000000000000006e R14: 00007f9e61904038 R15: 00007fff7d3b4888 [ 346.655680][T14464] [ 346.658974][T14464] Modules linked in: [ 346.663086][T14464] ---[ end trace 0000000000000000 ]--- [ 346.668584][T14464] RIP: 0010:bpf_xdp_redirect+0x59/0x1a0 [ 346.674233][T14464] Code: 81 c3 08 18 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 65 1a 99 f8 48 8b 1b 4c 8d 63 38 4c 89 e5 48 c1 ed 03 <42> 0f b6 44 2d 00 84 c0 0f 85 d0 00 00 00 45 8b 34 24 44 89 f6 83 [ 346.693936][T14464] RSP: 0018:ffffc9000b5cf970 EFLAGS: 00010202 [ 346.700100][T14464] RAX: 1ffff11005326a81 RBX: 0000000000000000 RCX: 0000000000040000 [ 346.708117][T14464] RDX: ffffc9000e178000 RSI: 00000000000001b9 RDI: 00000000000001ba [ 346.716161][T14464] RBP: 0000000000000007 R08: ffffffff8665e83f R09: 1ffffffff25f78b0 [ 346.724214][T14464] R10: dffffc0000000000 R11: fffffbfff25f78b1 R12: 0000000000000038 [ 346.732321][T14464] R13: dffffc0000000000 R14: ffffc9000c1cf048 R15: 000000000000a020 [ 346.740399][T14464] FS: 00007f9e625cf6c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 346.749395][T14464] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 346.756087][T14464] CR2: 00007f9e619000a0 CR3: 0000000067e04000 CR4: 00000000003506f0 [ 346.764164][T14464] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 346.772274][T14464] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 346.780361][T14464] Kernel panic - not syncing: Fatal exception in interrupt [ 346.787887][T14464] Kernel Offset: disabled [ 346.792241][T14464] Rebooting in 86400 seconds..