last executing test programs: 1m11.219217418s ago: executing program 2 (id=4993): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r5, 0x2}, 0x10) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r6, 0x2, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 1m11.106306605s ago: executing program 2 (id=4994): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x44, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}]}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x44}}, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="034886dd05000a000000000000006000000001002100fe880001000000010000060000007d01ff0200000000000000000000000000010000eca140"], 0xfdef) 1m10.727383252s ago: executing program 2 (id=4999): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000003b0007010000000000000000047c"], 0x2c}}, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000003, 0x4000010, r1, 0xeb540000) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000000f5"], 0xfdef) 58.551304364s ago: executing program 2 (id=4999): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000003b0007010000000000000000047c"], 0x2c}}, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000003, 0x4000010, r1, 0xeb540000) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000000f5"], 0xfdef) 47.414336527s ago: executing program 1 (id=5276): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x4f) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04", 0xb) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18}], 0x18}, 0xc000) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x4d}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 47.36555863s ago: executing program 1 (id=5277): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000100000000000000000008500000023000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002e80)=ANY=[@ANYBLOB="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", @ANYRES16=r1], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0x41, 0x0, 0x0, 0xad, 0x0, &(0x7f0000000540)="6237ea76a99f1cb66ebd252b7b95139a94ebaf9c9d887302c9056f019edc758989770610205b52a3ecf567d8950f2f726f2e02720c214208051ceefb1c5b94a0570e433db8eb9e59a3fdfdda5e611e51941acde5c4c42d413e0610052faf0badb97669a60e8b9d47c6051c8b30208e6c28e5547e08049b499378594ce8b56e3c8286b5482947abd880cbe18fef47a013da68534cb2286a768c3e88f13fc7c72cc947a465f21c84a807aab2f497", 0x0, 0x0, 0x10}, 0x3a) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan1\x00'}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRESDEC=r4, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x0, 0xde, &(0x7f00000006c0)=""/222}, 0x90) (async) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) sendmsg$netlink(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="18000000220001060000000000"], 0x18}], 0x1}, 0x0) socket(0x23, 0x5, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000140)="97322ea628a37a62a1bcc1496ccc27ab02a20efdb91241283abbda05b634361eb7d6e105cef7f1b9e056149eae8c3f45a1d7c82fd337e5c0cdd8af4d81eb828bac25e5052460c472badbf132fdce17d8c0b838c26fa7bb945f9b2fcd27b580c16cc6d272f8c83f7f6122016dfcdd898780b5c2e3618d4a6f03a65b30b70724012ca0646e847eac66", 0x88}, {&(0x7f0000000200)="0b8405ae9b098472d23974693d51bc5ab437b6b92b2c95a0ab24020a77780b8e85ee530d505874d8387165a4c492cb92", 0x30}, {&(0x7f0000000240)="bd44eb4bb8e2ba10337cb563a56fcde8d140c7c7a13f1825bf5ee19d186e19a1bcaae06452288e49cc5e8782c370e8bb2189ccc5f55915189cf1a0447f4e51116d667611b27325f12dc0879ec0a1285c5ee00a5338aa7049aca2c03f4f7b54c9cdeadaa343b0eea137143ff65a3cf0a8de832d72257c2b24a21ac5b5c00bb93e3f73561e5bfa10300adf114ff69b8cc9d0c073caa612f8a2fdd729cf3baf59ec7a0f7cc2969afea3307ecac9187bae80f91d5c43c70b66d7a22b0e766246c17860d42eb539ec555e", 0xc8}, {&(0x7f0000000340)="a482c6d7a2042bd526e08c6761df78c72b459e10d4c843641dd7f42fefa07ce5f38f226d8863ea0654ea0f9c09d491260fe273a0ca46509070e851fe61363314d08170377539444e4e6c543b4b5ed5f503dd34991a0471e62c2f90cd3d77324dac9bed1113a5fdfa89eacb1b5c697ec6b1bfe274b9", 0x75}, {&(0x7f00000003c0)="4ecbd78bb64f0c1c1e8ca8ca478284a4191dc16a681b50fec3621763fdd7822790a8027822ab3e96ed1b6106f73f00", 0x2f}, {&(0x7f0000000400)="6b8ebda30e6edd02b0bbc5927480b02e594a3e7e653f5c5ff600f1e3d034d1df3282a0977c09913a5268f3a270ceb572059e93ea18a87c81987db18bbf4fad40cb6a39a5cfcfafe49eb1f33d48950258918382231411d200bd01abf6e40d243b1fbd7724f104b1592db051bb2b05ec2bd39954b95e436d28ad88fc9cdf479ceb83001714c0b6d8ee4acfb1d9c7e2d7dc8935b4287dde512951c606535349de48d03ad9700038785b7665e4b3bdf0d2e8b2b848260e623947b60ef658ff6805377ac9efa860d3a3ca3ed1939b350ece26d4e28a5436ae3682095a7c0b863d3d307ae2d8afb6b270888b6dd0", 0xeb}], 0x6, &(0x7f0000000c00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118, 0x1}}], 0x1, 0x200088c0) (async) syz_emit_ethernet(0x42, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c20000000800480000340000000000069078ac141400ac1e0001440708000000008903f6010000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800000550de6ab349d7f5bf1a224a34088a843556854baa7ed9c17083f9a69236d4aa30fa3846ea64a8c7bc3320534b3cb701010000950a765b0a117b19378e66a1a58d6d6208f510ac8f74d70e1d1f75827bc4d62398a9c6"], 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180300000000040000000000000001001811", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000083000000bc0900000000000055090100000000009500000000000000bf91000000000000b70200"], 0x0, 0x6, 0x1003, &(0x7f0000001e40)=""/4099}, 0x90) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6010104000140600fe8000000000000005000000000000bbfe8000000000000002000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="54c2000090780000"], 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r8) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) 47.254262036s ago: executing program 1 (id=5279): r0 = socket(0x200000100000011, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x7, 0x0, 0x4}, 0x48) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="90020ee7ff07"], 0x120) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000040)=0x9, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_crypto(0x10, 0x3, 0x15) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="18010000", @ANYRES16=0x0, @ANYRES32=0x0, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="54000180140002006d616376746170300000000000000000080001", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="fc3867ac4ad55bdb48c28e39ec9dcaff0000", @ANYRES64=r0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="2880010508000120"], 0x118}, 0x1, 0x0, 0x0, 0x20048020}, 0x44004) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000300), &(0x7f00000003c0)=r2}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="02200000001f0000140003006261746164763000000000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x0) 47.090353916s ago: executing program 1 (id=5282): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="020300000a0000000000000000000000030006000000000002000000ac1414aa007a00000000000002000100000000000000001600000000030005000000000002"], 0x50}, 0x1, 0x7}, 0x0) 46.923992962s ago: executing program 1 (id=5284): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000180)=""/109}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000003080)={0x29c, 0x23, 0x1, 0x0, 0x0, "", [@nested={0x255, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="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"]}]}, 0x29c}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0xa888) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000180001000000000000000000020000800000000900000000060015000400000014001680100008800c000380"], 0x38}}, 0x0) 45.684339116s ago: executing program 2 (id=4999): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000003b0007010000000000000000047c"], 0x2c}}, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000003, 0x4000010, r1, 0xeb540000) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000000f5"], 0xfdef) 44.926195418s ago: executing program 1 (id=5286): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000001140)={0x10, 0x0, 0x25dfdbfd, 0x100000}, 0xc) r2 = socket$netlink(0x10, 0x3, 0xf) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x4}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a655855", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000580)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random=0x8, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @val={0x4, 0x6, {0x9, 0x10, 0xffff, 0xa}}, @void, @void, @void, @void}, 0x3e) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000a40)=ANY=[@ANYBLOB="b0000000080211000001080211f400f60702110000001000000002000000b7d912327fa84c92fc1f051acb2fd8e969ace32c5777d52e7bc46bb7554e9c314e011ef4b26c6d44a748320e147385ba59136463dcb47492933b212dd8863c771ff2b51a337faa61ff22965695493a5043a4325a9cc7f5a358bb8a3347d57435e695bc65c059577ed71dfcf5b74ffffadca559cc04a228298dc3a5f26daf0e5bff7bbeb75474c4e23a6497a6b42a61a62128846a"], 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x24}]}, @void}, 0x27) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44000, 0xc100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x0) getuid() sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000040a0102dc46a77f3e1075d76406631a42ef816a0000000000e6000000000000cbdb6dc57793f96dcd6b98a9fa5e055fa2d3967449523058f5450e82c9bbd05d0cd58d2486e70b0fcda28f6d214224da32fbc8db3ff144e9363667e0422915162c43782099aad75caf29980127374aca90a214d61ada3e08efd09fbde773b9984f6d8327a41bc600d1fdfaa28eb5f1a3adc0b9895a02cfb2d31a21a03331f1a774ba8570cefab29e93"], 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) sendmmsg(r1, &(0x7f0000000b80), 0x3, 0x4000000) r10 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x12}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r10, 0x11, 0x2, 0x0, @prog_id}, 0x20) 12.117303164s ago: executing program 2 (id=4999): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000003b0007010000000000000000047c"], 0x2c}}, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000003, 0x4000010, r1, 0xeb540000) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000000f5"], 0xfdef) 8.286184785s ago: executing program 4 (id=5406): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="5800000010000104f0ffffff000500000000fdff", @ANYRES32=r0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe"], 0x58}}, 0x14) 6.52670861s ago: executing program 4 (id=5409): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0xf4, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}]}], {0x14}}, 0xdc}, 0x1, 0x9c}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x1}, 0x38) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}], 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x44}}, 0x0) 6.515966963s ago: executing program 3 (id=5410): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000000)=@generic={&(0x7f00000017c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x8}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)=0x1, 0x4) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000f00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000100)=0x2000004) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r3, @ANYBLOB="0a00340002020202020200000a0006000802110000000b000800c9006c09"], 0x44}}, 0x0) 6.332494756s ago: executing program 4 (id=5411): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x600, 0x23000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.173572731s ago: executing program 0 (id=5412): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="b4000000000000237910000000000000630000000000000095007400000000006aee5030a2eb891311b3451ec0687faec0432b5455cb1000805bdfb16dbbdf085f1b75f36653"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) 6.159520587s ago: executing program 4 (id=5413): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000180)=""/109}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000003080)={0x29c, 0x23, 0x1, 0x0, 0x0, "", [@nested={0x255, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="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"]}]}, 0x29c}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x5000000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000180001000000000000000000020000800000000900000000060015000400000014001680100008800c000380"], 0x38}}, 0x0) 6.047944725s ago: executing program 3 (id=5414): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020400) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, 0x0, 0x4004080) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)}, 0x2100) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) r8 = socket$can_bcm(0x1d, 0x2, 0x2) r9 = socket(0x28, 0x801, 0x0) getsockopt$bt_BT_SECURITY(r9, 0x28, 0x6, 0x0, 0x150ec4961d2b7688) (async) r10 = accept4(r8, 0x0, 0x0, 0x80800) (async) r11 = epoll_create1(0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r12, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000100)={0xa0000016}) (async) ppoll(&(0x7f0000000040)=[{r10, 0x85}, {r11}], 0x2, 0x0, 0x0, 0x0) 5.79928515s ago: executing program 0 (id=5415): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$unix(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)='v', 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000000000000100040001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2], 0x30}, 0x0) (async) close(r2) (async) recvmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x0, 0x0, 0x1) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) (async) r5 = socket(0x40000000015, 0x805, 0x0) getsockopt(r5, 0x114, 0x271b, &(0x7f0000000440)=""/102400, &(0x7f00000000c0)=0x41) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000019440)=ANY=[@ANYBLOB="67ffffff1000010000000000000000000000000a30000000180a010200000000000000000100000808000740000000010800074000000000040003800800075000000001140000001100010000000000000000000000000a"], 0x58}}, 0x9185f668530192c6) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000194c0)=ANY=[@ANYRES32=r4, @ANYRES16=r3, @ANYRES32=r2], 0x2c}}, 0x0) (async) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @dev, 'bond_slave_1\x00'}}, 0x1e) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x7, 0x10001, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040)=0x18, &(0x7f0000000140)}, 0x20) (async) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x130, 0x111, 0x4b4, 0x130, 0xd4feffff, 0x338, 0x20a, 0x278, 0x338, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@mark={{0x30}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @loopback, @loopback, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00', @mcast1, @private0, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x0) 5.633213637s ago: executing program 3 (id=5416): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e20, @multicast1}], 0x20) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000400)) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x2}, 0xffffffffffffff33) (async) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) (async) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) (async) socket$kcm(0x10, 0x2, 0x0) (async) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="52bdaf902d2416f31429bf87ec10057e97c251c099d7620a85640886fa1331a9a762fc1cff6b4c1c15beab0ee58f76dc53a7716fb14f08161ed5bf94032e5fbc56d08a29fd3f345871c1e62293d65c751676a85ee5294153903d0294d268975da92a1ffa105b59104e9f80c9e9482f2bc83c20993bffd26e1a945611629ed667d610856acd3cdb47bd532bad58b7cfc5b9c07cb02acbaf9d8b40227d", @ANYRES16=0x0, @ANYRESOCT=r3], 0x34}}, 0x0) r6 = socket$inet6(0xa, 0x1, 0x7) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000002a00000008002f0000000000050036000000000000000005003700"/50], 0x38}, 0x4, 0x700000000000000}, 0x0) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB="d8010000", @ANYRES8=r5, @ANYBLOB="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"], 0x1d8}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) r9 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000400)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000480)=ANY=[@ANYRESHEX=r5, @ANYRES64=r6, @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x90) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000200)={0x3, &(0x7f0000000140)=[{0x9, 0x0, 0x6, 0x937}, {0x1, 0x0, 0x9, 0x9}, {0x0, 0x9d, 0x6}]}) (async) shutdown(r6, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r6, 0x84, 0x7d, &(0x7f0000000040), 0x8) (async) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="7b55c852a2a790233f1e1fcef7f0c5da276c3728f9532190be890ce13b481024210384775b6a6fc95aa3d82b9115600eb44c7a07030eea000000000000648072ac49b01fa4", 0x45}, {&(0x7f0000000300)="d078fcf48a0d498fe73eae0f5ce996a5a2e7b7905c0f8d56be040c32f57539a8a2d7c14e94e1db7a583d2d80864dc79c9978e8e9810d6fa1d3ee056066696f06e62e9fb592040d37552aa9b8288f2b08b4c3b99601a5932c47d9ea9557df4f2262743e9a27981029d67e5f7db61229cc03f29b9149b3635982d7483fc0d4d17aebff3785251defdb72e54cda35d5817188c0b6b9d8784170fd5e98cae06ecb2ab11029758aabdd6889926766c13fdd96ccbcc2c2ab841ed9d881d23c137c84a6e48303879c5647628604845654a55009fa", 0xd1}], 0x2}, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) 5.17678813s ago: executing program 4 (id=5417): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}, 0x1, 0xf000000}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x3000000}, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_script(r1, 0x0, 0xfffffe5d) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000010400000000000000000000ffff", @ANYRES32=r5, @ANYBLOB="008104000000000008000a00", @ANYRES32=r3], 0x28}}, 0x0) 4.844173096s ago: executing program 0 (id=5418): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a800000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = socket$packet(0x11, 0x0, 0x300) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f00000010c0)=0xf, 0x4) (async) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x310) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) (async) r8 = epoll_create1(0x0) epoll_pwait(r8, &(0x7f0000000040)=[{}], 0x1, 0x29a, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000000)={0x80000001}) (async) r9 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) connect$l2tp6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000000)=@req3={0x0, 0x3a}, 0x1c) (async) socket$inet6(0xa, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="4d7e00c30000000000002700000008000200", @ANYRES16=r12], 0x1c}, 0x4, 0x700000000000000}, 0x0) 4.445288343s ago: executing program 4 (id=5419): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000000}, 0x0) 4.325012992s ago: executing program 3 (id=5420): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000001140)={0x10, 0x0, 0x25dfdbfd, 0x100000}, 0xc) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x4}, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a655855", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000580)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random=0x8, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x0, 0x1}, {0xb, 0x1}, {0xc}, {0x12}, {}, {0x24}]}, @void, @val={0x4, 0x6, {0x9, 0x10, 0xffff, 0xa}}, @void, @void, @void, @void}, 0x3d) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000a40)=ANY=[@ANYBLOB="b0000000080211000001080211f400f60702110000001000000002000000b7d912327fa84c92fc1f051acb2fd8e969ace32c5777d52e7bc46bb7554e9c314e011ef4b26c6d44a748320e147385ba59136463dcb47492933b212dd8863c771ff2b51a337faa61ff22965695493a5043a4325a9cc7f5a358bb8a3347d57435e695bc65c059577ed71dfcf5b74ffffadca559cc04a228298dc3a5f26daf0e5bff7bbeb75474c4e23a6497a6b42a61a62128846a"], 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x24}]}, @void}, 0x27) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44000, 0xc100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x0) getuid() sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000040a0102dc46a77f3e1075d76406631a42ef816a0000000000e6000000000000cbdb6dc57793f96dcd6b98a9fa5e055fa2d3967449523058f5450e82c9bbd05d0cd58d2486e70b0fcda28f6d214224da32fbc8db3ff144e9363667e0422915162c43782099aad75caf29980127374aca90a214d61ada3e08efd09fbde773b9984f6d8327a41bc600d1fdfaa28eb5f1a3adc0b9895a02cfb2d31a21a03331f1a774ba8570cefab29e93"], 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) sendmmsg(r1, &(0x7f0000000b80), 0x3, 0x4000000) r9 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x12}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r9, 0x11, 0x2, 0x0, @prog_id}, 0x20) 4.253325289s ago: executing program 0 (id=5421): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000640)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r3, @ANYBLOB="06001200000003000600b500800100000a000600080211000001000004001300240081000500020000000000050001"], 0x68}}, 0x0) 709.157782ms ago: executing program 0 (id=5423): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000004000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 419.474873ms ago: executing program 3 (id=5424): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000150000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c0000002a0a01020000000000000000010000000900010073797a30000000000900030073797a320000000060000000060a010400000000000000000100000008000b4000000000380004800c000180080001006c6f67002800018007000100637400001c000280080004400000000a080002400000001105000300010000000900010073797a30"], 0xd4}}, 0x0) 238.458µs ago: executing program 0 (id=5425): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000300)={0x1d, r3}, 0x18) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x5) sendmsg$can_j1939(r1, &(0x7f0000000740)={&(0x7f0000000500), 0x18, &(0x7f0000000700)={&(0x7f0000000600)='U', 0x1}}, 0x500) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000840)=ANY=[@ANYRES64=r0, @ANYRESDEC], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 0s ago: executing program 3 (id=5426): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x5, 0x2, 0x4}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1e000000", @ANYRES16=r4, @ANYBLOB="0100000000000000000001"], 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): 3'. [ 363.180729][T15824] wlan1: authentication with 08:02:11:00:00:00 timed out [ 363.529379][T18035] syzkaller1: entered promiscuous mode [ 363.553033][T18035] syzkaller1: entered allmulticast mode [ 363.561703][T18038] netlink: 'syz.3.3814': attribute type 4 has an invalid length. [ 363.688323][T18045] netlink: 'syz.3.3816': attribute type 1 has an invalid length. [ 364.518228][T18081] vxcan0: tx drop: invalid da for name 0x0000000000000002 [ 364.644351][T18081] veth8: entered allmulticast mode [ 365.022719][T18108] netlink: 'syz.0.3840': attribute type 7 has an invalid length. [ 365.384941][T18130] sctp: [Deprecated]: syz.4.3846 (pid 18130) Use of struct sctp_assoc_value in delayed_ack socket option. [ 365.384941][T18130] Use struct sctp_sack_info instead [ 365.418099][T18132] xt_CT: You must specify a L4 protocol and not use inversions on it [ 365.497325][T18134] Bluetooth: MGMT ver 1.23 [ 365.938414][T18159] xt_CT: You must specify a L4 protocol and not use inversions on it [ 365.962630][T18162] netlink: 'syz.3.3861': attribute type 6 has an invalid length. [ 366.111635][T18170] netlink: 'syz.2.3865': attribute type 33 has an invalid length. [ 366.213897][T18178] xt_l2tp: v2 sid > 0xffff: 16777216 [ 366.350966][T18178] vlan2: entered promiscuous mode [ 366.359671][T18187] __nla_validate_parse: 14 callbacks suppressed [ 366.359690][T18187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3871'. [ 366.378753][T18178] bond0: entered promiscuous mode [ 366.383280][T18187] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3871'. [ 366.394136][T18178] bond_slave_0: entered promiscuous mode [ 366.399979][T18178] bond_slave_1: entered promiscuous mode [ 366.448607][T18178] team0: Port device vlan2 added [ 366.458662][T18191] syzkaller1: entered promiscuous mode [ 366.489573][T18191] syzkaller1: entered allmulticast mode [ 366.512453][T18189] netlink: 'syz.0.3870': attribute type 12 has an invalid length. [ 366.530365][T18189] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3870'. [ 366.540312][T18199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.555175][T18194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.591561][T18194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.153068][T18240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.175186][T18240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.194305][ T5099] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 367.198738][T18240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.212440][ T5099] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 367.302474][T18242] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3889'. [ 367.312298][T18242] netlink: 'syz.4.3889': attribute type 1 has an invalid length. [ 367.323015][T15813] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 367.444348][T15826] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 367.555892][T15813] wlan1: authentication with 08:02:11:00:00:00 timed out [ 367.811382][T18269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.845356][T18269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.888477][T18269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.954926][T18279] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3903'. [ 368.113610][T18289] dccp_v6_rcv: dropped packet with invalid checksum [ 368.613393][T18315] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 368.995792][T18348] netlink: 596 bytes leftover after parsing attributes in process `syz.0.3926'. [ 369.331313][T18366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 369.360828][T18366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 369.383834][T18366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 369.555065][T18374] batadv0: entered promiscuous mode [ 369.572065][T18374] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 369.592710][T18374] batadv0: left promiscuous mode [ 369.798435][T18387] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3938'. [ 370.038338][T18391] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3940'. [ 370.185418][T18399] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3943'. [ 370.348703][T18407] netlink: 'syz.0.3946': attribute type 9 has an invalid length. [ 370.358678][T18407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3946'. [ 370.482626][T18416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.499746][T18416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.533514][T18416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.724404][T18423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.764601][T18425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.764692][T18423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.791776][T18425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.804661][T18423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.834324][T18425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.071602][T18441] netlink: 'syz.3.3959': attribute type 4 has an invalid length. [ 371.199454][T18450] netlink: zone id is out of range [ 371.204831][T18450] netlink: del zone limit has 4 unknown bytes [ 371.314603][T18456] lo: entered promiscuous mode [ 371.681111][T18476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.699113][T18476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.712428][T18476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.786942][T18483] __nla_validate_parse: 1 callbacks suppressed [ 371.786961][T18483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3976'. [ 371.832502][T18483] team3: Mode changed to "activebackup" [ 371.836582][T18481] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3975'. [ 371.842039][T18483] team3: Mode changed to "roundrobin" [ 371.881075][T18481] Êü: entered promiscuous mode [ 371.960679][T18491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.973636][T18491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.985873][T18491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.102977][T18498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.276228][T18514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3985'. [ 372.292409][T18514] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3985'. [ 372.457943][T18525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3987'. [ 372.537788][T18523] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3989'. [ 372.558738][T18523] Êü: entered promiscuous mode [ 372.974770][T18567] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4001'. [ 373.037762][T18570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.052318][T18570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.070168][T18570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.220223][T18574] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4005'. [ 373.240445][T18574] Êü: entered promiscuous mode [ 373.294961][T18577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4006'. [ 373.318248][T18579] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4007'. [ 373.434254][T18585] tipc: Enabling of bearer rejected, failed to enable media [ 373.714682][T18601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.751077][T18598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.801029][T18601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.959369][T18615] batadv_slave_1: entered promiscuous mode [ 374.021822][T18621] netlink: 'syz.0.4019': attribute type 1 has an invalid length. [ 374.199158][T18628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.212114][T18630] xt_CT: You must specify a L4 protocol and not use inversions on it [ 374.232700][T18628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.282128][T18628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.517870][T18647] netlink: 'syz.3.4032': attribute type 10 has an invalid length. [ 374.546074][T18648] ip6t_REJECT: ECHOREPLY is not supported [ 374.562672][T18647] bond0: (slave netdevsim0): Releasing backup interface [ 374.590573][T18647] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 374.611042][T18647] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 374.621342][T18644] netlink: 'syz.4.4031': attribute type 1 has an invalid length. [ 374.623144][T18647] team0: Failed to send options change via netlink (err -105) [ 374.650595][T18647] team0: Port device netdevsim0 added [ 374.660401][T18652] netlink: 'syz.3.4032': attribute type 10 has an invalid length. [ 374.695121][T18652] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 374.726223][T18652] team0: Failed to send options change via netlink (err -105) [ 374.734746][T18652] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 374.747315][T18652] team0: Port device netdevsim0 removed [ 374.757623][T18652] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 374.896527][T18650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.018146][T18668] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 375.047128][T18665] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 375.186824][T18675] netlink: 'syz.3.4041': attribute type 4 has an invalid length. [ 375.536779][T18699] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 375.602719][T18700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.644195][T18700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.690247][T18700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.737668][T18707] netlink: 'syz.2.4053': attribute type 21 has an invalid length. [ 375.746241][T18710] netlink: 'syz.3.4055': attribute type 4 has an invalid length. [ 376.062390][T18719] team0: Device batadv0 is up. Set it down before adding it as a team port [ 376.173351][T18725] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 376.315886][T18723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 376.416874][T18735] syzkaller1: entered promiscuous mode [ 376.433029][T18735] syzkaller1: entered allmulticast mode [ 376.584534][ T5101] Bluetooth: hci1: command 0x0405 tx timeout [ 377.076537][T18766] __nla_validate_parse: 12 callbacks suppressed [ 377.076557][T18766] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4071'. [ 377.195908][T18769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4074'. [ 377.207765][T18771] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4075'. [ 377.229923][T18771] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4075'. [ 377.255063][T18771] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4075'. [ 377.326989][T18776] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4077'. [ 377.338108][T18776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4077'. [ 377.351194][T18776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4077'. [ 377.356613][T18778] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4078'. [ 377.470118][T18784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4081'. [ 377.510715][T18784] vxcan1: entered promiscuous mode [ 377.708392][T18795] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 377.882162][T18806] netlink: 'syz.3.4088': attribute type 6 has an invalid length. [ 378.107083][T18825] smc: net device batadv_slave_1 applied user defined pnetid SYZ0 [ 378.139038][T18828] netlink: 'syz.4.4097': attribute type 32 has an invalid length. [ 378.157933][T18828] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 378.211696][T18832] netlink: 'syz.0.4098': attribute type 7 has an invalid length. [ 378.640447][T18862] netlink: 'syz.0.4108': attribute type 4 has an invalid length. [ 378.829109][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.993882][T18892] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 379.345290][T18896] tipc: Enabling of bearer rejected, failed to enable media [ 379.539322][T18916] lo: left promiscuous mode [ 379.565302][T18916] batadv0: mtu greater than device maximum [ 379.571152][T18916] team0: Device batadv0 failed to change mtu [ 379.738658][T18931] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 379.998230][T18942] batman_adv: batadv2: Interface deactivated: netdevsim0 [ 380.005634][T18942] batman_adv: batadv2: Removing interface: netdevsim0 [ 380.027173][T18942] batman_adv: batadv3: Adding interface: netdevsim0 [ 380.035285][T18942] batman_adv: batadv3: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.062642][T18942] batman_adv: batadv3: Interface activated: netdevsim0 [ 380.687797][T18986] netlink: 'syz.2.4152': attribute type 1 has an invalid length. [ 380.816687][T18992] lo: left allmulticast mode [ 381.063860][ T5111] Bluetooth: hci1: command 0x0405 tx timeout [ 381.202638][T19012] netlink: 'syz.1.4164': attribute type 4 has an invalid length. [ 381.332102][T19021] veth1_macvtap: left promiscuous mode [ 381.363002][T19021] macsec0: entered allmulticast mode [ 381.533956][T19029] IPv6: addrconf: prefix option has invalid lifetime [ 381.734721][T11719] syz_tun (unregistering): left promiscuous mode [ 381.741925][ T5101] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 381.751305][ T5101] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 381.759955][ T5101] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 381.768837][ T5101] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 381.806228][ T5101] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 381.817594][ T5101] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 382.228121][T19034] chnl_net:caif_netlink_parms(): no params data found [ 382.258311][T19066] __nla_validate_parse: 25 callbacks suppressed [ 382.258330][T19066] netlink: 140 bytes leftover after parsing attributes in process `syz.4.4179'. [ 382.307189][T19066] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4179'. [ 382.355799][T19071] IPv6: Can't replace route, no match found [ 382.414163][T19073] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4181'. [ 382.439074][T19073] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 382.508003][T19078] netlink: 'syz.2.4183': attribute type 10 has an invalid length. [ 382.568214][T19078] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 382.601430][T19078] team0: Failed to send options change via netlink (err -105) [ 382.622110][T19078] team0: Port device netdevsim0 added [ 382.652528][T19086] netlink: 'syz.2.4183': attribute type 10 has an invalid length. [ 382.661832][T19086] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 382.677722][T19093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4185'. [ 382.690767][T19086] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 382.719824][T19086] team0: Failed to send options change via netlink (err -105) [ 382.727862][T19086] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 382.739074][T19086] team0: Port device netdevsim0 removed [ 382.747975][T19086] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 382.764372][T19091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4183'. [ 382.870444][T19034] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.900254][T19034] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.924520][T19034] bridge_slave_0: entered allmulticast mode [ 382.933314][T19034] bridge_slave_0: entered promiscuous mode [ 382.952731][T19106] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4191'. [ 382.982210][T19034] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.003731][T19034] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.021991][T19034] bridge_slave_1: entered allmulticast mode [ 383.052146][T19034] bridge_slave_1: entered promiscuous mode [ 383.108351][T19112] netlink: 184 bytes leftover after parsing attributes in process `syz.0.4193'. [ 383.123573][T19112] netlink: 'syz.0.4193': attribute type 1 has an invalid length. [ 383.171360][T19107] hsr0: entered promiscuous mode [ 383.188353][T19034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.224901][T19034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.381934][T19127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4199'. [ 383.387523][T19034] team0: Port device team_slave_0 added [ 383.431355][T19034] team0: Port device team_slave_1 added [ 383.499655][T19135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4202'. [ 383.585810][T19034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.596417][T19034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.669249][T19034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.725148][T19034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.763570][T19034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.763838][T19153] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4208'. [ 383.812290][T19034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.874907][ T5101] Bluetooth: hci0: command tx timeout [ 384.005330][T19034] hsr_slave_0: entered promiscuous mode [ 384.023316][T19034] hsr_slave_1: entered promiscuous mode [ 384.047277][T19034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 384.055894][T19034] Cannot create hsr debugfs directory [ 384.074929][T19174] x_tables: duplicate underflow at hook 1 [ 384.169874][T19169] syzkaller1: entered promiscuous mode [ 384.186242][T19169] syzkaller1: entered allmulticast mode [ 384.414857][T19187] bond_slave_0: entered promiscuous mode [ 384.421020][T19187] bond_slave_1: entered promiscuous mode [ 384.481941][T19191] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 384.637344][T19186] bond_slave_0: left promiscuous mode [ 384.643157][T19186] bond_slave_1: left promiscuous mode [ 384.769281][T19034] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.925247][T19034] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.012182][T19220] netpci0: tun_chr_ioctl cmd 2148553947 [ 385.094560][T19034] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.112413][T19220] veth1_macvtap: left promiscuous mode [ 385.122325][T19220] macsec0: entered allmulticast mode [ 385.140420][T19220] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 385.476425][T19034] netdevsim netdevsim1 ÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.694136][T19241] netlink: 'syz.0.4242': attribute type 1 has an invalid length. [ 385.817215][T19034] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 385.853045][T19257] netlink: 'syz.2.4244': attribute type 23 has an invalid length. [ 385.903065][T19034] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 385.943021][ T5111] Bluetooth: hci0: command tx timeout [ 385.980745][T19034] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 386.024844][ T5111] Bluetooth: hci4: command 0x0406 tx timeout [ 386.046994][T19034] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 386.067948][T19264] tipc: Enabling of bearer rejected, failed to enable media [ 386.287025][T19034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.365102][T19034] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.401384][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.408574][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.454583][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.461743][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.886648][T19034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.986719][T19034] veth0_vlan: entered promiscuous mode [ 387.003579][T19034] veth1_vlan: entered promiscuous mode [ 387.056483][T19034] veth0_macvtap: entered promiscuous mode [ 387.081331][T19034] veth1_macvtap: entered promiscuous mode [ 387.106971][T19315] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 387.177424][T19034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.204606][T19034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.226241][T19034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.241502][T19034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.255186][T19034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.269397][T19323] __nla_validate_parse: 19 callbacks suppressed [ 387.269420][T19323] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4270'. [ 387.319938][T19034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.330201][T19327] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4272'. [ 387.361799][T19034] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.379024][T19034] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.410882][T19034] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.440625][T19034] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.462671][T19338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4274'. [ 387.619029][T15824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.653843][T15824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.725437][T19345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4276'. [ 387.750601][T15813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.765975][T15813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.923315][T19359] netlink: 'syz.1.4168': attribute type 4 has an invalid length. [ 387.934980][T19355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.953767][T19355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.991359][T19355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.026109][ T5101] Bluetooth: hci0: command tx timeout [ 388.051357][T19363] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4281'. [ 388.176204][T19367] netlink: 'syz.3.4283': attribute type 4 has an invalid length. [ 388.280573][T19372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4285'. [ 388.323716][T19376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4287'. [ 388.402070][T19380] netlink: 'syz.1.4289': attribute type 1 has an invalid length. [ 388.461041][T19378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4288'. [ 388.641819][T19397] netlink: 184 bytes leftover after parsing attributes in process `syz.3.4295'. [ 388.652172][T19397] netlink: 'syz.3.4295': attribute type 1 has an invalid length. [ 388.847497][T19405] netlink: 'syz.3.4299': attribute type 23 has an invalid length. [ 388.856598][T19406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4300'. [ 388.874381][T19409] netlink: 'syz.0.4298': attribute type 3 has an invalid length. [ 388.888115][T19409] netlink: 'syz.0.4298': attribute type 3 has an invalid length. [ 389.326685][T19427] netlink: 'syz.4.4306': attribute type 10 has an invalid length. [ 389.348746][T19427] syz_tun: left allmulticast mode [ 389.376191][T19427] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 389.919183][T19460] netlink: 'syz.0.4320': attribute type 4 has an invalid length. [ 389.928687][T19461] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 389.983619][T19464] netlink: 'syz.4.4323': attribute type 9 has an invalid length. [ 390.103139][ T5101] Bluetooth: hci0: command tx timeout [ 391.509695][T19555] syzkaller1: entered promiscuous mode [ 391.543809][T19555] syzkaller1: entered allmulticast mode [ 391.717263][T19563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.768200][T19563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.798493][T19563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.988558][T19581] dccp_v6_rcv: dropped packet with invalid checksum [ 392.589374][T19611] xt_hashlimit: max too large, truncated to 1048576 [ 392.606777][T19613] tipc: Failed to remove unknown binding: 66,1,1/0:3578059310/3578059312 [ 392.632983][T19607] tipc: Failed to remove unknown binding: 66,1,1/0:3578059310/3578059312 [ 392.707274][T19617] __nla_validate_parse: 25 callbacks suppressed [ 392.707292][T19617] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4379'. [ 392.763854][T19617] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4379'. [ 392.786196][T19621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4380'. [ 393.031297][T19629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.075691][T19629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.104598][T19629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.145122][T19642] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4387'. [ 393.180303][T19645] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4388'. [ 393.379077][T19656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4394'. [ 393.403568][T19658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4393'. [ 393.527047][T19661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4395'. [ 393.554026][T19661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4395'. [ 394.001097][T19689] pim6reg1: entered promiscuous mode [ 394.025698][T19689] pim6reg1: entered allmulticast mode [ 394.053145][T19693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4406'. [ 394.439482][T19714] validate_nla: 3 callbacks suppressed [ 394.439501][T19714] netlink: 'syz.2.4414': attribute type 1 has an invalid length. [ 395.045788][T19747] IPv6: Can't replace route, no match found [ 395.604788][T19771] netlink: 'syz.0.4436': attribute type 12 has an invalid length. [ 395.974778][T19784] veth0_vlan: entered allmulticast mode [ 396.188279][T19797] netlink: 'syz.1.4444': attribute type 3 has an invalid length. [ 396.221189][T19801] tipc: Enabling of bearer rejected, failed to enable media [ 396.320260][T19807] netlink: 'syz.4.4452': attribute type 2 has an invalid length. [ 396.340940][T19807] netlink: 'syz.4.4452': attribute type 1 has an invalid length. [ 396.482557][T19817] IPVS: lblc: SCTP 127.0.0.1:0 - no destination available [ 396.632784][T19820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.660734][T19820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.692213][T19820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.849236][T19828] tipc: Enabling of bearer rejected, failed to enable media [ 397.432145][T19858] veth0_vlan: entered allmulticast mode [ 397.746885][T19880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.782786][T19880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.834084][T19880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.920261][T19885] __nla_validate_parse: 20 callbacks suppressed [ 397.920280][T19885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4483'. [ 397.938833][T19890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.960057][T19890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.975134][T19890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.201887][T19902] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4489'. [ 398.212319][T19902] team0: Caught tx_queue_len zero misconfig [ 398.613339][T19924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4497'. [ 398.902437][T19947] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4505'. [ 398.926867][T19950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.955262][T19950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.982145][T19950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 399.024874][T19952] tipc: Enabling of bearer rejected, failed to enable media [ 399.104663][T19958] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4511'. [ 399.123442][T19956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 399.143557][T19956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 399.168678][T19956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 399.439318][T19971] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 399.718557][T19984] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4520'. [ 399.738699][T19984] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4520'. [ 399.772574][T19986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4521'. [ 399.907670][T19995] netlink: 'syz.2.4525': attribute type 7 has an invalid length. [ 399.931608][T19995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4525'. [ 400.236692][T20016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.257179][T20016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.271292][T20016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.297241][T20020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4534'. [ 400.555616][T20037] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 400.563150][T20041] xt_CT: You must specify a L4 protocol and not use inversions on it [ 401.361746][T20086] ÊügáG: entered promiscuous mode [ 401.527503][T20096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.568359][T20096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.612544][T20096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.865404][T20107] netlink: 'syz.1.4567': attribute type 32 has an invalid length. [ 401.874074][T20107] (unnamed net_device) (uninitialized): option coupled_control: invalid value (116) [ 401.969650][T20107] Bluetooth: MGMT ver 1.23 [ 401.975620][T20114] xt_CT: You must specify a L4 protocol and not use inversions on it [ 402.106765][T20116] syzkaller0: entered promiscuous mode [ 402.112276][T20116] syzkaller0: entered allmulticast mode [ 402.362759][T20131] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 402.832451][T20142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.851416][T20142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.869107][T20142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.175995][T20152] __nla_validate_parse: 13 callbacks suppressed [ 404.176014][T20152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4583'. [ 404.197882][T20154] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 404.411219][T20167] netlink: 'syz.4.4589': attribute type 4 has an invalid length. [ 404.450468][T20169] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4591'. [ 404.525830][T20169] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 404.674338][T20180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.710186][T20180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.731283][T20190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4598'. [ 404.755211][T20180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.783036][T20195] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4600'. [ 404.954232][T20206] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 405.076560][T20215] xt_CT: You must specify a L4 protocol and not use inversions on it [ 405.326057][T20228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4611'. [ 405.402024][T20230] netlink: 732 bytes leftover after parsing attributes in process `syz.1.4612'. [ 405.418530][T20230] netlink: 732 bytes leftover after parsing attributes in process `syz.1.4612'. [ 405.440112][T20230] xt_SECMARK: invalid mode: 0 [ 405.462075][T20230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4612'. [ 405.605009][T20239] netlink: 'syz.1.4615': attribute type 9 has an invalid length. [ 405.624798][T20239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4615'. [ 405.854401][T20255] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 405.892271][T20259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4622'. [ 405.932039][T20261] netlink: 'syz.3.4623': attribute type 1 has an invalid length. [ 406.038813][T20269] netlink: 'syz.0.4625': attribute type 6 has an invalid length. [ 406.220119][T20284] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 406.434210][T20296] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 406.883135][T20329] team0: Device vlan3 is already an upper device of the team interface [ 406.950785][T20334] vlan3: entered allmulticast mode [ 406.966035][T20334] macvlan0: entered allmulticast mode [ 406.976620][T20335] netlink: 'syz.2.4653': attribute type 4 has an invalid length. [ 407.178860][T20347] netlink: 'syz.2.4658': attribute type 1 has an invalid length. [ 407.353890][T20362] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 407.494573][T20374] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 407.628086][T20387] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 407.821803][T20401] netlink: set zone limit has 8 unknown bytes [ 407.828371][T20397] team1: Mode changed to "activebackup" [ 407.835064][T20397] team1: Mode changed to "roundrobin" [ 407.854705][T20401] netlink: 'syz.0.4675': attribute type 1 has an invalid length. [ 407.904774][T20401] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 407.918790][T20401] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 407.935072][T20401] bond1: (slave vcan1): making interface the new active one [ 407.954720][T20401] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 408.294704][T20431] netlink: 'syz.3.4686': attribute type 1 has an invalid length. [ 408.390210][T20437] syzkaller1: entered promiscuous mode [ 408.404893][T20437] syzkaller1: entered allmulticast mode [ 408.524870][T20445] netlink: 'syz.0.4691': attribute type 1 has an invalid length. [ 409.384915][T20483] __nla_validate_parse: 29 callbacks suppressed [ 409.384940][T20483] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4702'. [ 409.795158][T20507] syzkaller0: refused to change device tx_queue_len [ 410.023508][T20519] tipc: Enabling of bearer rejected, failed to enable media [ 410.236054][T20529] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4721'. [ 410.277912][T20533] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 410.352492][T20535] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4724'. [ 410.368355][T20535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4724'. [ 410.390767][T20535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4724'. [ 410.421693][T20538] dummy0: entered promiscuous mode [ 410.444249][T20538] dummy0: left promiscuous mode [ 410.474105][T20545] netlink: 596 bytes leftover after parsing attributes in process `syz.3.4727'. [ 410.640543][T20554] netlink: 'syz.2.4730': attribute type 1 has an invalid length. [ 410.659372][T20554] netlink: 'syz.2.4730': attribute type 1 has an invalid length. [ 411.142410][T20589] tipc: Enabling of bearer rejected, failed to enable media [ 411.339764][T20602] netlink: 'syz.4.4743': attribute type 9 has an invalid length. [ 411.347711][T20602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4743'. [ 411.487440][T20606] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4746'. [ 411.527214][T20610] netlink: 184 bytes leftover after parsing attributes in process `syz.1.4747'. [ 411.573250][T20610] netlink: 'syz.1.4747': attribute type 1 has an invalid length. [ 411.706936][T20622] lo: entered promiscuous mode [ 411.814102][T20628] netlink: 'syz.0.4754': attribute type 1 has an invalid length. [ 411.912432][T20633] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4756'. [ 412.857016][T20692] tipc: Enabling of bearer rejected, failed to enable media [ 413.038770][T20699] netlink: 'syz.3.4782': attribute type 4 has an invalid length. [ 413.234753][T20712] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 413.274898][T20713] tipc: Invalid UDP bearer configuration [ 413.274948][T20713] tipc: Enabling of bearer rejected, failed to enable media [ 413.400797][T20718] dummy0: entered promiscuous mode [ 413.430457][T20718] batadv0: entered promiscuous mode [ 413.599208][T20728] dummy0: entered promiscuous mode [ 413.630175][T20734] dummy0: left promiscuous mode [ 413.759713][T20743] xt_CT: You must specify a L4 protocol and not use inversions on it [ 413.946545][T20750] dccp_v6_rcv: dropped packet with invalid checksum [ 414.063336][T20759] netlink: 'syz.1.4804': attribute type 1 has an invalid length. [ 414.296410][T20774] dummy0: entered promiscuous mode [ 414.308233][T20774] dummy0: left promiscuous mode [ 414.506702][T20787] __nla_validate_parse: 17 callbacks suppressed [ 414.506721][T20787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4813'. [ 414.630306][T20795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4815'. [ 415.344549][T20828] x_tables: ip_tables: ah match: only valid for protocol 51 [ 415.370357][T20829] unsupported nla_type 40 [ 415.388476][ T9104] bond0: (slave syz_tun): Releasing backup interface [ 415.416124][T20830] xt_CT: You must specify a L4 protocol and not use inversions on it [ 415.455352][ T5107] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 415.492970][ T5107] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 415.502971][ T5107] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 415.519062][ T5107] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 415.529484][ T5107] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 415.536979][ T5107] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 415.573946][T20829] syzkaller0: entered promiscuous mode [ 415.579446][T20829] syzkaller0: entered allmulticast mode [ 415.586770][T20836] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4829'. [ 415.780851][T20846] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4832'. [ 415.791152][T20846] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4832'. [ 416.744036][ T5107] Bluetooth: hci2: command 0x0406 tx timeout [ 417.320027][T20850] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 417.337297][T20852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4835'. [ 417.503487][T20862] netlink: 596 bytes leftover after parsing attributes in process `syz.1.4838'. [ 417.623184][ T5101] Bluetooth: hci3: command tx timeout [ 417.670185][T20875] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4842'. [ 417.689771][T20873] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4843'. [ 417.718553][T20832] chnl_net:caif_netlink_parms(): no params data found [ 417.744516][T20877] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.4844'. [ 417.986884][T20832] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.003458][T20832] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.010811][T20832] bridge_slave_0: entered allmulticast mode [ 418.029130][T20832] bridge_slave_0: entered promiscuous mode [ 418.057876][T20832] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.083843][T20832] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.104075][T20832] bridge_slave_1: entered allmulticast mode [ 418.119190][T20832] bridge_slave_1: entered promiscuous mode [ 418.211313][T20832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.255371][T20832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.375082][T20832] team0: Port device team_slave_0 added [ 418.407637][T20912] netlink: 'syz.0.4851': attribute type 6 has an invalid length. [ 418.420906][T20832] team0: Port device team_slave_1 added [ 418.572480][T20832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.612865][T20832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.659043][T20832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.706882][T20832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.722974][T20832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.771943][T20832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.805186][T20929] tipc: Enabling of bearer rejected, failed to enable media [ 418.916334][T20832] hsr_slave_0: entered promiscuous mode [ 418.923246][T20832] hsr_slave_1: entered promiscuous mode [ 418.938501][T20832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 418.947611][T20832] Cannot create hsr debugfs directory [ 419.219384][T20954] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 419.492202][T20832] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.625889][T20832] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.713332][ T5101] Bluetooth: hci3: command tx timeout [ 419.755133][T20832] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.904197][T20832] team0: Port device netdevsim0 removed [ 419.913389][T20832] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.964148][T20991] tipc: Started in network mode [ 419.969107][T20991] tipc: Node identity 000000002e0000000000000000000001, cluster identity 4711 [ 419.978764][T20991] tipc: Enabling of bearer rejected, failed to enable media [ 420.139359][T20832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 420.160127][T20832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 420.186339][T20832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 420.208199][T20832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 420.227381][T21005] __nla_validate_parse: 8 callbacks suppressed [ 420.227397][T21005] netlink: 4272 bytes leftover after parsing attributes in process `syz.1.4882'. [ 420.245283][T21005] netlink: 'syz.1.4882': attribute type 1 has an invalid length. [ 420.255098][T21005] netlink: 121 bytes leftover after parsing attributes in process `syz.1.4882'. [ 420.275364][T21007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4883'. [ 420.439558][T20832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.495566][T21017] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4886'. [ 420.514545][T20832] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.542056][ T5148] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.549269][ T5148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.594637][ T5148] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.601822][ T5148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.688428][T20832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 420.829086][T21033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4892'. [ 420.871880][T21033] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4892'. [ 421.108440][T20832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.130389][T21046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4897'. [ 421.498069][T21073] netlink: 1276 bytes leftover after parsing attributes in process `syz.2.4904'. [ 421.620338][T21077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4907'. [ 421.621354][T20832] veth0_vlan: entered promiscuous mode [ 421.661959][T20832] veth1_vlan: entered promiscuous mode [ 421.727387][T20832] veth0_macvtap: entered promiscuous mode [ 421.735134][T21079] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4908'. [ 421.748964][T20832] veth1_macvtap: entered promiscuous mode [ 421.783939][ T5101] Bluetooth: hci3: command tx timeout [ 421.789757][T20832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.816717][T20832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.830465][T20832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.841074][T20832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.851237][T20832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.861746][T20832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.885677][T20832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.917441][T20832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.929071][T20832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.944140][T20832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.962614][T20832] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.978819][T20832] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.994115][T20832] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.012520][T20832] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.180427][T15823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.189306][T15823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.278851][T15811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.307531][T15811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.790116][T21135] ieee802154 phy0 wpan0: encryption failed: -22 [ 422.884956][T21143] SET target dimension over the limit! [ 423.071797][T21151] dummy0: entered promiscuous mode [ 423.094858][T21151] batadv0: entered promiscuous mode [ 423.109362][T21151] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 423.127364][T21151] Cannot create hsr debugfs directory [ 423.264741][T21162] lo: entered promiscuous mode [ 423.478465][T21173] netlink: 'syz.1.4939': attribute type 9 has an invalid length. [ 423.693610][T21188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.745834][T21188] batadv0: entered promiscuous mode [ 423.752698][T21188] team0: Port device batadv0 added [ 423.864281][ T5101] Bluetooth: hci3: command tx timeout [ 424.030064][T21209] netlink: 'syz.2.4952': attribute type 5 has an invalid length. [ 424.198442][T15072] syz_tun (unregistering): left promiscuous mode [ 424.316635][T21227] netlink: 'syz.0.4961': attribute type 7 has an invalid length. [ 424.801618][ T5107] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 424.821399][ T5107] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 424.830747][ T5107] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 424.840582][ T5107] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 424.848841][ T5107] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 424.869415][ T5107] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 425.288095][T21268] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 425.439171][T21282] __nla_validate_parse: 30 callbacks suppressed [ 425.439191][T21282] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4981'. [ 425.463728][T21282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4981'. [ 425.474034][T21282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4981'. [ 425.509912][T21243] chnl_net:caif_netlink_parms(): no params data found [ 425.515805][T21284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4983'. [ 425.591082][T21286] netlink: 'syz.2.4984': attribute type 10 has an invalid length. [ 425.605125][T21286] team0: Port device netdevsim0 added [ 425.653552][T21286] netlink: 'syz.2.4984': attribute type 10 has an invalid length. [ 425.685990][T21286] team0: Failed to send options change via netlink (err -105) [ 425.703269][T21286] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 425.725286][T21286] team0: Port device netdevsim0 removed [ 425.874201][T21293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4984'. [ 425.894002][T21306] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4988'. [ 425.999056][T21243] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.020439][T21243] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.041990][T21243] bridge_slave_0: entered allmulticast mode [ 426.059695][T21243] bridge_slave_0: entered promiscuous mode [ 426.094270][T21321] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4995'. [ 426.191610][T21243] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.202615][T21243] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.210777][T21243] bridge_slave_1: entered allmulticast mode [ 426.219792][T21243] bridge_slave_1: entered promiscuous mode [ 426.280223][T21321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4995'. [ 426.289371][T21321] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4995'. [ 426.305845][T21243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.332599][T21243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.437393][T21243] team0: Port device team_slave_0 added [ 426.511682][T21243] team0: Port device team_slave_1 added [ 426.614837][T21243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.632903][T21243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.694671][T21243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.721418][T21243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.728879][T21243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.776329][T21243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.892767][T21243] hsr_slave_0: entered promiscuous mode [ 426.903137][ T5107] Bluetooth: hci1: command tx timeout [ 426.919511][T21243] hsr_slave_1: entered promiscuous mode [ 426.937696][T21243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 426.990652][T21243] Cannot create hsr debugfs directory [ 427.012375][T21348] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5004'. [ 427.099424][ T5101] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 427.110379][ T5101] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 427.121161][ T5101] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 427.148235][ T5101] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 427.156999][ T5101] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 427.164831][ T5101] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 427.261146][T21361] netlink: 'syz.4.5008': attribute type 6 has an invalid length. [ 427.534403][T21243] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.579691][T21375] netlink: 'syz.1.5012': attribute type 7 has an invalid length. [ 427.639732][T21377] bridge1: port 1(gretap2) entered blocking state [ 427.661610][T21377] bridge1: port 1(gretap2) entered disabled state [ 427.673298][T21377] gretap2: entered allmulticast mode [ 427.689088][T21377] gretap2: entered promiscuous mode [ 427.776964][T21243] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.913975][T21243] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.031091][T21243] bond0: (slave netdevsim0): Releasing backup interface [ 428.057804][T21243] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.187583][T21352] chnl_net:caif_netlink_parms(): no params data found [ 428.235194][T21414] netlink: 'syz.4.5022': attribute type 3 has an invalid length. [ 428.389955][T21243] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 428.400479][T21352] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.407989][T21352] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.415888][T21352] bridge_slave_0: entered allmulticast mode [ 428.423950][T21352] bridge_slave_0: entered promiscuous mode [ 428.434568][T21352] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.441884][T21352] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.449254][T21352] bridge_slave_1: entered allmulticast mode [ 428.457866][T21352] bridge_slave_1: entered promiscuous mode [ 428.472652][T21243] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 428.545731][T21243] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 428.587334][T21243] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 428.614028][T21352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.643704][T21352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.670602][T21423] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 428.798298][T21431] syz_tun: entered promiscuous mode [ 428.807974][T21431] batadv_slave_0: entered promiscuous mode [ 428.816012][T21431] debugfs: Directory 'hsr2' with parent 'hsr' already present! [ 428.824549][T21431] Cannot create hsr debugfs directory [ 428.845072][T21352] team0: Port device team_slave_0 added [ 428.854605][T21352] team0: Port device team_slave_1 added [ 428.982794][T21352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.984718][ T5107] Bluetooth: hci1: command tx timeout [ 429.006482][T21440] netlink: 'syz.1.5033': attribute type 1 has an invalid length. [ 429.025282][T21352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.079286][T21352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.104047][T21352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.118129][T21352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.149727][T21352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.223151][ T5107] Bluetooth: hci2: command tx timeout [ 429.364134][T21352] hsr_slave_0: entered promiscuous mode [ 429.371322][T21352] hsr_slave_1: entered promiscuous mode [ 429.380914][T21352] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 429.409263][T21352] Cannot create hsr debugfs directory [ 429.665807][T21466] netlink: 'syz.0.5041': attribute type 1 has an invalid length. [ 429.781255][T21352] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.800512][T21352] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.846243][T21243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.975100][T21485] netlink: 'syz.0.5045': attribute type 8 has an invalid length. [ 429.995381][T21352] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.007192][T21352] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.054801][T21243] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.160785][T21352] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.182129][T21352] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.240763][ T9096] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.247993][ T9096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.342569][T21352] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.374006][T21352] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.411189][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.418427][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.822079][T21352] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 430.847970][T21352] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 430.895543][T21524] __nla_validate_parse: 7 callbacks suppressed [ 430.895560][T21524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5056'. [ 430.897860][T21352] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 430.968458][T21352] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 431.002711][T21243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.063373][ T5107] Bluetooth: hci1: command tx timeout [ 431.085187][T21534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.123799][T21534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.153472][T21534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.305613][ T5107] Bluetooth: hci2: command tx timeout [ 432.690049][T21538] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5062'. [ 432.703079][T21538] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5062'. [ 432.800521][T21543] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5064'. [ 432.953616][T21548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5066'. [ 433.004761][T21243] veth0_vlan: entered promiscuous mode [ 433.064154][T21243] veth1_vlan: entered promiscuous mode [ 433.131708][T21352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.143817][ T5107] Bluetooth: hci1: command tx timeout [ 433.266438][T21558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.302150][T21243] veth0_macvtap: entered promiscuous mode [ 433.310541][T21558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.341633][T21558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.355185][T21352] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.388209][ T5107] Bluetooth: hci2: command tx timeout [ 433.409124][T21243] veth1_macvtap: entered promiscuous mode [ 433.438454][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.445650][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.548736][T11202] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.555927][T11202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.608069][T21243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.626310][T21243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.636958][T21243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.647997][T21243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.658292][T21243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.678763][T21243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.699407][T21243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.723862][T21243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.745123][T21243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.765920][T21243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.803110][T21243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.817937][T21243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.831449][T21243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.844008][T21243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.913565][T21243] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.920377][T21583] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5081'. [ 433.922655][T21243] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.966498][T21243] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.976068][T21243] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.175954][T21597] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5084'. [ 434.200453][T21599] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5083'. [ 434.222508][T21599] lo: left promiscuous mode [ 434.658309][T21599] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.666369][T21599] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.722575][T21604] netlink: 'syz.0.5085': attribute type 6 has an invalid length. [ 434.744106][T21604] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5085'. [ 434.870140][T21352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.873025][ T2479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.912890][ T2479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.990152][ T2479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.003463][ T2479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.035612][T21352] veth0_vlan: entered promiscuous mode [ 435.078149][T21352] veth1_vlan: entered promiscuous mode [ 435.210250][T21352] veth0_macvtap: entered promiscuous mode [ 435.224288][T21621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.237479][T21621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.263901][T21621] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 435.308924][T21352] veth1_macvtap: entered promiscuous mode [ 435.374964][T21352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.405124][T21352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.415418][T21352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.427473][T21352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.442241][T21352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.459191][T21352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.463056][ T5107] Bluetooth: hci2: command tx timeout [ 435.472133][T21352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.480971][T21635] xt_CT: You must specify a L4 protocol and not use inversions on it [ 435.493775][T21352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.506165][T21352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.518007][T21352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.570635][T21352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.621635][T21352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.656856][T21352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.671697][T21352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.682587][T21352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.695076][T21352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.730680][T21352] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.752275][T21352] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.772029][T21352] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.790677][T21352] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.974755][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.990323][T21652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5101'. [ 435.999752][T21652] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5101'. [ 436.010364][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.077757][ T1082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.087696][T21656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5103'. [ 436.096995][ T1082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.153773][T21660] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5104'. [ 436.197933][T21661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.231412][T21663] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5106'. [ 436.351773][T21663] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5106'. [ 436.364076][T21672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5108'. [ 436.397556][T21672] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5108'. [ 436.459296][T21674] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 436.946711][T21705] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5118'. [ 437.121239][T21712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.147293][T21712] team0: Device batadv0 failed to register rx_handler [ 437.423778][T21732] netlink: 'syz.4.5123': attribute type 4 has an invalid length. [ 437.482341][T21736] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5127'. [ 437.498247][T21736] lo: entered allmulticast mode [ 437.518961][T21736] tunl0: entered allmulticast mode [ 437.540012][T21736] gre0: entered allmulticast mode [ 437.578669][T21736] gretap0: entered allmulticast mode [ 437.608698][T21736] erspan0: entered allmulticast mode [ 437.652491][T21736] ip_vti0: entered allmulticast mode [ 437.676889][T21736] ip6_vti0: entered allmulticast mode [ 437.699683][T21736] sit0: entered allmulticast mode [ 437.725312][T21736] ip6tnl0: entered allmulticast mode [ 437.739792][T21736] ip6gre0: entered allmulticast mode [ 437.765307][T21736] syz_tun: entered allmulticast mode [ 437.876499][T21736] ip6gretap0: entered allmulticast mode [ 437.913557][T21736] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.921178][T21736] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.935352][T21736] bridge0: entered allmulticast mode [ 437.955988][T21738] netlink: 'syz.4.5128': attribute type 1 has an invalid length. [ 438.137957][T21741] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 438.147051][T21741] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 438.190922][T21742] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 438.234862][T21742] bond1 (unregistering): Released all slaves [ 438.329825][T21761] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 438.457475][T21768] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 438.567077][T21774] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 438.722650][ T2479] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.842169][ T2479] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.047463][ T2479] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.113860][T21791] netlink: 'syz.0.5147': attribute type 10 has an invalid length. [ 439.136207][T21791] batman_adv: batadv3: Interface deactivated: netdevsim0 [ 439.196501][T21791] batman_adv: batadv3: Removing interface: netdevsim0 [ 439.254388][T21791] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 439.293938][T21791] team0: Failed to send options change via netlink (err -105) [ 439.301452][T21791] team0: Port device netdevsim0 added [ 439.401254][ T5101] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 439.410314][ T5101] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 439.422440][ T5101] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 439.441985][ T5101] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 439.451461][ T5101] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 439.460347][ T5101] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 439.472678][ T2479] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.511890][T21798] netlink: 'syz.0.5147': attribute type 10 has an invalid length. [ 439.535085][T21798] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 439.562265][T21798] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 439.585707][T21798] team0: Failed to send options change via netlink (err -105) [ 439.594992][T21798] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 439.613496][T21798] team0: Port device netdevsim0 removed [ 439.639063][T21798] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 439.923359][ T2479] bridge_slave_1: left allmulticast mode [ 439.933021][ T2479] bridge_slave_1: left promiscuous mode [ 439.938778][ T2479] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.966305][ T2479] bridge_slave_0: left allmulticast mode [ 439.972016][ T2479] bridge_slave_0: left promiscuous mode [ 439.981306][ T2479] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.275260][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.565305][ T2479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.618135][ T2479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 440.648887][ T2479] bond0 (unregistering): Released all slaves [ 440.740236][T21841] macvlan2: entered allmulticast mode [ 440.805796][T21841] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode [ 440.875993][T21841] mac80211_hwsim hwsim24 wlan0: entered allmulticast mode [ 440.914559][T21841] macvlan2: entered promiscuous mode [ 440.924409][T21841] team0: Port device macvlan2 added [ 440.943109][T21843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.987113][T21843] batadv_slave_0: entered allmulticast mode [ 441.124997][T21846] netlink: 'syz.3.5164': attribute type 4 has an invalid length. [ 441.261717][T21867] __nla_validate_parse: 12 callbacks suppressed [ 441.261742][T21867] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5171'. [ 441.330650][T21868] netlink: 'syz.0.5170': attribute type 9 has an invalid length. [ 441.346805][T21868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5170'. [ 441.485875][T21805] chnl_net:caif_netlink_parms(): no params data found [ 441.519694][ T2479] hsr_slave_0: left promiscuous mode [ 441.530132][ T2479] hsr_slave_1: left promiscuous mode [ 441.539647][ T2479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.547773][ T5101] Bluetooth: hci2: command tx timeout [ 441.554741][ T2479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.565256][ T2479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.583248][ T2479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.620343][ T2479] veth1_macvtap: left promiscuous mode [ 441.626138][ T2479] veth0_macvtap: left promiscuous mode [ 441.631856][ T2479] veth1_vlan: left promiscuous mode [ 441.642959][ T2479] veth0_vlan: left promiscuous mode [ 442.278448][ T2479] team0 (unregistering): Port device team_slave_1 removed [ 442.351419][ T2479] team0 (unregistering): Port device team_slave_0 removed [ 442.819318][T21883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.853076][T21883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.884748][T21883] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 442.961502][T21890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5178'. [ 443.080895][T21897] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5180'. [ 443.122961][T21904] netlink: 184 bytes leftover after parsing attributes in process `syz.0.5183'. [ 443.132025][T21904] netlink: 'syz.0.5183': attribute type 1 has an invalid length. [ 443.173035][T21906] netlink: 'syz.3.5185': attribute type 10 has an invalid length. [ 443.264056][T21906] team0: Failed to send options change via netlink (err -105) [ 443.271575][T21906] team0: Port device netdevsim0 added [ 443.344114][T21914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5185'. [ 443.350259][T21917] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5188'. [ 443.371178][T21919] tipc: Failed to remove unknown binding: 66,1,1/0:3208443841/3208443843 [ 443.389883][T21919] tipc: Failed to remove unknown binding: 66,1,1/0:3208443841/3208443843 [ 443.419788][T21805] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.429107][T21805] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.437825][T21805] bridge_slave_0: entered allmulticast mode [ 443.445741][T21805] bridge_slave_0: entered promiscuous mode [ 443.454542][T21910] netlink: 'syz.3.5185': attribute type 10 has an invalid length. [ 443.470452][T21910] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 443.496973][T21910] team0: Failed to send options change via netlink (err -105) [ 443.511879][T21910] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 443.535706][T21910] team0: Port device netdevsim0 removed [ 443.547129][T21910] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 443.557271][T21916] netlink: 'syz.4.5187': attribute type 4 has an invalid length. [ 443.584354][T21805] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.591496][T21805] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.623314][ T5101] Bluetooth: hci2: command tx timeout [ 443.629147][T21805] bridge_slave_1: entered allmulticast mode [ 443.645763][T21805] bridge_slave_1: entered promiscuous mode [ 443.664384][T21924] IPv6: Can't replace route, no match found [ 443.773701][T21934] netlink: 596 bytes leftover after parsing attributes in process `syz.4.5195'. [ 443.801941][T21805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.829890][T21930] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5193'. [ 443.850199][T21930] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5193'. [ 443.877928][T21805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.118690][T21805] team0: Port device team_slave_0 added [ 444.157190][T21805] team0: Port device team_slave_1 added [ 444.249946][T21952] netlink: 'syz.1.5199': attribute type 9 has an invalid length. [ 444.268320][T21957] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 444.365144][T21805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.383113][T21805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.440000][T21805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.455849][T21963] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 444.494384][T21805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.504262][T21805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.560997][T21805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.694153][T21805] hsr_slave_0: entered promiscuous mode [ 444.733234][T21805] hsr_slave_1: entered promiscuous mode [ 444.772500][T21805] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 444.802547][T21805] Cannot create hsr debugfs directory [ 444.901927][T21986] batman_adv: batadv2: Adding interface: netdevsim0 [ 444.940665][T21986] batman_adv: batadv2: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.978805][T21986] batman_adv: batadv2: Interface activated: netdevsim0 [ 445.285162][T22005] 8021q: VLANs not supported on lo [ 445.365159][T22005] : renamed from gretap0 [ 445.703112][ T5101] Bluetooth: hci2: command tx timeout [ 445.716330][T22026] syzkaller1: entered promiscuous mode [ 445.721833][T22026] syzkaller1: entered allmulticast mode [ 446.300710][T21805] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 446.371204][T21805] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 446.408672][T21805] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 446.478019][T21805] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 446.749494][T22060] __nla_validate_parse: 11 callbacks suppressed [ 446.749514][T22060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5230'. [ 446.768419][T22059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5229'. [ 446.824689][T21805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.908358][T21805] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.943912][T11202] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.951058][T11202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.010648][T11200] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.017826][T11200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.138530][T22081] netlink: 'syz.3.5236': attribute type 4 has an invalid length. [ 447.251401][T22083] netlink: 'syz.1.5237': attribute type 2 has an invalid length. [ 447.261302][T22086] netlink: 'syz.4.5239': attribute type 9 has an invalid length. [ 447.275662][T22083] netlink: 'syz.1.5237': attribute type 2 has an invalid length. [ 447.305687][T22086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5239'. [ 447.349106][T22089] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 447.486867][T22093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.520404][T22093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.547315][T22098] netlink: 'syz.3.5243': attribute type 6 has an invalid length. [ 447.554134][T22093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.656753][T21805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.772596][T21805] veth0_vlan: entered promiscuous mode [ 447.783378][ T5101] Bluetooth: hci2: command tx timeout [ 447.800299][T21805] veth1_vlan: entered promiscuous mode [ 447.859731][T21805] veth0_macvtap: entered promiscuous mode [ 447.891519][T21805] veth1_macvtap: entered promiscuous mode [ 447.940851][T21805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.958181][T22109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5245'. [ 447.968351][T21805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.980526][T21805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.991246][T21805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.001310][T21805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.011903][T21805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.025013][T21805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.035851][T21805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.047833][T21805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.065326][T21805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.076261][T21805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.089057][T21805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.118735][T21805] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.146306][T21805] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.163531][T21805] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.172396][T21805] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.338688][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.342099][T22118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.368572][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.394622][T22118] batadv_slave_0: entered allmulticast mode [ 448.519740][T22125] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5252'. [ 448.553432][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.575969][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.666599][T22131] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5254'. [ 448.729971][T22139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5256'. [ 448.909662][T22142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5260'. [ 448.968917][T22150] netlink: 'syz.1.5262': attribute type 4 has an invalid length. [ 449.161072][T22161] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5265'. [ 449.171773][T22164] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5266'. [ 449.319371][T22169] netlink: 'syz.1.5269': attribute type 10 has an invalid length. [ 449.378873][T22169] team0: Failed to send options change via netlink (err -105) [ 449.390890][T22169] team0: Port device netdevsim0 added [ 449.436658][T22175] netlink: 'syz.1.5269': attribute type 10 has an invalid length. [ 449.464264][T22175] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 449.490056][T22175] team0: Failed to send options change via netlink (err -105) [ 449.516823][T22175] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 449.527832][T22175] team0: Port device netdevsim0 removed [ 449.539222][T22175] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 449.780798][T22188] netlink: 'syz.0.5275': attribute type 4 has an invalid length. [ 449.950768][T22199] team0: Device batadv0 is up. Set it down before adding it as a team port [ 450.041388][T22203] Cannot find set identified by id 0 to match [ 450.316656][T22212] netlink: 'syz.1.5284': attribute type 10 has an invalid length. [ 450.465607][T22212] bond0: (slave netdevsim0): Releasing backup interface [ 450.499020][T22212] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 450.522585][T22212] team0: Failed to send options change via netlink (err -105) [ 450.531111][T22212] team0: Port device netdevsim0 added [ 452.075691][ T5107] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 452.093986][ T5107] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 452.102405][ T5107] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 452.114839][T22214] team0: Port device netdevsim0 removed [ 452.124565][ T5107] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 452.135798][ T5107] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 452.143393][ T5107] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 452.144273][T22214] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 452.197172][T22216] __nla_validate_parse: 7 callbacks suppressed [ 452.197189][T22216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5284'. [ 452.308432][T15823] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.345384][T22226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.369720][T22226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.395810][T22226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.566012][T22238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5290'. [ 452.587826][T15823] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.614523][T22236] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 452.716486][T15823] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.808285][T22248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5295'. [ 452.907725][T15823] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.959516][T22253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5298'. [ 453.044512][T22253] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5298'. [ 453.253867][T22222] chnl_net:caif_netlink_parms(): no params data found [ 453.355139][T15823] bridge_slave_1: left allmulticast mode [ 453.399467][T15823] bridge_slave_1: left promiscuous mode [ 453.413185][T15823] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.492347][T15823] bridge_slave_0: left allmulticast mode [ 453.499005][T15823] bridge_slave_0: left promiscuous mode [ 453.513432][T15823] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.620307][ T5101] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 453.631666][ T5101] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 453.641288][ T5101] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 453.653605][ T5101] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 453.662721][ T5101] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 453.670151][ T5101] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 453.715377][ T5101] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 453.727257][ T5101] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 453.736172][ T5101] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 453.745973][ T5101] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 453.756666][ T5101] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 453.772896][ T5101] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 454.105340][T15823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 454.116693][T15823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 454.135213][T15823] bond0 (unregistering): Released all slaves [ 454.184737][ T5107] Bluetooth: hci2: command tx timeout [ 454.374958][T22278] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5305'. [ 454.527086][T22292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5308'. [ 454.598645][T22222] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.611980][T22222] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.621282][T22222] bridge_slave_0: entered allmulticast mode [ 454.629047][T22222] bridge_slave_0: entered promiscuous mode [ 454.669763][T22297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.702555][T22297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.720171][T22297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.730580][T22222] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.738873][T22222] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.747301][T22222] bridge_slave_1: entered allmulticast mode [ 454.755137][T22222] bridge_slave_1: entered promiscuous mode [ 454.899093][T15823] hsr_slave_0: left promiscuous mode [ 454.911616][T15823] hsr_slave_1: left promiscuous mode [ 454.918775][T15823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.929405][T15823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.953780][T15823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.961376][T15823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.033750][T15823] veth1_macvtap: left promiscuous mode [ 455.039338][T15823] veth0_macvtap: left promiscuous mode [ 455.056906][T22307] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5315'. [ 455.063290][T15823] veth1_vlan: left promiscuous mode [ 455.071223][T15823] veth0_vlan: left promiscuous mode [ 455.486541][T22317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5318'. [ 455.716757][ T5107] Bluetooth: hci0: command tx timeout [ 455.738874][T15823] team0 (unregistering): Port device team_slave_1 removed [ 455.781461][T15823] team0 (unregistering): Port device team_slave_0 removed [ 455.866748][ T5107] Bluetooth: hci1: command tx timeout [ 456.246078][T22222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.263924][T22222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.264163][ T5107] Bluetooth: hci2: command tx timeout [ 456.460053][T22222] team0: Port device team_slave_0 added [ 456.475599][T22322] tipc: Started in network mode [ 456.480508][T22322] tipc: Node identity 000000002e0000000000000000000001, cluster identity 4711 [ 456.513123][T22322] tipc: Enabling of bearer rejected, failed to enable media [ 456.526101][T22222] team0: Port device team_slave_1 added [ 456.689684][T22222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.713126][T22222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.713479][T22333] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5324'. [ 456.769037][T22222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.782093][T22222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.789308][T22222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.815973][T22222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.864785][T22331] dummy0: entered promiscuous mode [ 456.887122][T22331] dummy0: left promiscuous mode [ 457.029567][T22272] chnl_net:caif_netlink_parms(): no params data found [ 457.086197][T22222] hsr_slave_0: entered promiscuous mode [ 457.104566][T22222] hsr_slave_1: entered promiscuous mode [ 457.110945][T22222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 457.119547][T22222] Cannot create hsr debugfs directory [ 457.141162][T22274] chnl_net:caif_netlink_parms(): no params data found [ 457.259228][T22347] can: request_module (can-proto-0) failed. [ 457.271156][T22349] __nla_validate_parse: 2 callbacks suppressed [ 457.271174][T22349] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5330'. [ 457.337052][T15823] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.549104][T15823] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.699852][T15823] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.711267][T22376] netlink: 184 bytes leftover after parsing attributes in process `syz.0.5335'. [ 457.720917][T22376] validate_nla: 1 callbacks suppressed [ 457.720930][T22376] netlink: 'syz.0.5335': attribute type 1 has an invalid length. [ 457.783532][ T5107] Bluetooth: hci0: command tx timeout [ 457.843820][T22378] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5336'. [ 457.854719][T22378] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5336'. [ 457.895797][T15823] bond0: (slave netdevsim0): Releasing backup interface [ 457.927375][T15823] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.929584][T22380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5337'. [ 457.947141][ T5107] Bluetooth: hci1: command tx timeout [ 457.993218][T22272] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.005882][T22382] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5338'. [ 458.011468][T22272] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.022708][T22272] bridge_slave_0: entered allmulticast mode [ 458.030703][T22272] bridge_slave_0: entered promiscuous mode [ 458.060011][T22274] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.067986][T22274] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.075784][T22274] bridge_slave_0: entered allmulticast mode [ 458.084884][T22274] bridge_slave_0: entered promiscuous mode [ 458.106188][T22274] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.118015][T22274] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.130739][T22274] bridge_slave_1: entered allmulticast mode [ 458.143470][T22274] bridge_slave_1: entered promiscuous mode [ 458.180223][T22272] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.188559][T22272] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.201057][T22272] bridge_slave_1: entered allmulticast mode [ 458.210970][T22272] bridge_slave_1: entered promiscuous mode [ 458.319506][T22274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.343102][ T5107] Bluetooth: hci2: command tx timeout [ 458.407470][T22274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.421455][T22272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.464246][T22272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.707408][T22274] team0: Port device team_slave_0 added [ 458.744826][T22272] team0: Port device team_slave_0 added [ 458.765864][T22272] team0: Port device team_slave_1 added [ 458.794114][T22274] team0: Port device team_slave_1 added [ 459.029444][T15823] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.236512][T22272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.253730][T22272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.313137][T22272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.345505][T22272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.352466][T22272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.427597][T22272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.557518][T15823] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.601677][T22274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.612619][T22274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.673181][T22274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.704765][T22401] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5343'. [ 459.714241][T22401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5343'. [ 459.733118][T22401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5343'. [ 459.863232][ T5107] Bluetooth: hci0: command tx timeout [ 459.905031][T15823] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.937943][T22274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.956354][T22274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.016687][T22274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.028395][ T5107] Bluetooth: hci1: command tx timeout [ 460.161527][T15823] bond0: (slave netdevsim0): Releasing backup interface [ 460.189589][T15823] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.419066][T22272] hsr_slave_0: entered promiscuous mode [ 460.427215][ T5107] Bluetooth: hci2: command tx timeout [ 460.447461][T22272] hsr_slave_1: entered promiscuous mode [ 460.464535][T22272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 460.478768][T22272] Cannot create hsr debugfs directory [ 460.554523][T22405] syzkaller0: entered allmulticast mode [ 460.688697][T22419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5348'. [ 461.943088][ T5107] Bluetooth: hci0: command tx timeout [ 462.103601][ T5107] Bluetooth: hci1: command tx timeout [ 465.134357][T22274] hsr_slave_0: entered promiscuous mode [ 465.164282][T22274] hsr_slave_1: entered promiscuous mode [ 465.177819][T22274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 465.202963][T22274] Cannot create hsr debugfs directory [ 465.693212][T22222] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 465.752631][T22222] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 465.929591][T22222] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 466.019344][T22222] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 466.104486][T22444] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5354'. [ 466.209263][T22444] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5354'. [ 466.227727][T15823] bridge_slave_1: left allmulticast mode [ 466.240373][T15823] bridge_slave_1: left promiscuous mode [ 466.259122][T15823] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.301811][T15823] bridge_slave_0: left allmulticast mode [ 466.329362][T15823] bridge_slave_0: left promiscuous mode [ 466.353260][T15823] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.386512][T15823] gretap2: left allmulticast mode [ 466.396554][T15823] gretap2: left promiscuous mode [ 466.401679][T15823] bridge1: port 1(gretap2) entered disabled state [ 466.446069][T15823] bridge_slave_1: left allmulticast mode [ 466.454977][T15823] bridge_slave_1: left promiscuous mode [ 466.460708][T15823] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.489537][T15823] bridge_slave_0: left allmulticast mode [ 466.509743][T15823] bridge_slave_0: left promiscuous mode [ 466.522468][T15823] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.112002][T15823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.151850][T15823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.179184][T15823] bond0 (unregistering): Released all slaves [ 468.494512][T15823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.528566][T15823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.554775][T15823] bond0 (unregistering): Released all slaves [ 468.791667][T22451] netlink: 'syz.4.5357': attribute type 1 has an invalid length. [ 468.831155][T22449] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5356'. [ 468.855983][T22449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5356'. [ 468.886837][T22449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5356'. [ 469.038514][T15823] tipc: Left network mode [ 469.168754][T22456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5359'. [ 469.837494][T22470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5364'. [ 469.889150][T22222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.217380][T22222] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.174583][T11202] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.182455][T11202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.248461][T22488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5369'. [ 471.401564][T15823] hsr_slave_0: left promiscuous mode [ 471.416733][T15823] hsr_slave_1: left promiscuous mode [ 471.439481][T15823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.461211][T15823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.477562][T15823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.534555][T15823] hsr_slave_0: left promiscuous mode [ 471.547571][T15823] hsr_slave_1: left promiscuous mode [ 471.561660][T15823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.581644][T15823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.699212][T15823] veth1_macvtap: left promiscuous mode [ 471.711056][T15823] veth0_macvtap: left promiscuous mode [ 471.729174][T15823] veth1_vlan: left promiscuous mode [ 471.757052][T15823] veth1_macvtap: left promiscuous mode [ 471.767130][T15823] veth0_macvtap: left promiscuous mode [ 471.779723][T15823] veth1_vlan: left promiscuous mode [ 471.793949][T15823] veth0_vlan: left promiscuous mode [ 473.425781][T15823] team0 (unregistering): Port device team_slave_1 removed [ 473.560950][T15823] team0 (unregistering): Port device team_slave_0 removed [ 475.837849][T15823] team0 (unregistering): Port device team_slave_1 removed [ 475.987188][T15823] team0 (unregistering): Port device team_slave_0 removed [ 477.172936][T22492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5365'. [ 478.038442][T11200] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.045658][T11200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.753649][T22272] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 478.871765][T22272] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 478.984365][T22272] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 479.077619][T22272] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 479.455517][T22511] netlink: 'syz.4.5373': attribute type 21 has an invalid length. [ 479.475519][T22511] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5373'. [ 480.413792][T22527] veth1_to_batadv: entered allmulticast mode [ 480.523981][T22534] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5377'. [ 480.548654][T22534] netlink: 'syz.0.5377': attribute type 2 has an invalid length. [ 480.815426][T22538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5378'. [ 480.874744][T22272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.958346][T22222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.017950][T22274] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 481.080073][T22274] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 481.178352][T22272] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.249122][T22274] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 481.270268][T22274] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 481.354676][ T9098] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.361857][ T9098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.426586][T22546] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5381'. [ 481.468751][ T9098] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.475964][ T9098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.657040][T22222] veth0_vlan: entered promiscuous mode [ 481.764639][T22222] veth1_vlan: entered promiscuous mode [ 481.904635][T22222] veth0_macvtap: entered promiscuous mode [ 481.951813][T22222] veth1_macvtap: entered promiscuous mode [ 482.019119][T22274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.122637][T22562] netlink: 'syz.0.5384': attribute type 10 has an invalid length. [ 482.152279][T22562] bond0: (slave netdevsim0): Releasing backup interface [ 482.188370][T22562] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 482.197717][T22562] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 482.220622][T22562] team0: Failed to send options change via netlink (err -105) [ 482.238926][T22562] team0: Port device netdevsim0 added [ 482.255824][T22564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5384'. [ 482.284668][T22222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.311795][T22222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.333808][T22222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.357322][T22222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.382598][T22222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.420374][T22274] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.453553][T22563] netlink: 'syz.0.5384': attribute type 10 has an invalid length. [ 482.471355][T22563] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 482.488394][T22563] team0: Failed to send options change via netlink (err -105) [ 482.511346][T22563] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 482.537581][T22563] team0: Port device netdevsim0 removed [ 482.559363][T22563] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 482.586623][T22222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.677604][T21607] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.684840][T21607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.756515][T22222] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.786082][T22222] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.810210][T22222] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.829560][T22222] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.974008][T22568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5385'. [ 483.017983][ T5148] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.025165][ T5148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.156397][T22272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.439364][T22274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 483.648085][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.687545][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.800151][T22272] veth0_vlan: entered promiscuous mode [ 483.916018][T15824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.955263][T15824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.973819][T22272] veth1_vlan: entered promiscuous mode [ 484.133021][T22272] veth0_macvtap: entered promiscuous mode [ 484.188935][T22272] veth1_macvtap: entered promiscuous mode [ 484.310032][T22272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.362999][T22272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.396571][T22272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.425132][T22272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.442970][T22272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.463771][T22272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.516942][T22272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.737188][T22272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.800252][T22272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.850216][T22272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.887922][T22593] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5391'. [ 484.943913][T22272] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.979467][T22272] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.049219][T22272] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.066284][T22272] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.309888][T22274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.871121][T15823] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.130072][T15823] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.255677][T22598] geneve2: entered promiscuous mode [ 486.273014][T22598] geneve2: entered allmulticast mode [ 486.326509][T22600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5394'. [ 486.456917][T22604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5394'. [ 486.734110][ T5101] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 486.757826][ T5101] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 486.786387][ T5101] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 486.818033][ T5101] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 486.838515][ T5101] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 486.847941][ T5101] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 486.977246][T15823] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.210713][T15823] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.530390][T15824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.586345][T15824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.661013][T22274] veth0_vlan: entered promiscuous mode [ 487.697095][T15824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.727925][T22274] veth1_vlan: entered promiscuous mode [ 487.747804][T15824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.046818][T22274] veth0_macvtap: entered promiscuous mode [ 488.144549][T22274] veth1_macvtap: entered promiscuous mode [ 488.193489][T15823] bridge_slave_1: left allmulticast mode [ 488.223792][T15823] bridge_slave_1: left promiscuous mode [ 488.229556][T15823] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.406219][T15823] bridge_slave_0: left allmulticast mode [ 488.425694][T15823] bridge_slave_0: left promiscuous mode [ 488.453174][T15823] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.063645][ T5107] Bluetooth: hci2: command tx timeout [ 490.223576][T15823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 490.264394][T15823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.314928][T15823] bond0 (unregistering): Released all slaves [ 490.371684][T22635] netlink: 'syz.0.5404': attribute type 4 has an invalid length. [ 490.416750][T22639] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5406'. [ 490.450065][T22639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5406'. [ 490.500453][T22639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5406'. [ 490.544584][T22641] netlink: 6 bytes leftover after parsing attributes in process `syz.3.5407'. [ 490.705061][T22643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5408'. [ 490.801937][T22647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5410'. [ 491.033744][T22274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.087347][T22274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.124901][T22274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.143295][ T5107] Bluetooth: hci2: command tx timeout [ 491.167808][T22274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.203018][T22274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.256632][T22274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.293097][T22274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.313038][T22274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.345201][T22274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.426140][T22663] xt_TCPMSS: Only works on TCP SYN packets [ 491.448819][T22651] netlink: 'syz.4.5413': attribute type 10 has an invalid length. [ 491.488304][T22651] batman_adv: batadv2: Interface deactivated: netdevsim0 [ 491.563226][T22651] batman_adv: batadv2: Removing interface: netdevsim0 [ 491.596795][T22651] team0: Failed to send options change via netlink (err -105) [ 491.614023][T22651] team0: Port device netdevsim0 added [ 491.631265][T22656] netlink: 'syz.4.5413': attribute type 10 has an invalid length. [ 491.671756][T22656] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 491.709729][T22656] team0: Failed to send options change via netlink (err -105) [ 491.729988][T22656] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 491.756946][T22656] team0: Port device netdevsim0 removed [ 491.781791][T22656] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 491.817746][T22659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5413'. [ 491.849478][T22274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.904360][T22274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.926255][T22274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.957376][T22274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.995941][T22274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.108757][T22664] bond0: entered promiscuous mode [ 492.114105][T22664] bond_slave_0: entered promiscuous mode [ 492.124664][T22664] bond_slave_1: entered promiscuous mode [ 492.137043][T22664] dummy0: entered promiscuous mode [ 492.149090][T22664] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 492.639663][T22673] lo: entered promiscuous mode [ 492.648354][T22274] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.682568][T22274] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.733601][T22274] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.742332][T22274] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.976910][T15823] hsr_slave_0: left promiscuous mode [ 492.995016][T22684] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5421'. [ 493.017133][T22684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5421'. [ 493.027239][T15823] hsr_slave_1: left promiscuous mode [ 493.047310][T15823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 493.055421][T15823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.067436][T22686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.084991][T22686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.098891][T15823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.106913][T15823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.117131][T22686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.162683][T15823] veth1_macvtap: left promiscuous mode [ 493.168563][T15823] veth0_macvtap: left promiscuous mode [ 493.175770][T15823] veth1_vlan: left promiscuous mode [ 493.184298][T15823] veth0_vlan: left promiscuous mode [ 493.223489][ T5107] Bluetooth: hci2: command tx timeout [ 494.481175][T15823] team0 (unregistering): Port device team_slave_1 removed [ 494.589558][T15823] team0 (unregistering): Port device team_slave_0 removed [ 495.306079][ T5107] Bluetooth: hci2: command tx timeout [ 496.317424][T22684] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5421'. [ 496.712513][T22607] chnl_net:caif_netlink_parms(): no params data found [ 496.993242][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.048443][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.981581][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 519.357502][T20832] syz_tun (unregistering): left promiscuous mode [ 563.428793][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 585.470914][ T5101] Bluetooth: hci1: command 0x0406 tx timeout [ 588.084134][ T5101] Bluetooth: hci0: command tx timeout [ 611.982468][ T5111] Bluetooth: hci2: command 0x0406 tx timeout [ 624.754654][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 637.280192][T22702] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 647.139960][ T30] INFO: task syz.0.5425:22697 blocked for more than 143 seconds. [ 647.158444][ T30] Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 647.458070][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 648.687418][ T30] task:syz.0.5425 state:D stack:24672 pid:22697 tgid:22697 ppid:12227 flags:0x00004004 [ 651.035072][ T30] Call Trace: [ 651.038402][ T30] [ 651.041347][ T30] __schedule+0x1800/0x4a60 [ 652.954611][ T30] ? __pfx___schedule+0x10/0x10 [ 652.959529][ T30] ? __pfx_lock_release+0x10/0x10 [ 654.458620][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 654.475270][ T30] ? schedule+0x90/0x320 [ 654.479547][ T30] schedule+0x14b/0x320 [ 655.448164][ T30] schedule_preempt_disabled+0x13/0x30 [ 655.464652][ T30] __mutex_lock+0x6a4/0xd70 [ 655.469198][ T30] ? __mutex_lock+0x527/0xd70 [ 656.125331][ T30] ? raw_release+0x1b8/0x8a0 [ 656.129984][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 656.867788][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 656.883997][ T30] raw_release+0x1b8/0x8a0 [ 656.888445][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10