last executing test programs: 4.911223423s ago: executing program 2 (id=3106): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0x10000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4008810) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1ee, 0xce, 0xffff, 0x0, 0x8, 0xf6a, 0xb879, 0x9, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.761317186s ago: executing program 3 (id=3109): capget(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x800, 0x4, 0xd707, 0x6, 0x40000, 0xd6}) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="400b1f00000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.451952143s ago: executing program 2 (id=3110): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xd}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x4001400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002240)=""/102400, 0x19000) close(0x3) r1 = msgget$private(0x0, 0x790) msgctl$IPC_STAT(r1, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4000, @fd, 0x1, 0x0, 0x0, 0x16, 0x1}) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x30) writev(0xffffffffffffffff, 0x0, 0x0) unshare(0x2c020400) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 3.460829232s ago: executing program 2 (id=3114): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) socket$key(0xf, 0x3, 0x2) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000b5000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x38}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a3213000000dc000000060a010400000000000000000100000508000b4000000000b4000480200001800d00010073796e70726f7879000000000c000280060001400000000034000180080001006c6f670028000280080006400000000d110002402b24292d2d2a5d24402c2d400000000006000440000700003c0001800900010068617368"], 0x150}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000"], 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x18, &(0x7f0000000540)=ANY=[@ANYBLOB="180000", @ANYBLOB="0000000000000000b702000014000000bf030000fcff00008500000086000000bf0900000000000055090100000000809500000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8feffffb702000008000000b70300007b0d0000850000007f0000004500f4fffcffffffbf91000000000000b702000001000000850000008500"], 0x0, 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xc}, 0x15, 0x3, 'fo\x00', 0x20, 0x4, 0x8}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e21, 0x3, 'ovf\x00', 0x23, 0x81, 0x2005}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x2000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) 2.91559767s ago: executing program 0 (id=3119): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0x10000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4008810) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1ee, 0xce, 0xffff, 0x0, 0x8, 0xf6a, 0xb879, 0x9, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.723935988s ago: executing program 1 (id=3120): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xa}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x850}, 0x4048080) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 2.536039644s ago: executing program 0 (id=3121): bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x7, 0x20, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xe}, @btf_id={0x18, 0x93ac0a91103d9cf0, 0x3, 0x0, 0x1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x400, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28f2e047afd25fe1032b9a816d7c010026be590c650acabd7000fddbdf2506000000140002000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x9f0e5cc4bcd4d319, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 2.409247475s ago: executing program 2 (id=3122): syz_open_dev$dri(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) fcntl$getflags(0xffffffffffffffff, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_matches\x00') read$FUSE(r1, &(0x7f0000000d80)={0x2020}, 0x2020) 2.381422328s ago: executing program 0 (id=3123): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000240), &(0x7f0000000380)=r2}, 0x20) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000680)='@', &(0x7f0000000400)=@tcp6=r3, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000580)="b9ff0307680426", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.321412713s ago: executing program 1 (id=3124): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x6, 0x10000000, 0x1, 0x2}, 0x55}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x4) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x8}], 0x2}, 0x44005) 1.869712134s ago: executing program 3 (id=3125): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}}, 0x24000840) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000009c0)="d80000001c0081064e81f782db44b9040a1d080404000000000081a1180002000600142603600e1208000f000000000100001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e40ae8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccc29e00360db70100000d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a9295", 0xd2}], 0x1, 0x0, 0x0, 0x7400}, 0x8000800) 1.569528071s ago: executing program 0 (id=3126): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket(0x2, 0x80805, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r4 = socket(0x10, 0x803, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000000c0)={r7, 0xff, 0x30}, 0xc) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={r7, 0x40}, 0x8) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r8, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200400c1}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, 0x0, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x44}}, 0x0) r13 = socket$nl_rdma(0x10, 0x3, 0x14) recvmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000002c0)=@in, 0x80, 0x0, 0x0, &(0x7f0000000800)=""/100, 0x64}, 0x40) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) 1.561439161s ago: executing program 3 (id=3127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c00018006000100582e000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvmsg(r2, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40000100) 1.532419294s ago: executing program 2 (id=3128): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x10, 0x2, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x802, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES8=r0], 0x5c}, 0x1, 0x0, 0x0, 0x2400c414}, 0x4000) 1.380000237s ago: executing program 3 (id=3129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}]}]}]}, @NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.338161111s ago: executing program 2 (id=3130): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) socket$key(0xf, 0x3, 0x2) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000b5000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x38}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a3213000000dc000000060a010400000000000000000100000508000b4000000000b4000480200001800d00010073796e70726f7879000000000c000280060001400000000034000180080001006c6f670028000280080006400000000d110002402b24292d2d2a5d24402c2d400000000006000440000700003c0001800900010068617368"], 0x150}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000"], 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x18, &(0x7f0000000540)=ANY=[@ANYBLOB="180000", @ANYBLOB="0000000000000000b702000014000000bf030000fcff00008500000086000000bf0900000000000055090100000000809500000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8feffffb702000008000000b70300007b0d0000850000007f0000004500f4fffcffffffbf91000000000000b702000001000000850000008500"], 0x0, 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xc}, 0x15, 0x3, 'fo\x00', 0x20, 0x4, 0x8}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e21, 0x3, 'ovf\x00', 0x23, 0x81, 0x2005}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x2000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) 1.274063727s ago: executing program 1 (id=3131): bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x7, 0x20, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xe}, @btf_id={0x18, 0x93ac0a91103d9cf0, 0x3, 0x0, 0x1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x400, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28f2e047afd25fe1032b9a816d7c010026be590c650acabd7000fddbdf2506000000140002000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="7912b8000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002000000760300000ee60060bf050000000000003c6500bf000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000000000000054bb12dc8c27df8ecfc7bdd2d17f2f1754558f22dd399703d6c4f6f3be0b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf7a13ba1fcf1111ce4fc0d742a81762bab8395fa64810b5b40d893ea8fe0ffffff7f1b546cad3f1d5af65706fd4f68795cce6cf16ab689b555202da2e0ec2871a51445dc8da39e5b0ab71ca9b901627b562ed84b026002d4519af619e3cca4d69e0dee080006774a8f3e691700ec88158f02001b0000c81c8b297dff0445a13d0045fb3cda32a673a6bb55d8c80800dce431e56723888fb126a1403d2b63f16fb2ad9bc117aba7cbebe174aba210d739a018f9bbec63222d20cedbc4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b3156268784f2af9e4bcf8b07a10d6735154be1602f9dd1d7d4301e00000000000460bcc5989ec85e3cbcb6bcfaf0000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d0861cd64722cf74686ebfbe2562671cd47840f81d2a8f8f9be3bcd19dc6840aa7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab049b1bd47287cd31cc43ea0ffb567b40407d000000000000"], 0x0, 0x0, 0x0, 0x0, 0x9f0e5cc4bcd4d319, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 1.23562984s ago: executing program 3 (id=3132): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xa}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x850}, 0x4048080) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 1.193454604s ago: executing program 0 (id=3133): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_audit(0x10, 0x3, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c09c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 1.088063503s ago: executing program 1 (id=3134): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000240), &(0x7f0000000380)=r2}, 0x20) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000680)='@', &(0x7f0000000400)=@tcp6=r3, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xb, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 814.127388ms ago: executing program 1 (id=3135): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}}, 0x24000840) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000009c0)="d80000001c0081064e81f782db44b9040a1d080404000000000081a1180002000600142603600e1208000f000000000100001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e40ae8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccc29e00360db70100000d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a9295", 0xd2}], 0x1, 0x0, 0x0, 0x7400}, 0x8000800) 155.182767ms ago: executing program 3 (id=3136): syz_open_dev$dri(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) fcntl$getflags(0xffffffffffffffff, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_matches\x00') read$FUSE(r1, &(0x7f0000000d80)={0x2020}, 0x2020) 125.518869ms ago: executing program 1 (id=3137): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004015}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c00018006000100582e000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvmsg(r2, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40000100) 0s ago: executing program 0 (id=3138): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x10, 0x2, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x802, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES8=r0], 0x5c}, 0x1, 0x0, 0x0, 0x2400c414}, 0x4000) kernel console output (not intermixed with test programs): bond0 [ 316.827039][ T8408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.883'. [ 318.714172][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.720939][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.716408][ T8429] bond1: option mode: unable to set because the bond device has slaves [ 319.851312][ T8429] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 319.924127][ T8435] (null): rxe_set_mtu: Set mtu to 1024 [ 319.929962][ T8435] rdma_rxe: rxe_newlink: failed to add bond0 [ 320.125482][ T8439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.894'. [ 320.479991][ T8450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.899'. [ 321.304107][ T8463] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 321.726267][ T8474] syzkaller0: entered promiscuous mode [ 321.784154][ T8474] syzkaller0: entered allmulticast mode [ 321.808719][ T8476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.906'. [ 322.085274][ T8483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.909'. [ 322.354123][ T8495] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 322.582066][ T8501] syzkaller0: entered promiscuous mode [ 322.594470][ T8501] syzkaller0: entered allmulticast mode [ 322.787001][ T8513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.920'. [ 322.857510][ T8514] netlink: 'syz.3.922': attribute type 4 has an invalid length. [ 323.072593][ T8518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.923'. [ 323.647531][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.927'. [ 324.067576][ T8542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.934'. [ 324.276781][ T8546] syzkaller0: entered promiscuous mode [ 324.282326][ T8546] syzkaller0: entered allmulticast mode [ 324.428499][ T8552] batadv_slave_1: entered promiscuous mode [ 324.448787][ T8551] batadv_slave_1: left promiscuous mode [ 324.803910][ T8562] netlink: 'syz.3.944': attribute type 4 has an invalid length. [ 324.811707][ T8565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.945'. [ 324.878254][ T49] tipc: Subscription rejected, illegal request [ 325.091755][ T8576] netlink: 'syz.0.950': attribute type 2 has an invalid length. [ 325.101639][ T8576] netlink: 'syz.0.950': attribute type 7 has an invalid length. [ 325.133509][ T8576] netlink: 44 bytes leftover after parsing attributes in process `syz.0.950'. [ 325.461675][ T8587] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 325.474402][ T8587] macvlan5: entered promiscuous mode [ 325.539097][ T8589] syzkaller0: entered promiscuous mode [ 325.548915][ T8589] syzkaller0: entered allmulticast mode [ 325.650092][ T1309] tipc: Subscription rejected, illegal request [ 326.359261][ T8614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.968'. [ 326.577642][ T8618] syzkaller0: entered promiscuous mode [ 326.587241][ T8618] syzkaller0: entered allmulticast mode [ 326.771390][ T8623] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 327.117141][ T8631] netlink: 763 bytes leftover after parsing attributes in process `syz.2.976'. [ 327.303085][ T8635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.978'. [ 327.394927][ T8636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.559054][ T8644] syzkaller0: entered promiscuous mode [ 327.568574][ T8644] syzkaller0: entered allmulticast mode [ 328.141536][ T8657] netlink: 763 bytes leftover after parsing attributes in process `syz.1.986'. [ 328.174322][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.988'. [ 329.308259][ T8672] netlink: 28 bytes leftover after parsing attributes in process `syz.1.992'. [ 329.882083][ T8682] netlink: 763 bytes leftover after parsing attributes in process `syz.1.998'. [ 330.958771][ T8696] syzkaller0: entered promiscuous mode [ 330.991150][ T8696] syzkaller0: entered allmulticast mode [ 333.917866][ T8718] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1009'. [ 334.070086][ T8731] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1011'. [ 335.151746][ T8748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.358935][ T8758] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1019'. [ 336.998869][ T8790] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1030'. [ 337.293669][ T8798] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 337.323295][ T8798] syzkaller0: entered promiscuous mode [ 337.329978][ T8798] syzkaller0: entered allmulticast mode [ 337.856791][ T8819] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1042'. [ 338.492916][ T8845] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 338.507089][ T8845] syzkaller0: entered promiscuous mode [ 338.512651][ T8845] syzkaller0: entered allmulticast mode [ 338.748882][ T8854] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1053'. [ 339.361719][ T8870] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 339.373843][ T8870] syzkaller0: entered promiscuous mode [ 339.379378][ T8870] syzkaller0: entered allmulticast mode [ 339.397539][ T8875] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1064'. [ 340.764440][ T8903] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1075'. [ 340.907389][ T8908] bond1: option mode: unable to set because the bond device has slaves [ 341.014119][ T8908] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 341.049110][ T8913] (null): rxe_set_mtu: Set mtu to 1024 [ 341.067924][ T8913] rdma_rxe: rxe_newlink: failed to add bond0 [ 341.291118][ T8917] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 341.307064][ T8917] syzkaller0: entered promiscuous mode [ 341.317077][ T8917] syzkaller0: entered allmulticast mode [ 341.459065][ T8927] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1082'. [ 341.678653][ T8927] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1082'. [ 342.035056][ T8943] netlink: 'syz.0.1087': attribute type 4 has an invalid length. [ 342.389779][ T8959] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 342.427130][ T8959] syzkaller0: entered promiscuous mode [ 342.442868][ T8959] syzkaller0: entered allmulticast mode [ 342.862145][ T8972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1095'. [ 343.136989][ T8986] netlink: 'syz.3.1101': attribute type 4 has an invalid length. [ 343.368263][ T8993] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 343.380067][ T8993] syzkaller0: entered promiscuous mode [ 343.391144][ T8993] syzkaller0: entered allmulticast mode [ 344.196883][ T9021] netlink: 'syz.1.1112': attribute type 4 has an invalid length. [ 344.405223][ T9026] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 344.413254][ T9026] syzkaller0: entered promiscuous mode [ 344.419969][ T9026] syzkaller0: entered allmulticast mode [ 345.024988][ T5774] Bluetooth: hci3: command 0x0406 tx timeout [ 345.086800][ T9041] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1121'. [ 345.174511][ T9043] netlink: 'syz.1.1122': attribute type 4 has an invalid length. [ 345.313902][ T9047] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 345.322021][ T9047] syzkaller0: entered promiscuous mode [ 345.329760][ T9047] syzkaller0: entered allmulticast mode [ 346.075408][ T8978] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 346.784701][ T9064] netlink: 'syz.0.1131': attribute type 4 has an invalid length. [ 346.903129][ T9069] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 346.934937][ T9069] syzkaller0: entered promiscuous mode [ 346.964415][ T9069] syzkaller0: entered allmulticast mode [ 347.336977][ T9080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1137'. [ 347.369082][ T9080] tipc: Enabling of bearer rejected, failed to enable media [ 348.753682][ T9098] netlink: 'syz.2.1143': attribute type 4 has an invalid length. [ 348.881997][ T9102] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 348.894363][ T9102] syzkaller0: entered promiscuous mode [ 348.899880][ T9102] syzkaller0: entered allmulticast mode [ 350.898652][ T9148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1158'. [ 350.907791][ T9146] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 350.935021][ T9146] syzkaller0: entered promiscuous mode [ 350.940556][ T9146] syzkaller0: entered allmulticast mode [ 351.225055][ T9159] netlink: 'syz.1.1163': attribute type 4 has an invalid length. [ 351.805938][ T9182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.196702][ T9200] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 352.210609][ T9200] syzkaller0: entered promiscuous mode [ 352.221702][ T9200] syzkaller0: entered allmulticast mode [ 352.252365][ T9202] 8021q: adding VLAN 0 to HW filter on device bond3 [ 352.296287][ T9202] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 352.308660][ T9204] netlink: 'syz.1.1175': attribute type 4 has an invalid length. [ 352.341047][ T9206] (null): rxe_set_mtu: Set mtu to 1024 [ 352.377878][ T9206] rdma_rxe: rxe_newlink: failed to add bond0 [ 353.395632][ T9246] 8021q: adding VLAN 0 to HW filter on device bond2 [ 353.459826][ T9251] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 353.518912][ T9246] (null): rxe_set_mtu: Set mtu to 1024 [ 353.525429][ T9246] rdma_rxe: rxe_newlink: failed to add bond0 [ 354.487448][ T9290] bond1: option mode: unable to set because the bond device has slaves [ 354.517430][ T9290] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 354.569787][ T9293] (null): rxe_set_mtu: Set mtu to 1024 [ 354.584595][ T9293] rdma_rxe: rxe_newlink: failed to add bond0 [ 354.969314][ T9303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1207'. [ 355.077220][ T9304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.404794][ T9323] bond1: option mode: unable to set because the bond device has slaves [ 355.455471][ T9323] bond1: (slave macvlan5): Error -98 calling set_mac_address [ 355.485209][ T9327] (null): rxe_set_mtu: Set mtu to 1024 [ 355.495391][ T9327] rdma_rxe: rxe_newlink: failed to add bond0 [ 355.526196][ T9330] syzkaller0: entered promiscuous mode [ 355.531901][ T9330] syzkaller0: entered allmulticast mode [ 357.687186][ T9357] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1224'. [ 357.807075][ T9357] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 357.986546][ T9369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1228'. [ 360.073795][ T9398] syzkaller0: entered promiscuous mode [ 360.086483][ T9398] syzkaller0: entered allmulticast mode [ 360.528051][ T9403] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1239'. [ 360.545141][ T9405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1240'. [ 361.248431][ T9423] syzkaller0: entered promiscuous mode [ 361.302796][ T9423] syzkaller0: entered allmulticast mode [ 361.335650][ T9432] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1249'. [ 363.709290][ T9437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1250'. [ 363.895160][ T9470] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1258'. [ 364.339745][ T9486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1267'. [ 364.620885][ T9490] syzkaller0: entered promiscuous mode [ 364.645053][ T9490] syzkaller0: entered allmulticast mode [ 364.668818][ T9497] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1271'. [ 364.878459][ T9505] netlink: 'syz.3.1275': attribute type 6 has an invalid length. [ 367.063740][ T9530] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1283'. [ 367.238626][ T9535] netlink: 'syz.3.1284': attribute type 4 has an invalid length. [ 367.341258][ T9544] Set syz1 is full, maxelem 8 reached [ 367.784583][ T9557] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1293'. [ 367.858661][ T9559] syzkaller0: entered promiscuous mode [ 367.880907][ T9559] syzkaller0: entered allmulticast mode [ 368.491397][ T9579] Set syz1 is full, maxelem 8 reached [ 370.100787][ T9571] netlink: 'syz.1.1296': attribute type 4 has an invalid length. [ 370.110749][ T9583] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1303'. [ 370.139730][ T9589] netlink: 'syz.2.1301': attribute type 4 has an invalid length. [ 370.798943][ T9613] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1313'. [ 370.818867][ T9615] netlink: 'syz.0.1312': attribute type 4 has an invalid length. [ 371.032010][ T9617] syzkaller0: entered promiscuous mode [ 371.037669][ T9617] syzkaller0: entered allmulticast mode [ 372.923874][ T9633] netlink: 'syz.0.1315': attribute type 4 has an invalid length. [ 373.081325][ T9635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1321'. [ 373.280921][ T9645] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1324'. [ 373.782674][ T9657] syzkaller0: entered promiscuous mode [ 373.789510][ T9657] syzkaller0: entered allmulticast mode [ 374.589476][ T9662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.611072][ T9667] netlink: 'syz.1.1331': attribute type 4 has an invalid length. [ 375.619127][ T9671] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1334'. [ 375.827658][ T9676] syzkaller0: entered promiscuous mode [ 375.833203][ T9676] syzkaller0: entered allmulticast mode [ 376.741934][ T9663] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 377.837461][ T9682] macvlan6: entered promiscuous mode [ 378.055735][ T9692] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1343'. [ 378.097624][ T9694] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1344'. [ 378.318313][ T9696] syzkaller0: entered promiscuous mode [ 378.332685][ T9696] syzkaller0: entered allmulticast mode [ 378.791914][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.799642][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.071724][ T9700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.433561][ T9714] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 380.441167][ T9714] macvlan3: entered promiscuous mode [ 380.641940][ T9734] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1355'. [ 380.744715][ T9737] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1356'. [ 381.243069][ T9701] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 381.284424][ T9752] syzkaller0: entered promiscuous mode [ 381.289965][ T9752] syzkaller0: entered allmulticast mode [ 383.597440][ T9781] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1368'. [ 383.713941][ T9785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1370'. [ 384.482019][ T9818] syzkaller0: entered promiscuous mode [ 384.490316][ T9818] syzkaller0: entered allmulticast mode [ 384.563103][ T9822] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1379'. [ 384.641722][ T9788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.534884][ T9825] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1380'. [ 386.810608][ T9843] syzkaller0: entered promiscuous mode [ 386.816393][ T9790] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 386.826984][ T9843] syzkaller0: entered allmulticast mode [ 387.209008][ T9845] syzkaller0: entered promiscuous mode [ 387.215880][ T9853] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1389'. [ 387.244415][ T9845] syzkaller0: entered allmulticast mode [ 389.392018][ T9857] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1391'. [ 389.754587][ T9891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1397'. [ 389.885252][ T9891] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1397'. [ 389.982279][ T9898] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1399'. [ 390.157969][ T9904] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1402'. [ 390.248872][ T9906] syzkaller0: entered promiscuous mode [ 390.267554][ T9906] syzkaller0: entered allmulticast mode [ 390.365939][ T9879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.909839][ T9923] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1410'. [ 390.940479][ T9925] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1412'. [ 391.858057][ T9957] syzkaller0: entered promiscuous mode [ 391.865343][ T9957] syzkaller0: entered allmulticast mode [ 391.889486][ T9963] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1423'. [ 392.016607][ T9966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1424'. [ 392.051572][ T9968] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1425'. [ 392.512291][ T9983] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1433'. [ 392.522175][ T9881] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 392.569192][ T9986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1431'. [ 392.734664][ T9989] syzkaller0: entered promiscuous mode [ 392.740355][ T9989] syzkaller0: entered allmulticast mode [ 392.769894][ T9991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1435'. [ 393.217727][ T42] IPVS: starting estimator thread 0... [ 393.323749][T10004] IPVS: using max 18 ests per chain, 43200 per kthread [ 393.698956][T10022] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1444'. [ 393.766712][T10025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1445'. [ 393.923625][T10032] syzkaller0: entered promiscuous mode [ 393.931077][T10032] syzkaller0: entered allmulticast mode [ 394.050825][T10036] tipc: Failed to remove unknown binding: 66,0,0/0:3520474399/3520474401 [ 394.061277][T10036] tipc: Failed to remove unknown binding: 66,0,0/0:3520474399/3520474400 [ 394.081044][T10036] tipc: Failed to remove unknown binding: 66,0,0/0:3520474399/3520474401 [ 394.090759][T10036] tipc: Failed to remove unknown binding: 66,0,0/0:3520474399/3520474400 [ 394.492397][T10016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 394.597683][T10049] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1456'. [ 395.082460][T10063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1463'. [ 395.470278][T10078] syzkaller0: entered promiscuous mode [ 395.479421][T10078] syzkaller0: entered allmulticast mode [ 396.644111][T10017] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 396.980595][T10130] __nla_validate_parse: 8 callbacks suppressed [ 396.980614][T10130] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1484'. [ 397.577404][T10140] syzkaller0: entered promiscuous mode [ 397.582955][T10140] syzkaller0: entered allmulticast mode [ 397.591286][T10159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1487'. [ 397.617657][T10159] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1487'. [ 400.274902][T10189] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1494'. [ 401.114651][T10208] syzkaller0: entered promiscuous mode [ 401.153784][T10208] syzkaller0: entered allmulticast mode [ 401.402642][T10230] tipc: Failed to remove unknown binding: 66,0,0/2886997039:1275847751/1275847753 [ 401.436325][T10230] tipc: Failed to remove unknown binding: 66,0,0/2886997039:1275847751/1275847752 [ 401.459107][T10230] tipc: Failed to remove unknown binding: 66,0,0/2886997039:1275847751/1275847753 [ 401.479250][T10230] tipc: Failed to remove unknown binding: 66,0,0/2886997039:1275847751/1275847752 [ 403.755017][T10234] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1504'. [ 404.659029][T10289] syzkaller0: entered promiscuous mode [ 404.698291][T10289] syzkaller0: entered allmulticast mode [ 404.919310][T10310] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1516'. [ 405.167568][T10324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1520'. [ 405.459845][T10332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1522'. [ 405.500377][T10332] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1522'. [ 405.595947][T10340] syzkaller0: entered promiscuous mode [ 405.633451][T10340] syzkaller0: entered allmulticast mode [ 405.692997][T10346] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1526'. [ 405.709383][T10346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1526'. [ 405.754167][T10348] syzkaller0: entered promiscuous mode [ 405.771526][T10348] syzkaller0: entered allmulticast mode [ 405.848236][T10351] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1528'. [ 406.432538][T10375] syzkaller1: entered promiscuous mode [ 406.475923][T10375] syzkaller1: entered allmulticast mode [ 406.980889][T10392] syzkaller0: entered promiscuous mode [ 406.998107][T10392] syzkaller0: entered allmulticast mode [ 407.015544][T10394] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1538'. [ 407.235937][T10397] syzkaller0: entered promiscuous mode [ 407.241829][T10397] syzkaller0: entered allmulticast mode [ 408.405137][T10428] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1547'. [ 408.438487][T10427] netlink: 'syz.3.1548': attribute type 1 has an invalid length. [ 408.612223][T10432] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 408.656940][T10432] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 408.672013][T10432] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 408.681238][T10432] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 408.710659][T10432] bond3: (slave geneve2): making interface the new active one [ 408.728351][T10432] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 408.768566][T10436] syzkaller0: entered promiscuous mode [ 408.786788][T10436] syzkaller0: entered allmulticast mode [ 409.261010][T10451] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1558'. [ 409.761870][T10466] syzkaller0: entered promiscuous mode [ 409.793416][T10466] syzkaller0: entered allmulticast mode [ 409.905659][T10472] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.914022][T10472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.058333][T10474] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1569'. [ 410.124486][T10478] "syz.0.1571" (10478) uses obsolete ecb(arc4) skcipher [ 410.661419][T10495] bond1: option mode: unable to set because the bond device has slaves [ 410.679560][T10495] (null): rxe_set_mtu: Set mtu to 1024 [ 410.691313][T10495] rdma_rxe: rxe_newlink: failed to add bond0 [ 410.815810][T10499] netlink: 424 bytes leftover after parsing attributes in process `syz.2.1580'. [ 410.936749][T10501] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1581'. [ 411.129877][T10503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1582'. [ 411.476914][T10516] bond1: option mode: unable to set because the bond device has slaves [ 411.489353][T10516] (null): rxe_set_mtu: Set mtu to 1024 [ 411.497354][T10516] rdma_rxe: rxe_newlink: failed to add bond0 [ 411.568266][T10519] netlink: 424 bytes leftover after parsing attributes in process `syz.2.1589'. [ 411.681409][T10521] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1590'. [ 411.830114][T10528] Bluetooth: MGMT ver 1.22 [ 412.358734][T10539] bond1: option mode: unable to set because the bond device has slaves [ 412.382248][T10541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1597'. [ 412.408453][T10539] (null): rxe_set_mtu: Set mtu to 1024 [ 412.423785][T10539] rdma_rxe: rxe_newlink: failed to add bond0 [ 412.571951][T10545] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1601'. [ 412.613609][T10547] netlink: 424 bytes leftover after parsing attributes in process `syz.1.1600'. [ 412.829425][T10553] syzkaller0: entered promiscuous mode [ 412.851477][T10553] syzkaller0: entered allmulticast mode [ 413.229383][T10566] bond1: option mode: unable to set because the bond device has slaves [ 413.274885][T10566] (null): rxe_set_mtu: Set mtu to 1024 [ 413.280705][T10566] rdma_rxe: rxe_newlink: failed to add bond0 [ 413.337987][T10568] syzkaller0: entered promiscuous mode [ 413.351332][T10568] syzkaller0: entered allmulticast mode [ 413.903877][ T5774] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 413.910944][ T5086] Bluetooth: hci0: command 0x0406 tx timeout [ 413.918113][T10592] syzkaller0: entered promiscuous mode [ 413.939005][T10592] syzkaller0: entered allmulticast mode [ 414.021066][T10596] bond1: option mode: unable to set because the bond device has slaves [ 414.126607][T10599] (null): rxe_set_mtu: Set mtu to 1024 [ 414.132451][T10599] rdma_rxe: rxe_newlink: failed to add bond0 [ 414.407295][T10609] syzkaller0: entered promiscuous mode [ 414.441261][T10609] syzkaller0: entered allmulticast mode [ 414.599147][T10618] __nla_validate_parse: 6 callbacks suppressed [ 414.599163][T10618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1632'. [ 414.706357][T10621] netlink: 408 bytes leftover after parsing attributes in process `syz.0.1633'. [ 414.868631][T10624] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1635'. [ 414.938050][T10627] syzkaller0: entered promiscuous mode [ 414.964187][T10627] syzkaller0: entered allmulticast mode [ 414.977182][T10629] syzkaller0: entered promiscuous mode [ 414.982722][T10629] syzkaller0: entered allmulticast mode [ 415.174602][T10636] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1638'. [ 415.510930][T10643] syzkaller0: entered promiscuous mode [ 415.520507][T10643] syzkaller0: entered allmulticast mode [ 415.529316][T10651] netlink: 408 bytes leftover after parsing attributes in process `syz.3.1645'. [ 415.723394][T10653] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1647'. [ 415.764815][T10658] syzkaller0: entered promiscuous mode [ 415.770513][T10658] syzkaller0: entered allmulticast mode [ 415.856380][T10660] syzkaller0: entered promiscuous mode [ 415.861919][T10660] syzkaller0: entered allmulticast mode [ 416.418654][T10683] syzkaller0: entered promiscuous mode [ 416.427162][T10683] syzkaller0: entered allmulticast mode [ 416.682824][T10690] syzkaller0: entered promiscuous mode [ 416.694391][T10690] syzkaller0: entered allmulticast mode [ 417.005991][T10704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1668'. [ 417.089965][T10704] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1668'. [ 417.838210][T10718] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.845719][T10718] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.893345][T10718] bond_slave_0: left promiscuous mode [ 417.899740][T10718] bond_slave_1: left promiscuous mode [ 417.930808][T10718] infiniband syz0: set down [ 418.248467][T10718] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.276011][T10718] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.686666][T10718] wireguard0: left promiscuous mode [ 418.700378][T10718] wireguard0: left allmulticast mode [ 418.723255][T10718] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.732564][T10718] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.741971][T10718] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.751209][T10718] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.760686][T10718] geneve2: left promiscuous mode [ 418.777517][T10718] macvlan5: left promiscuous mode [ 418.795066][T10718] macvlan6: left promiscuous mode [ 418.976387][T10748] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1679'. [ 419.176804][T10756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1684'. [ 420.842980][T10817] syzkaller0: entered promiscuous mode [ 420.860451][T10817] syzkaller0: entered allmulticast mode [ 423.444192][T10842] syzkaller0: entered promiscuous mode [ 423.449743][T10842] syzkaller0: entered allmulticast mode [ 424.162530][T10868] __nla_validate_parse: 1 callbacks suppressed [ 424.162548][T10868] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1728'. [ 424.465669][T10879] syzkaller0: entered promiscuous mode [ 424.473634][T10879] syzkaller0: entered allmulticast mode [ 424.791536][T10885] syzkaller0: entered promiscuous mode [ 424.797375][T10885] syzkaller0: entered allmulticast mode [ 424.812693][T10887] syzkaller0: entered promiscuous mode [ 424.823223][T10887] syzkaller0: entered allmulticast mode [ 426.848995][T10904] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1740'. [ 426.867370][T10905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1738'. [ 427.021307][T10908] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1741'. [ 427.041950][T10908] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1741'. [ 427.070674][T10908] syz_tun: entered promiscuous mode [ 427.083216][T10908] erspan0: entered promiscuous mode [ 427.572471][T10921] syzkaller0: entered promiscuous mode [ 427.578471][T10921] syzkaller0: entered allmulticast mode [ 427.840851][T10931] syzkaller0: entered promiscuous mode [ 427.846485][T10931] syzkaller0: entered allmulticast mode [ 430.218768][T10954] syzkaller0: entered promiscuous mode [ 430.234662][T10954] syzkaller0: entered allmulticast mode [ 430.430288][T10968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1761'. [ 430.646374][T10970] syzkaller0: entered promiscuous mode [ 430.662284][T10970] syzkaller0: entered allmulticast mode [ 431.067558][T10980] tipc: Started in network mode [ 431.072503][T10980] tipc: Node identity ee7af971af37, cluster identity 4711 [ 431.085652][T10980] tipc: Enabled bearer , priority 0 [ 431.096242][T10980] syzkaller0: entered promiscuous mode [ 431.101758][T10980] syzkaller0: entered allmulticast mode [ 431.153497][T10980] tipc: Resetting bearer [ 431.173218][T10979] tipc: Resetting bearer [ 431.228991][T10979] tipc: Disabling bearer [ 431.973608][T11000] tipc: Enabling of bearer rejected, failed to enable media [ 431.991072][T11004] syzkaller0: entered promiscuous mode [ 431.999086][T11004] syzkaller0: entered allmulticast mode [ 432.140212][T11007] syzkaller0: entered promiscuous mode [ 432.148767][T11007] syzkaller0: entered allmulticast mode [ 432.332065][T11024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1780'. [ 432.463913][T11029] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1783'. [ 435.198048][T11073] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1792'. [ 435.260780][T11071] tipc: Enabling of bearer rejected, failed to enable media [ 435.291306][T11071] syzkaller0: entered promiscuous mode [ 435.303657][T11071] syzkaller0: entered allmulticast mode [ 435.569489][T11083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1795'. [ 435.747826][T11090] syzkaller0: entered promiscuous mode [ 435.775132][T11090] syzkaller0: entered allmulticast mode [ 436.090497][T11102] syzkaller0: entered promiscuous mode [ 436.113571][T11102] syzkaller0: entered allmulticast mode [ 436.128592][T11104] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1802'. [ 436.530585][T11116] tipc: Enabling of bearer rejected, failed to enable media [ 436.551779][T11116] syzkaller0: entered promiscuous mode [ 436.558193][T11116] syzkaller0: entered allmulticast mode [ 437.349749][T11148] tipc: Failed to remove unknown binding: 66,0,0/0:2112262757/2112262758 [ 437.360374][T11148] tipc: Failed to remove unknown binding: 66,0,0/0:2112262757/2112262758 [ 437.473671][T11152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1817'. [ 439.253742][T11149] syzkaller0: entered promiscuous mode [ 439.269818][T11149] syzkaller0: entered allmulticast mode [ 440.068872][T11181] tipc: Failed to remove unknown binding: 66,0,0/2886997039:4103847990/4103847991 [ 440.104201][T11181] tipc: Failed to remove unknown binding: 66,0,0/2886997039:4103847990/4103847991 [ 441.552372][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.558826][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.854048][T11194] netlink: 'syz.0.1831': attribute type 4 has an invalid length. [ 442.415813][T11202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1834'. [ 442.467298][T11202] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1834'. [ 442.701072][T11207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1835'. [ 442.912708][T11212] syz0: rxe_newlink: already configured on bond0 [ 442.966862][T11210] bond1: option mode: unable to set because the bond device has slaves [ 443.006553][T11211] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 443.038034][ T41] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:f8d3:63ff:fe52:5bc9 error=-28 [ 443.038715][T11211] bond1: (slave macvlan7): Enslaving as an active interface with an up link [ 445.554829][T11234] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1843'. [ 445.573987][T11234] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 447.735441][T11249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1849'. [ 447.792793][T11249] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1849'. [ 447.945844][T11251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1850'. [ 448.621832][T11263] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1853'. [ 448.723671][ T9] IPVS: starting estimator thread 0... [ 450.363644][T11264] IPVS: using max 16 ests per chain, 38400 per kthread [ 451.385956][T11282] syzkaller0: entered promiscuous mode [ 451.412778][T11282] syzkaller0: entered allmulticast mode [ 455.503438][T11291] netlink: 424 bytes leftover after parsing attributes in process `syz.2.1864'. [ 458.414966][T11343] syzkaller0: entered promiscuous mode [ 458.420509][T11343] syzkaller0: entered allmulticast mode [ 462.653092][T11346] netlink: 424 bytes leftover after parsing attributes in process `syz.3.1876'. [ 462.663805][T11348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1878'. [ 462.672719][T11348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1878'. [ 462.717836][T11348] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.727552][T11348] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.736707][T11348] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.745519][T11348] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.834989][T11348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1878'. [ 462.856143][T11348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1878'. [ 464.938883][T11382] netlink: 424 bytes leftover after parsing attributes in process `syz.3.1888'. [ 465.099939][T11384] syzkaller0: entered promiscuous mode [ 465.123635][T11384] syzkaller0: entered allmulticast mode [ 465.139194][T11387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1890'. [ 465.153702][T11387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1890'. [ 465.175703][T11387] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.185380][T11387] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.194195][T11387] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.202909][T11387] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.222659][T11387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1890'. [ 468.234525][T11387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1890'. [ 470.618895][T11414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1899'. [ 470.682690][T11421] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1899'. [ 471.025906][T11428] syzkaller0: entered promiscuous mode [ 471.057198][T11428] syzkaller0: entered allmulticast mode [ 473.774840][T11479] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1914'. [ 473.883057][T11487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1915'. [ 474.395040][T11500] syzkaller0: entered promiscuous mode [ 474.400779][T11500] syzkaller0: entered allmulticast mode [ 477.304040][T11555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1931'. [ 477.486905][T11561] netlink: 'syz.3.1934': attribute type 4 has an invalid length. [ 478.284989][T11590] syzkaller0: entered promiscuous mode [ 478.293864][T11590] syzkaller0: entered allmulticast mode [ 478.389803][T11593] tipc: Failed to remove unknown binding: 66,0,0/2886997039:2149945857/2149945859 [ 478.399513][T11593] tipc: Failed to remove unknown binding: 66,0,0/2886997039:2149945857/2149945858 [ 478.409883][T11593] tipc: Failed to remove unknown binding: 66,0,0/2886997039:2149945857/2149945859 [ 478.419539][T11593] tipc: Failed to remove unknown binding: 66,0,0/2886997039:2149945857/2149945858 [ 478.437881][T11594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1941'. [ 478.653171][T11597] veth0: entered promiscuous mode [ 478.669763][T11595] veth0: left promiscuous mode [ 478.697600][T11600] syzkaller0: entered promiscuous mode [ 478.703181][T11600] syzkaller0: entered allmulticast mode [ 478.919388][T11607] tipc: Enabled bearer , priority 0 [ 478.928217][T11607] syzkaller0: entered promiscuous mode [ 478.939331][T11607] syzkaller0: entered allmulticast mode [ 478.989305][T11607] tipc: Resetting bearer [ 479.010756][T11606] tipc: Resetting bearer [ 479.068279][T11606] tipc: Disabling bearer [ 479.089052][T11612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1948'. [ 479.551635][T11629] syzkaller0: entered promiscuous mode [ 479.559045][T11629] syzkaller0: entered allmulticast mode [ 479.787382][T11631] bond1: option mode: unable to set because the bond device has slaves [ 479.824135][T11631] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 479.866270][T11635] (null): rxe_set_mtu: Set mtu to 1024 [ 479.881824][T11635] rdma_rxe: rxe_newlink: failed to add bond0 [ 480.298831][T11647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1957'. [ 480.435798][T11647] syz_tun (unregistering): left promiscuous mode [ 480.798853][T11667] bond1: option mode: unable to set because the bond device has slaves [ 480.817009][T11667] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 480.862407][T11669] (null): rxe_set_mtu: Set mtu to 1024 [ 480.898177][T11669] rdma_rxe: rxe_newlink: failed to add bond0 [ 481.150931][T11677] syzkaller0: entered promiscuous mode [ 481.159825][T11677] syzkaller0: entered allmulticast mode [ 481.175273][T11679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1965'. [ 481.282321][ T9] IPVS: starting estimator thread 0... [ 481.397269][T11680] IPVS: using max 15 ests per chain, 36000 per kthread [ 481.488342][T11684] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 481.803516][T11692] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1973'. [ 481.847897][T11694] bond1: option mode: unable to set because the bond device has slaves [ 481.894736][T11694] bond1: (slave macvlan5): Error -98 calling set_mac_address [ 481.929967][T11695] (null): rxe_set_mtu: Set mtu to 1024 [ 481.941714][T11695] rdma_rxe: rxe_newlink: failed to add bond0 [ 482.221693][T11702] tipc: Started in network mode [ 482.242606][T11702] tipc: Node identity d62c4836e326, cluster identity 4711 [ 482.273552][T11702] tipc: Enabled bearer , priority 0 [ 482.307170][T11702] tipc: Resetting bearer [ 482.334988][T11701] tipc: Disabling bearer [ 482.546183][T11716] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1984'. [ 482.647651][T11720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1986'. [ 483.118921][T11733] tipc: Enabled bearer , priority 0 [ 483.159020][T11733] tipc: Resetting bearer [ 483.207253][T11732] tipc: Disabling bearer [ 483.430769][T11740] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1995'. [ 484.161977][T11762] tipc: Enabled bearer , priority 0 [ 484.181751][T11762] tipc: Resetting bearer [ 484.239165][T11760] tipc: Disabling bearer [ 484.440835][T11775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2006'. [ 485.601915][T11816] syzkaller0: entered promiscuous mode [ 485.614327][T11816] syzkaller0: entered allmulticast mode [ 485.899856][T11827] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2026'. [ 485.945283][T11827] netlink: 'syz.3.2026': attribute type 1 has an invalid length. [ 486.163726][T11835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2029'. [ 487.029972][T11859] tipc: Enabled bearer , priority 0 [ 487.088936][T11859] syzkaller0: entered promiscuous mode [ 487.109812][T11859] syzkaller0: entered allmulticast mode [ 487.179233][T11858] tipc: Resetting bearer [ 487.222772][T11858] tipc: Disabling bearer [ 487.322459][T11866] syzkaller0: entered promiscuous mode [ 487.353591][T11866] syzkaller0: entered allmulticast mode [ 487.969947][T11894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2042'. [ 488.908195][T11916] syzkaller0: entered promiscuous mode [ 488.915770][T11916] syzkaller0: entered allmulticast mode [ 489.385822][T11926] syzkaller0: entered promiscuous mode [ 489.408055][T11926] syzkaller0: entered allmulticast mode [ 493.296535][T11942] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2057'. [ 493.657020][T11937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2056'. [ 493.682450][T11940] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2056'. [ 494.461474][T11964] syzkaller0: entered promiscuous mode [ 494.474799][T11964] syzkaller0: entered allmulticast mode [ 497.454141][T11977] syzkaller0: entered promiscuous mode [ 497.459694][T11977] syzkaller0: entered allmulticast mode [ 498.257839][T12005] syzkaller0: entered promiscuous mode [ 498.280814][T12005] syzkaller0: entered allmulticast mode [ 500.585634][T12028] syzkaller0: entered promiscuous mode [ 500.591184][T12028] syzkaller0: entered allmulticast mode [ 501.340516][T12059] (null): rxe_set_mtu: Set mtu to 1024 [ 501.343542][T12056] syzkaller0: entered promiscuous mode [ 501.354410][T12056] syzkaller0: entered allmulticast mode [ 501.354622][T12059] rdma_rxe: rxe_newlink: failed to add bond0 [ 501.380801][T12055] bond1: (slave macvlan5): Error -98 calling set_mac_address [ 501.677515][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.699317][T12093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2101'. [ 504.725475][T12093] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2101'. [ 505.359915][T12110] syzkaller0: entered promiscuous mode [ 505.366091][T12110] syzkaller0: entered allmulticast mode [ 507.466183][T12123] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2113'. [ 507.494314][T12125] syzkaller0: entered promiscuous mode [ 507.501476][T12125] syzkaller0: entered allmulticast mode [ 507.870236][T12148] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 507.951362][T12148] (null): rxe_set_mtu: Set mtu to 1024 [ 507.983828][T12148] rdma_rxe: rxe_newlink: failed to add bond0 [ 508.254344][T12162] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2123'. [ 508.370617][T12166] syzkaller0: entered promiscuous mode [ 508.377785][T12166] syzkaller0: entered allmulticast mode [ 508.814628][T12190] (null): rxe_set_mtu: Set mtu to 1024 [ 508.828254][T12190] rdma_rxe: rxe_newlink: failed to add bond0 [ 510.908205][T12186] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 510.971754][T12212] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2134'. [ 511.735344][T12233] syzkaller0: entered promiscuous mode [ 511.741214][T12233] syzkaller0: entered allmulticast mode [ 511.829024][T12244] (null): rxe_set_mtu: Set mtu to 1024 [ 511.836055][T12244] rdma_rxe: rxe_newlink: failed to add bond0 [ 513.846152][T12243] bond1: (slave macvlan5): Error -98 calling set_mac_address [ 514.896921][T12290] syzkaller0: entered promiscuous mode [ 514.914944][T12290] syzkaller0: entered allmulticast mode [ 517.360251][T12323] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2166'. [ 518.024701][T12347] (null): rxe_set_mtu: Set mtu to 1024 [ 518.030662][T12347] rdma_rxe: rxe_newlink: failed to add bond0 [ 518.068782][T12343] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 518.081159][T12346] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2175'. [ 518.322808][T12350] syzkaller0: entered promiscuous mode [ 518.360954][T12350] syzkaller0: entered allmulticast mode [ 520.511494][T12369] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2184'. [ 520.747051][T12380] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 520.777970][T12388] (null): rxe_set_mtu: Set mtu to 1024 [ 520.779818][T12384] syzkaller0: entered promiscuous mode [ 520.792511][T12384] syzkaller0: entered allmulticast mode [ 520.801137][T12388] rdma_rxe: rxe_newlink: failed to add bond0 [ 521.125221][T12400] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2195'. [ 521.381232][T12405] syzkaller0: entered promiscuous mode [ 521.392891][T12405] syzkaller0: entered allmulticast mode [ 521.729598][T12420] syz0: rxe_newlink: already configured on bond0 [ 523.528203][ T1128] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:f8d3:63ff:fe52:5bc9 error=-28 [ 523.529196][T12418] 8021q: adding VLAN 0 to HW filter on device bond1 [ 523.552286][T12419] 8021q: adding VLAN 0 to HW filter on device macvlan8 [ 523.562094][ T1309] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:f8d3:63ff:fe52:5bc9 error=-28 [ 523.562851][T12419] bond1: (slave macvlan8): Enslaving as an active interface with an up link [ 523.606444][T12424] syzkaller0: entered promiscuous mode [ 523.611960][T12424] syzkaller0: entered allmulticast mode [ 523.760009][ T1128] bond1: (slave macvlan2): link status definitely down, disabling slave [ 523.774274][T12438] syz.3.2204 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 523.783673][ T1128] bond1: (slave macvlan7): making interface the new active one [ 523.803172][ T1128] bond1: (slave macvlan2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 523.885062][ T1128] macvlan7: entered promiscuous mode [ 523.894953][ T1128] bond0: entered promiscuous mode [ 523.900043][ T1128] bond_slave_0: entered promiscuous mode [ 523.920208][ T1128] bond_slave_1: entered promiscuous mode [ 523.930674][T12440] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2205'. [ 523.975529][T12444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2207'. [ 524.304980][T12454] syzkaller0: entered promiscuous mode [ 524.310697][T12454] syzkaller0: entered allmulticast mode [ 524.334527][T12461] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 524.369806][T12456] (null): rxe_set_mtu: Set mtu to 1024 [ 524.377401][T12456] rdma_rxe: rxe_newlink: failed to add bond0 [ 526.499574][T12479] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2217'. [ 526.752561][T12488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2220'. [ 526.881707][T12492] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 526.943796][T12497] (null): rxe_set_mtu: Set mtu to 1024 [ 526.971162][T12497] rdma_rxe: rxe_newlink: failed to add bond0 [ 527.037310][T12501] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2226'. [ 527.214814][T12504] syzkaller0: entered promiscuous mode [ 527.220641][T12504] syzkaller0: entered allmulticast mode [ 529.258863][T12520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2232'. [ 529.612014][T12532] bond1: option mode: unable to set because the bond device has slaves [ 529.672226][T12532] bond1: (slave macvlan5): Error -98 calling set_mac_address [ 529.716794][T12539] (null): rxe_set_mtu: Set mtu to 1024 [ 529.725506][T12539] rdma_rxe: rxe_newlink: failed to add bond0 [ 529.744511][T12543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2241'. [ 529.896513][T12546] syzkaller0: entered promiscuous mode [ 529.902063][T12546] syzkaller0: entered allmulticast mode [ 530.949865][ T5086] Bluetooth: hci3: command 0x0406 tx timeout [ 532.282390][T12570] bond1: option mode: unable to set because the bond device has slaves [ 532.325676][T12570] bond1: (slave macvlan9): Error -98 calling set_mac_address [ 532.356211][T12579] syz0: rxe_newlink: already configured on bond0 [ 532.626772][T12586] syzkaller0: entered promiscuous mode [ 532.632314][T12586] syzkaller0: entered allmulticast mode [ 534.144169][ T5086] Bluetooth: hci3: command 0x0406 tx timeout [ 534.705572][T12596] syzkaller0: entered promiscuous mode [ 534.711069][T12596] syzkaller0: entered allmulticast mode [ 535.015527][ T1142] macvlan7: left promiscuous mode [ 535.033150][ T1142] bond0: left promiscuous mode [ 535.038113][ T1142] bond_slave_0: left promiscuous mode [ 535.049932][ T1142] bond_slave_1: left promiscuous mode [ 535.151808][T12623] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2267'. [ 535.444081][T12630] syzkaller0: entered promiscuous mode [ 535.454350][T12630] syzkaller0: entered allmulticast mode [ 535.505344][T12638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2273'. [ 536.376565][T12647] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 536.395831][T12647] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 536.418833][T12647] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 536.450293][T12647] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 536.459459][T12647] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 536.481135][T12647] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 537.999443][T12639] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2272'. [ 538.377270][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.393030][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.543986][T12647] Bluetooth: hci2: command tx timeout [ 538.550367][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.588140][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.680369][T12671] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2286'. [ 538.794467][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.805007][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.951594][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.971985][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.291762][T12646] chnl_net:caif_netlink_parms(): no params data found [ 539.478240][ T12] tipc: Left network mode [ 539.714491][T12706] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2296'. [ 539.832307][T12646] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.845899][T12646] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.857548][T12646] bridge_slave_0: entered allmulticast mode [ 539.868647][T12646] bridge_slave_0: entered promiscuous mode [ 539.939860][T12646] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.971436][T12646] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.999750][T12646] bridge_slave_1: entered allmulticast mode [ 540.015490][T12646] bridge_slave_1: entered promiscuous mode [ 540.179159][T12646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.227720][T12646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.499892][T12646] team0: Port device team_slave_0 added [ 540.625007][T12647] Bluetooth: hci2: command tx timeout [ 540.659461][T12646] team0: Port device team_slave_1 added [ 540.708740][T12742] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2304'. [ 540.962921][T12748] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2306'. [ 540.987360][T12646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.996162][T12646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.033964][T12646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.178860][T12646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.198118][T12646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.234839][T12646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.434495][T12646] hsr_slave_0: entered promiscuous mode [ 541.441632][T12646] hsr_slave_1: entered promiscuous mode [ 541.449725][T12646] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 541.466398][T12646] Cannot create hsr debugfs directory [ 541.740701][T12772] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2313'. [ 542.327072][T12782] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2315'. [ 542.703805][T12647] Bluetooth: hci2: command tx timeout [ 542.720460][ T12] hsr_slave_0: left promiscuous mode [ 542.729460][ T12] hsr_slave_1: left promiscuous mode [ 542.735841][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 542.751281][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 542.761194][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 542.768807][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.777419][ T12] bridge_slave_1: left allmulticast mode [ 542.783109][ T12] bridge_slave_1: left promiscuous mode [ 542.791302][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.803504][ T12] bridge_slave_0: left allmulticast mode [ 542.809254][ T12] bridge_slave_0: left promiscuous mode [ 542.815739][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.857984][ T12] bond_slave_0: left promiscuous mode [ 542.864997][ T12] bond_slave_1: left promiscuous mode [ 542.874674][ T12] veth1_macvtap: left promiscuous mode [ 542.884998][ T12] veth0_macvtap: left promiscuous mode [ 542.890957][ T12] veth1_vlan: left promiscuous mode [ 542.903150][ T12] veth0_vlan: left promiscuous mode [ 543.439733][ T12] bond3 (unregistering): Released all slaves [ 543.570233][ T12] bond2 (unregistering): Released all slaves [ 543.629271][ T12] pimreg (unregistering): left allmulticast mode [ 543.646902][ T12] bond1 (unregistering): (slave macvlan2): Releasing active interface [ 543.769535][ T12] bond1 (unregistering): Released all slaves [ 544.287535][ T12] team0 (unregistering): Port device team_slave_1 removed [ 544.336426][ T12] team0 (unregistering): Port device team_slave_0 removed [ 544.390841][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 544.440945][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.786239][ T12] bond0 (unregistering): Released all slaves [ 544.793668][T12647] Bluetooth: hci2: command tx timeout [ 545.225201][T12817] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2322'. [ 545.587442][T12646] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 545.613768][T12646] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 545.637321][T12646] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 545.666096][T12646] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 545.755322][T12835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2327'. [ 546.032553][T12646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.183562][T12646] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.190872][T12846] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2331'. [ 546.227138][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.234368][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.286816][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.294076][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.035057][T12646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 547.147073][T12646] veth0_vlan: entered promiscuous mode [ 547.166610][T12878] bpq0: entered promiscuous mode [ 547.190358][T12646] veth1_vlan: entered promiscuous mode [ 547.267080][T12646] veth0_macvtap: entered promiscuous mode [ 547.312849][T12646] veth1_macvtap: entered promiscuous mode [ 547.374221][T12646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.407967][T12646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.443390][T12646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.459715][T12646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.495341][T12646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.522046][T12646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.553461][T12646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.575604][T12646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.596219][T12646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.622811][T12646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.666763][T12646] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.685731][T12646] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.704487][T12646] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.722206][T12646] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.990612][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.033446][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.099221][T12895] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2340'. [ 548.131360][ T1309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.159772][ T1309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.549435][T12927] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2349'. [ 549.561140][ T5086] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 549.575945][ T5086] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 549.590485][ T5086] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 549.599973][ T5086] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 549.609947][ T5086] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 549.617480][ T5086] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 549.857849][T12936] netlink: 'syz.2.2350': attribute type 4 has an invalid length. [ 549.875687][T12936] netlink: 60683 bytes leftover after parsing attributes in process `syz.2.2350'. [ 550.287684][T12942] netlink: 'syz.2.2353': attribute type 4 has an invalid length. [ 550.586753][T12952] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2357'. [ 550.680637][T12929] chnl_net:caif_netlink_parms(): no params data found [ 550.850043][T12961] bpq0: left promiscuous mode [ 550.926575][T12929] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.947992][T12929] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.979107][T12929] bridge_slave_0: entered allmulticast mode [ 550.998854][T12929] bridge_slave_0: entered promiscuous mode [ 551.025368][T12929] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.044957][T12929] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.055635][T12929] bridge_slave_1: entered allmulticast mode [ 551.063821][T12929] bridge_slave_1: entered promiscuous mode [ 551.116685][T12929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.128067][T12966] tipc: Started in network mode [ 551.134301][T12966] tipc: Node identity 0a296119f80e, cluster identity 4711 [ 551.141788][T12966] tipc: Enabled bearer , priority 0 [ 551.152120][T12929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.181670][T12966] syzkaller0: entered promiscuous mode [ 551.188605][T12966] syzkaller0: entered allmulticast mode [ 551.238400][T12929] team0: Port device team_slave_0 added [ 551.254913][T12966] tipc: Resetting bearer [ 551.275449][T12929] team0: Port device team_slave_1 added [ 551.287715][T12965] tipc: Resetting bearer [ 551.314503][T12965] tipc: Disabling bearer [ 551.366646][T12929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.383459][T12929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.446744][T12929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.480473][T12968] netlink: set zone limit has 8 unknown bytes [ 551.496395][T12929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.513344][T12929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.572835][T12929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.667384][T12647] Bluetooth: hci3: command tx timeout [ 551.782802][T12929] hsr_slave_0: entered promiscuous mode [ 551.801806][T12929] hsr_slave_1: entered promiscuous mode [ 551.812596][T12929] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 551.829379][T12929] Cannot create hsr debugfs directory [ 552.081114][T12976] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2366'. [ 552.801084][T12929] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 552.823128][T12929] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 552.846417][T12929] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 552.858128][T12929] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 552.958717][T12929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.985160][T12929] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.000993][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.008227][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.032944][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.040217][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.180556][T13003] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2374'. [ 553.462295][T12929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.598774][T12929] veth0_vlan: entered promiscuous mode [ 553.639188][T12929] veth1_vlan: entered promiscuous mode [ 553.744266][T12647] Bluetooth: hci3: command tx timeout [ 553.774900][T12929] veth0_macvtap: entered promiscuous mode [ 553.799953][T12929] veth1_macvtap: entered promiscuous mode [ 553.850396][T12929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.889107][T12929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.913575][T12929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.944843][T12929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.963357][T12929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.984809][T12929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.016244][T12929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.049701][T12929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.087544][T12929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.108709][T12929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.122523][T12929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.136865][T13024] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2381'. [ 554.157514][T12929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.175452][T12929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.191761][T12929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.205892][T12929] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.215763][T12929] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.224850][T12929] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.234089][T12929] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.254081][T13025] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2381'. [ 554.496320][ T3480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.521869][ T3480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.547301][T13028] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2382'. [ 554.652986][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.667498][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.374868][T13051] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2390'. [ 555.565625][T13056] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2392'. [ 555.825208][T12647] Bluetooth: hci3: command tx timeout [ 557.017592][T13077] tap0: tun_chr_ioctl cmd 1074025677 [ 557.023150][T13077] tap0: linktype set to 270 [ 557.056980][ T5086] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 557.068211][ T5086] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 557.087139][ T5086] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 557.144127][ T5086] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 557.154028][ T5086] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 557.191325][ T5086] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 557.903759][ T5086] Bluetooth: hci3: command tx timeout [ 558.093367][T13087] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2403'. [ 558.508991][T13078] chnl_net:caif_netlink_parms(): no params data found [ 559.344143][ T5086] Bluetooth: hci1: command tx timeout [ 561.089612][T13061] Set syz1 is full, maxelem 65536 reached [ 561.425351][ T5086] Bluetooth: hci1: command tx timeout [ 562.479179][T13078] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.501360][T13078] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.523584][T13078] bridge_slave_0: entered allmulticast mode [ 562.531110][T13078] bridge_slave_0: entered promiscuous mode [ 562.575387][T13120] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2411'. [ 562.604611][T13078] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.623558][T13078] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.640904][T13078] bridge_slave_1: entered allmulticast mode [ 562.654357][T13078] bridge_slave_1: entered promiscuous mode [ 562.757473][T13078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.816179][T13078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.889627][T13078] team0: Port device team_slave_0 added [ 562.912776][T13078] team0: Port device team_slave_1 added [ 562.960362][T13078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.973300][T13078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.022708][T13078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.054902][T13078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.062086][T13078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.104934][T13078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.127541][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.179770][T13078] hsr_slave_0: entered promiscuous mode [ 563.195108][T13078] hsr_slave_1: entered promiscuous mode [ 563.212291][T13078] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 563.221272][T13078] Cannot create hsr debugfs directory [ 563.510327][ T5086] Bluetooth: hci1: command tx timeout [ 563.650675][T13078] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.670532][T13078] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.687920][T13078] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 563.887582][T13078] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.934344][T13078] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.955035][T13078] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 564.145712][T13078] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.166633][T13078] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.187394][T13078] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 564.244692][T13148] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2421'. [ 564.288376][T13078] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.323535][T13078] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.336869][T13078] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 564.653007][T13078] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 564.673977][T13078] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 564.823780][T13078] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 564.870425][T13078] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 565.117502][T13078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.159475][T13078] 8021q: adding VLAN 0 to HW filter on device team0 [ 565.179770][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.187106][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 565.222474][ T1309] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.229710][ T1309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 565.583890][ T5086] Bluetooth: hci1: command tx timeout [ 565.710492][T13179] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2430'. [ 566.025829][T13078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 566.200692][T13078] veth0_vlan: entered promiscuous mode [ 566.260852][T13078] veth1_vlan: entered promiscuous mode [ 566.360493][T13078] veth0_macvtap: entered promiscuous mode [ 566.389023][T13078] veth1_macvtap: entered promiscuous mode [ 566.444797][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.469105][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.481057][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.501515][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.530610][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.559303][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.580660][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.592228][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.604749][T13078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 566.629517][T13197] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2438'. [ 566.658665][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.681195][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.697060][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.713283][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.732420][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.743196][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.753672][T13078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.764455][T13078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.804257][T13078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 566.854578][T13078] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.900178][T13078] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.919573][T13078] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.931746][T13078] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.117268][ T3480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.153930][ T3480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.220236][ T3480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.257164][ T3480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.668735][T13209] tipc: Enabling of bearer rejected, failed to enable media [ 568.305722][T13227] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2446'. [ 568.542403][T13231] tipc: Started in network mode [ 568.563630][T13231] tipc: Node identity 4e2a4d4eeb71, cluster identity 4711 [ 568.570976][T13231] tipc: Enabled bearer , priority 0 [ 568.605858][T13237] syzkaller0: entered promiscuous mode [ 568.611404][T13237] syzkaller0: entered allmulticast mode [ 568.694418][T13231] tipc: Resetting bearer [ 568.719747][T13230] tipc: Resetting bearer [ 568.770197][T13230] tipc: Disabling bearer [ 568.784691][T13242] netlink: 'syz.0.2451': attribute type 21 has an invalid length. [ 568.799375][T13242] IPv6: NLM_F_CREATE should be specified when creating new route [ 568.809643][T13242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2451'. [ 568.909979][T13246] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2454'. [ 568.990301][T13246] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2454'. [ 569.271627][T13253] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2458'. [ 569.553629][T13256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2460'. [ 569.886555][T12647] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 569.895700][T12647] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 569.907490][T12647] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 569.917423][T12647] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 569.934568][T12647] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 569.943767][T12647] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 570.001837][T13267] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2464'. [ 570.105739][T13267] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2464'. [ 570.426796][T13273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2467'. [ 570.843078][T13262] chnl_net:caif_netlink_parms(): no params data found [ 570.951617][T13262] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.959795][T13262] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.967655][T13262] bridge_slave_0: entered allmulticast mode [ 570.987167][T13262] bridge_slave_0: entered promiscuous mode [ 570.996943][T13262] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.004593][T13262] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.011922][T13262] bridge_slave_1: entered allmulticast mode [ 571.019900][T13262] bridge_slave_1: entered promiscuous mode [ 571.097534][T13262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.122906][T13262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.197028][T13262] team0: Port device team_slave_0 added [ 571.209850][T13262] team0: Port device team_slave_1 added [ 571.323130][T13262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.346123][T13262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.383600][T13262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.407362][T13298] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2473'. [ 571.434491][T13262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.451770][T13262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.503030][T13262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.531136][T13300] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2474'. [ 571.599860][T13300] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2474'. [ 571.695479][T13262] hsr_slave_0: entered promiscuous mode [ 571.712989][T13262] hsr_slave_1: entered promiscuous mode [ 571.743555][T13262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 571.751190][T13262] Cannot create hsr debugfs directory [ 571.995458][T12647] Bluetooth: hci0: command tx timeout [ 572.378941][T13262] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.455709][T13322] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2482'. [ 572.520462][T13262] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.729829][T13262] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.762748][T13326] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2484'. [ 572.882997][T13262] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.142172][T13335] bridge_slave_1: left allmulticast mode [ 573.150561][T13335] bridge_slave_1: left promiscuous mode [ 573.157880][T13335] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.170327][T13335] bridge_slave_0: left allmulticast mode [ 573.177786][T13335] bridge_slave_0: left promiscuous mode [ 573.184429][T13335] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.430862][T13262] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 573.466499][T13262] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 573.510197][T13262] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 573.539252][T13262] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 573.835165][T13262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.907529][T13262] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.936098][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.943376][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.006487][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.013734][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.065383][T12647] Bluetooth: hci0: command tx timeout [ 574.110080][T13262] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 574.143777][T13262] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 574.748228][T13384] __nla_validate_parse: 4 callbacks suppressed [ 574.748248][T13384] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2498'. [ 574.838294][T13262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 574.977649][T13262] veth0_vlan: entered promiscuous mode [ 575.036983][T13262] veth1_vlan: entered promiscuous mode [ 575.148891][T13262] veth0_macvtap: entered promiscuous mode [ 575.164558][T13391] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2500'. [ 575.189551][T13262] veth1_macvtap: entered promiscuous mode [ 575.229498][T13262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.243441][T13262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.254133][T13262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.286765][T13262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.307191][T13262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.327205][T13262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.342777][T13262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.375303][T13262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.411177][T13262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.442341][T13262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.465576][T13262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 575.573163][T13400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2502'. [ 575.605235][T13262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.628191][T13262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.647618][T13262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.662198][T13262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.678513][T13262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.700310][T13262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.715293][T13262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.736494][T13262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.747181][T13262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.758302][T13262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.781109][T13262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 575.865390][T13404] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2502'. [ 575.880149][T13262] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.892571][T13262] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.935329][T13262] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.962477][T13262] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.143733][T12647] Bluetooth: hci0: command tx timeout [ 576.197556][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.235041][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.364164][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.417281][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.634020][T13423] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2506'. [ 576.894723][T13430] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2508'. [ 578.223631][T12647] Bluetooth: hci0: command tx timeout [ 578.226925][T13469] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2519'. [ 580.482143][T13513] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2530'. [ 582.098633][T13550] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2539'. [ 583.639835][T13581] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2549'. [ 583.854309][T13584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2550'. [ 585.186731][T13613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2560'. [ 585.194589][T13612] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2559'. [ 586.314541][T13474] Set syz1 is full, maxelem 65536 reached [ 586.486436][T13645] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2570'. [ 587.578829][T13680] syzkaller0: entered promiscuous mode [ 587.597272][T13680] syzkaller0: entered allmulticast mode [ 587.657240][T13682] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2582'. [ 589.313048][T13708] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2591'. [ 589.468935][T13710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2592'. [ 589.614003][T13714] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2592'. [ 590.917033][T10729] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 591.248241][T10729] usb 3-1: config 1 has an invalid interface number: 188 but max is 0 [ 591.257685][T10729] usb 3-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 591.268941][T10729] usb 3-1: config 1 has no interface number 0 [ 591.275632][T10729] usb 3-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 591.329530][T10729] usb 3-1: config 1 interface 188 has no altsetting 0 [ 591.414510][T10729] usb 3-1: New USB device found, idVendor=2040, idProduct=7200, bcdDevice=5b.6b [ 591.425221][T10729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.440598][T10729] usb 3-1: Product: syz [ 591.445233][T10729] usb 3-1: Manufacturer: syz [ 591.450802][T10729] usb 3-1: SerialNumber: syz [ 591.498173][T13738] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2601'. [ 591.566864][T10729] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 591.747307][T10729] snd-usb-audio: probe of 3-1:1.188 failed with error -22 [ 591.794298][T10729] usb 3-1: USB disconnect, device number 2 [ 591.913011][T11351] udevd[11351]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.188/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 591.983578][T13742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2603'. [ 592.077782][T13744] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2603'. [ 592.635322][T13752] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 592.796080][T13755] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2608'. [ 592.921960][T13661] Set syz1 is full, maxelem 65536 reached [ 593.090791][T13760] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2610'. [ 593.815182][T13766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2612'. [ 593.866394][T13766] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2612'. [ 594.630466][T13778] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2617'. [ 594.874895][T13785] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2621'. [ 595.096287][T13791] loop2: detected capacity change from 0 to 1024 [ 595.247140][T13791] hfsplus: invalid xattr key length: 0 [ 595.489026][ T3480] hfsplus: b-tree write err: -5, ino 8 [ 596.594119][T13805] loop2: detected capacity change from 0 to 1024 [ 596.601735][T13805] EXT4-fs: Ignoring removed orlov option [ 596.746903][T13805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 597.071231][T12646] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.346338][T13818] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2632'. [ 597.412270][T13822] syzkaller0: entered promiscuous mode [ 597.418543][T13822] syzkaller0: entered allmulticast mode [ 597.847349][T13828] loop3: detected capacity change from 0 to 1024 [ 598.820865][T13837] 8021q: adding VLAN 0 to HW filter on device bond1 [ 598.873120][T13840] (null): rxe_set_mtu: Set mtu to 1024 [ 598.921882][T13840] rdma_rxe: rxe_newlink: failed to add bond0 [ 599.006558][T13845] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2644'. [ 599.280961][T13850] syzkaller0: entered promiscuous mode [ 599.299710][T13850] syzkaller0: entered allmulticast mode [ 600.564885][T13864] loop2: detected capacity change from 0 to 256 [ 600.572268][T13864] exfat: Deprecated parameter 'utf8' [ 601.018094][T13864] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 602.143231][ C0] sched: RT throttling activated [ 602.410680][T13866] loop0: detected capacity change from 0 to 4096 [ 602.495514][T13869] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2654'. [ 602.545603][T13866] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 602.724879][T13866] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #15: comm syz.0.2653: corrupted inode contents [ 602.868660][T13866] EXT4-fs error (device loop0): ext4_dirty_inode:6124: inode #15: comm syz.0.2653: mark_inode_dirty error [ 602.947425][T13866] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #15: comm syz.0.2653: corrupted inode contents [ 603.023642][T13866] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #15: comm syz.0.2653: mark_inode_dirty error [ 603.083651][T13866] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #15: comm syz.0.2653: corrupted inode contents [ 603.128434][T13873] 8021q: adding VLAN 0 to HW filter on device bond1 [ 603.141599][T13866] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #15: comm syz.0.2653: mark_inode_dirty error [ 603.155225][T13875] (null): rxe_set_mtu: Set mtu to 1024 [ 603.161030][T13875] rdma_rxe: rxe_newlink: failed to add bond0 [ 603.217256][T13866] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #15: comm syz.0.2653: corrupted inode contents [ 603.244714][T13866] EXT4-fs error (device loop0): ext4_truncate:4294: inode #15: comm syz.0.2653: mark_inode_dirty error [ 603.275756][T13866] EXT4-fs error (device loop0): ext4_evict_inode:263: comm syz.0.2653: couldn't truncate inode 15 (err -117) [ 603.400379][T13877] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2656'. [ 603.432568][T13262] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.557347][T13881] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2659'. [ 603.855344][T13888] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2660'. [ 604.087651][T13893] process 'syz.2.2661' launched './file0/../file0' with NULL argv: empty string added [ 604.415476][T13896] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2663'. [ 604.800227][T13900] 8021q: adding VLAN 0 to HW filter on device bond1 [ 604.903828][T13900] (null): rxe_set_mtu: Set mtu to 1024 [ 604.909702][T13900] rdma_rxe: rxe_newlink: failed to add bond0 [ 605.356677][ T5818] IPVS: starting estimator thread 0... [ 605.423558][ T5855] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 605.463450][T13909] IPVS: using max 18 ests per chain, 43200 per kthread [ 605.612660][ T5855] usb 3-1: Using ep0 maxpacket: 32 [ 605.623817][ T5855] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 605.647049][ T5855] usb 3-1: config 0 has no interface number 0 [ 605.674874][ T5855] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 605.686065][ T5855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.696201][ T5855] usb 3-1: Product: syz [ 605.699830][T13915] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2670'. [ 605.700398][ T5855] usb 3-1: Manufacturer: syz [ 605.715830][ T5855] usb 3-1: SerialNumber: syz [ 605.725288][ T5855] usb 3-1: config 0 descriptor?? [ 605.750967][ T5855] smsc95xx v2.0.0 [ 606.031705][T13921] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2672'. [ 606.165604][T13923] loop3: detected capacity change from 0 to 16 [ 606.175617][ T5855] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 606.207169][ T5855] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 606.219251][T13923] erofs: (device loop3): mounted with root inode @ nid 36. [ 606.237651][ T5855] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 606.258679][ T5855] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 606.296688][ T5855] usb 3-1: USB disconnect, device number 3 [ 606.503829][T13925] bond1: option mode: unable to set because the bond device is up [ 606.525118][T13925] (null): rxe_set_mtu: Set mtu to 1024 [ 606.530959][T13925] rdma_rxe: rxe_newlink: failed to add bond0 [ 606.647145][T13927] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2675'. [ 606.995244][T13935] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2679'. [ 607.084067][T13937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2678'. [ 607.648108][T13952] 8021q: adding VLAN 0 to HW filter on device bond1 [ 607.682476][T13952] (null): rxe_set_mtu: Set mtu to 1024 [ 607.693678][T13952] rdma_rxe: rxe_newlink: failed to add bond0 [ 607.927626][ T5855] IPVS: starting estimator thread 0... [ 608.033493][T13960] IPVS: using max 16 ests per chain, 38400 per kthread [ 608.585935][T13972] __nla_validate_parse: 1 callbacks suppressed [ 608.585952][T13972] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2691'. [ 608.677651][T13976] loop2: detected capacity change from 0 to 128 [ 608.720666][T13976] MINIX-fs: bad superblock [ 608.843629][T13978] bond1: option mode: unable to set because the bond device is up [ 608.890556][T13980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2695'. [ 608.933093][T13978] (null): rxe_set_mtu: Set mtu to 1024 [ 608.959506][T13978] rdma_rxe: rxe_newlink: failed to add bond0 [ 609.166832][T13982] syzkaller0: entered promiscuous mode [ 609.182632][T13982] syzkaller0: entered allmulticast mode [ 609.686208][T13976] loop2: detected capacity change from 0 to 32768 [ 609.868212][T13976] ialloc: diAlloc returned -28! [ 610.451456][T13999] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2702'. [ 610.482600][T14001] bond1: option mode: unable to set because the bond device is up [ 610.530518][T14003] syzkaller0: entered promiscuous mode [ 610.571081][T14003] syzkaller0: entered allmulticast mode [ 610.630279][T14001] (null): rxe_set_mtu: Set mtu to 1024 [ 610.634001][T14008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2706'. [ 610.652546][T14001] rdma_rxe: rxe_newlink: failed to add bond0 [ 611.372489][T14028] syzkaller0: entered promiscuous mode [ 611.384927][T14028] syzkaller0: entered allmulticast mode [ 611.440490][T14031] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2717'. [ 611.984672][T14043] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2723'. [ 612.174042][T14049] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2726'. [ 612.255564][T14053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2728'. [ 613.444875][T10729] IPVS: starting estimator thread 0... [ 613.574129][T14077] IPVS: using max 18 ests per chain, 43200 per kthread [ 614.430045][T14085] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2736'. [ 614.575240][T14087] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2737'. [ 615.321296][T14103] loop0: detected capacity change from 0 to 128 [ 615.428857][T14103] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 615.481562][T14103] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 615.720955][T14113] loop1: detected capacity change from 0 to 512 [ 615.785148][T13262] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 615.805443][T14113] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 615.852151][T14113] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0102] [ 615.862962][T14113] System zones: 1-12 [ 615.875764][T14113] EXT4-fs error (device loop1): ext4_iget_extra_inode:4732: inode #15: comm syz.1.2746: corrupted in-inode xattr: e_value size too large [ 615.893049][T14113] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.2746: couldn't read orphan inode 15 (err -117) [ 615.908684][T14113] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 615.967403][T14116] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2747'. [ 616.180037][T14121] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2748'. [ 617.161293][T12929] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.664571][T14147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2756'. [ 618.984027][T14152] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2758'. [ 620.167856][T14177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2766'. [ 620.493409][T14185] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2769'. [ 621.586860][T14207] loop1: detected capacity change from 0 to 4096 [ 621.640649][T14207] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 621.716774][T14213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2778'. [ 621.909457][ T27] audit: type=1800 audit(1771372536.859:2): pid=14207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2776" name="file1" dev="loop1" ino=33 res=0 errno=0 [ 623.134156][T14245] netlink: 'syz.0.2784': attribute type 21 has an invalid length. [ 623.954876][T14250] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2787'. [ 623.981374][T14254] loop0: detected capacity change from 0 to 16 [ 623.992002][T14254] erofs: (device loop0): mounted with root inode @ nid 36. [ 624.569430][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.816302][ T5859] IPVS: starting estimator thread 0... [ 625.004562][T14275] IPVS: using max 15 ests per chain, 36000 per kthread [ 625.324295][T14277] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2796'. [ 625.544437][T14282] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2799'. [ 626.103474][T14295] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2803'. [ 626.380162][T14300] loop0: detected capacity change from 0 to 1024 [ 626.607994][ T3517] hfsplus: b-tree write err: -5, ino 4 [ 626.894950][T14310] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2808'. [ 627.711635][T14320] loop3: detected capacity change from 0 to 164 [ 628.029041][T14325] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2815'. [ 628.311114][T14335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2817'. [ 628.434437][T14339] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2820'. [ 630.341349][T14360] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2826'. [ 630.905146][T14362] 9pnet_virtio: no channels available for device syz [ 630.917592][T14362] netlink: set zone limit has 8 unknown bytes [ 631.031578][T14370] loop1: detected capacity change from 0 to 512 [ 631.091520][T14370] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 631.280627][T14370] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #16: comm syz.1.2830: corrupted inode contents [ 631.335965][T14370] EXT4-fs error (device loop1): ext4_dirty_inode:6124: inode #16: comm syz.1.2830: mark_inode_dirty error [ 631.395054][T14370] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #16: comm syz.1.2830: corrupted inode contents [ 631.435533][T14370] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.2830: mark_inode_dirty error [ 631.465082][T14370] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #16: comm syz.1.2830: corrupted inode contents [ 631.500804][T14370] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 631.548641][T14370] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #16: comm syz.1.2830: corrupted inode contents [ 631.586028][T14370] EXT4-fs error (device loop1): ext4_truncate:4294: inode #16: comm syz.1.2830: mark_inode_dirty error [ 631.628303][T14370] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 631.661251][T14370] EXT4-fs (loop1): 1 truncate cleaned up [ 631.675142][ T41] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 631.701566][T14370] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.723917][ T41] EXT4-fs error (device loop1): ext4_release_dquot:6985: comm kworker/u4:2: Failed to release dquot type 1 [ 631.747388][T14370] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 631.982218][T14386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2835'. [ 632.008200][T12929] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.425859][T14390] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2837'. [ 633.247178][T14406] syzkaller0: entered promiscuous mode [ 633.261910][T14406] syzkaller0: entered allmulticast mode [ 633.902370][T14421] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2848'. [ 634.400208][T14432] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2851'. [ 634.448474][T14423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2850'. [ 637.569222][T14466] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2858'. [ 638.009242][T14471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2860'. [ 638.888578][T14485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2864'. [ 639.020438][T14493] loop2: detected capacity change from 0 to 256 [ 639.142751][T14493] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3967cd3a, utbl_chksum : 0xe619d30d) [ 639.278837][ T27] audit: type=1800 audit(1771372554.229:3): pid=14493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2867" name="file1" dev="loop2" ino=1048605 res=0 errno=0 [ 639.318509][T14493] syz.2.2867: attempt to access beyond end of device [ 639.318509][T14493] loop2: rw=524288, sector=440, nr_sectors = 256 limit=256 [ 639.342644][ T27] audit: type=1800 audit(1771372554.229:4): pid=14493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2867" name="file1" dev="loop2" ino=1048605 res=0 errno=0 [ 639.382742][T14493] syz.2.2867: attempt to access beyond end of device [ 639.382742][T14493] loop2: rw=524288, sector=696, nr_sectors = 256 limit=256 [ 639.400001][T14493] syz.2.2867: attempt to access beyond end of device [ 639.400001][T14493] loop2: rw=0, sector=440, nr_sectors = 8 limit=256 [ 639.443952][ T27] audit: type=1800 audit(1771372554.389:5): pid=14500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2867" name="file1" dev="loop2" ino=1048605 res=0 errno=0 [ 639.483919][T14493] syz.2.2867: attempt to access beyond end of device [ 639.483919][T14493] loop2: rw=0, sector=440, nr_sectors = 8 limit=256 [ 639.539600][T14493] syz.2.2867: attempt to access beyond end of device [ 639.539600][T14493] loop2: rw=0, sector=440, nr_sectors = 8 limit=256 [ 639.541189][T14502] syzkaller0: entered promiscuous mode [ 639.573453][T14493] syz.2.2867: attempt to access beyond end of device [ 639.573453][T14493] loop2: rw=0, sector=440, nr_sectors = 8 limit=256 [ 639.586729][T14502] syzkaller0: entered allmulticast mode [ 639.603531][T14493] syz.2.2867: attempt to access beyond end of device [ 639.603531][T14493] loop2: rw=0, sector=440, nr_sectors = 8 limit=256 [ 639.673974][T14493] syz.2.2867: attempt to access beyond end of device [ 639.673974][T14493] loop2: rw=0, sector=440, nr_sectors = 8 limit=256 [ 639.701036][T14504] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2870'. [ 639.710392][T14493] syz.2.2867: attempt to access beyond end of device [ 639.710392][T14493] loop2: rw=0, sector=440, nr_sectors = 8 limit=256 [ 639.740293][T14493] syz.2.2867: attempt to access beyond end of device [ 639.740293][T14493] loop2: rw=0, sector=440, nr_sectors = 8 limit=256 [ 641.715697][T14534] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2879'. [ 641.981442][T14537] syzkaller0: entered promiscuous mode [ 642.000004][T14537] syzkaller0: entered allmulticast mode [ 642.022420][T14539] syzkaller0: entered promiscuous mode [ 642.048568][T14539] syzkaller0: entered allmulticast mode [ 642.352663][T14546] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2884'. [ 644.597850][T14564] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2891'. [ 644.879866][T14568] syzkaller0: entered promiscuous mode [ 644.889671][T14568] syzkaller0: entered allmulticast mode [ 645.136237][T14571] syzkaller0: entered promiscuous mode [ 645.141774][T14571] syzkaller0: entered allmulticast mode [ 645.463576][T14579] syzkaller0: entered promiscuous mode [ 645.469126][T14579] syzkaller0: entered allmulticast mode [ 645.504282][T14581] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2898'. [ 645.621556][T14581] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2898'. [ 645.772306][T14587] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2901'. [ 645.954867][T14593] syzkaller0: entered promiscuous mode [ 645.973894][T14593] syzkaller0: entered allmulticast mode [ 646.263466][ T27] audit: type=1326 audit(1771372561.129:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14588 comm="syz.0.2903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdd979c629 code=0x7ffc0000 [ 646.500132][ T27] audit: type=1326 audit(1771372561.129:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14588 comm="syz.0.2903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdd979c629 code=0x7ffc0000 [ 646.740180][ T27] audit: type=1326 audit(1771372561.139:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14588 comm="syz.0.2903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7efdd979c629 code=0x7ffc0000 [ 646.847652][ T27] audit: type=1326 audit(1771372561.139:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14588 comm="syz.0.2903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdd979c629 code=0x7ffc0000 [ 646.914969][ T27] audit: type=1326 audit(1771372561.139:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14588 comm="syz.0.2903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdd979c629 code=0x7ffc0000 [ 646.959339][ T27] audit: type=1326 audit(1771372561.139:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14588 comm="syz.0.2903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7efdd979c629 code=0x7ffc0000 [ 647.124261][ T27] audit: type=1326 audit(1771372561.139:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14588 comm="syz.0.2903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdd979c629 code=0x7ffc0000 [ 647.167452][ T27] audit: type=1326 audit(1771372561.139:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14588 comm="syz.0.2903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdd979c629 code=0x7ffc0000 [ 647.228245][ T27] audit: type=1326 audit(1771372561.139:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14588 comm="syz.0.2903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7efdd979c629 code=0x7ffc0000 [ 647.368454][ T27] audit: type=1326 audit(1771372561.199:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14588 comm="syz.0.2903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdd979c629 code=0x7ffc0000 [ 647.822197][T14609] syzkaller0: entered promiscuous mode [ 647.850042][T14609] syzkaller0: entered allmulticast mode [ 647.888697][T14617] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2913'. [ 648.072182][T14617] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2913'. [ 648.272158][T14623] siw: device registration error -23 [ 648.947778][T14627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2916'. [ 649.381635][T14633] syzkaller0: entered promiscuous mode [ 649.400984][T14633] syzkaller0: entered allmulticast mode [ 649.432255][T14641] loop1: detected capacity change from 0 to 128 [ 649.456444][T14641] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 649.585078][T14641] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 650.409602][ T3517] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 651.387684][T14655] loop2: detected capacity change from 0 to 1024 [ 651.400570][T14658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2929'. [ 651.412785][T14655] ext4: Unknown parameter 'smackfsdef' [ 651.664753][T10727] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 651.930575][T14665] syzkaller0: entered promiscuous mode [ 652.007716][T14665] syzkaller0: entered allmulticast mode [ 652.102898][T14668] 0: reclassify loop, rule prio 0, protocol 800 [ 652.595865][T14672] gfs2: not a GFS2 filesystem [ 652.633522][T10727] usb 1-1: Using ep0 maxpacket: 16 [ 652.876090][T10727] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.027939][T10727] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.157606][T10727] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 653.168015][T10727] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.186648][T10727] usb 1-1: config 0 descriptor?? [ 653.423167][T14685] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2936'. [ 653.442392][T14683] syzkaller0: entered promiscuous mode [ 653.453507][T14683] syzkaller0: entered allmulticast mode [ 653.864256][T10727] usb 1-1: string descriptor 0 read error: -71 [ 653.912439][T10727] usb 1-1: Max retries (5) exceeded reading string descriptor 200 [ 653.962123][T10727] letsketch: probe of 0003:6161:4D15.0001 failed with error -32 [ 654.104701][T10727] usb 1-1: USB disconnect, device number 2 [ 654.612727][T14691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2938'. [ 655.500930][T14706] loop2: detected capacity change from 0 to 512 [ 655.571280][T14706] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 656.697399][T14714] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2945'. [ 656.946147][T14716] syzkaller0: entered promiscuous mode [ 656.951658][T14716] syzkaller0: entered allmulticast mode [ 657.280009][T14721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2948'. [ 658.585038][T14738] syzkaller0: entered promiscuous mode [ 658.630229][T14738] syzkaller0: entered allmulticast mode [ 658.697223][T14740] syzkaller0: entered promiscuous mode [ 658.706029][T14740] syzkaller0: entered allmulticast mode [ 659.342960][T14749] syzkaller0: entered promiscuous mode [ 659.363697][T14749] syzkaller0: entered allmulticast mode [ 659.420993][T14758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2960'. [ 662.470962][T12647] Bluetooth: hci2: command 0x0406 tx timeout [ 662.860575][T14809] syzkaller0: entered promiscuous mode [ 662.889106][T14809] syzkaller0: entered allmulticast mode [ 663.050288][T14821] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2972'. [ 663.290921][T14828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2974'. [ 663.665636][T14834] tipc: Enabling of bearer rejected, failed to enable media [ 663.698714][T14834] syzkaller0: entered promiscuous mode [ 663.704366][T14834] syzkaller0: entered allmulticast mode [ 664.272785][T14836] syzkaller0: entered promiscuous mode [ 664.292385][T14836] syzkaller0: entered allmulticast mode [ 664.604270][T14848] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2982'. [ 664.666949][T14851] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2983'. [ 664.947015][T14857] syzkaller0: entered promiscuous mode [ 664.952552][T14857] syzkaller0: entered allmulticast mode [ 665.366026][T14873] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2993'. [ 665.927015][T14877] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2994'. [ 666.673862][T14894] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3002'. [ 666.822627][T14899] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3005'. [ 668.795223][T14931] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3015'. [ 668.967583][T14935] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3017'. [ 669.429534][T14944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3022'. [ 671.377766][T14975] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3030'. [ 671.592251][T14981] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3033'. [ 672.674930][T14995] autofs4:pid:14995:autofs_fill_super: called with bogus options [ 672.785608][T12647] Bluetooth: hci3: command 0x0406 tx timeout [ 673.579036][T15003] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3043'. [ 673.976697][T15019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3046'. [ 674.136733][T15026] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3050'. [ 674.140644][T15024] tipc: Enabling of bearer rejected, failed to enable media [ 674.157926][T15024] syzkaller0: entered promiscuous mode [ 674.166727][T15024] syzkaller0: entered allmulticast mode [ 675.216886][T15037] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3055'. [ 675.422622][T15046] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3058'. [ 675.892157][T15058] tipc: Enabling of bearer rejected, failed to enable media [ 675.906173][T15058] syzkaller0: entered promiscuous mode [ 675.911704][T15058] syzkaller0: entered allmulticast mode [ 676.651443][T15069] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3066'. [ 676.843449][T15074] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3068'. [ 677.125673][T15089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3072'. [ 677.209907][T15091] syzkaller0: entered promiscuous mode [ 677.216853][T15091] syzkaller0: entered allmulticast mode [ 677.316167][T15094] syzkaller0: entered promiscuous mode [ 677.321704][T15094] syzkaller0: entered allmulticast mode [ 677.498033][T15096] bond1: option mode: unable to set because the bond device is up [ 677.522087][T15096] bond_slave_0: entered promiscuous mode [ 677.529206][T15096] bond_slave_1: entered promiscuous mode [ 677.536089][T15096] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 677.575521][T15096] bond1: (slave macvlan2): making interface the new active one [ 677.623626][T15099] (null): rxe_set_mtu: Set mtu to 1024 [ 677.633881][T15099] rdma_rxe: rxe_newlink: failed to add bond0 [ 677.639719][T15096] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 677.739072][T15101] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3077'. [ 677.768963][T15103] tipc: Enabling of bearer rejected, failed to enable media [ 677.780152][T15103] syzkaller0: entered promiscuous mode [ 677.786627][T15103] syzkaller0: entered allmulticast mode [ 678.075520][T15112] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3081'. [ 678.342859][T15118] syzkaller0: entered promiscuous mode [ 678.363396][T15118] syzkaller0: entered allmulticast mode [ 678.415673][T15121] syzkaller0: entered promiscuous mode [ 678.423247][T15121] syzkaller0: entered allmulticast mode [ 678.634300][T15131] bond1: option mode: unable to set because the bond device is up [ 678.659779][T15131] bond_slave_0: entered promiscuous mode [ 678.665560][T15131] bond_slave_1: entered promiscuous mode [ 678.672121][T15131] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 678.682077][T15131] bond1: (slave macvlan4): making interface the new active one [ 678.717730][T15131] bond1: (slave macvlan4): Enslaving as an active interface with an up link [ 678.723454][T15133] (null): rxe_set_mtu: Set mtu to 1024 [ 678.741982][T15134] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3088'. [ 678.772317][T15133] rdma_rxe: rxe_newlink: failed to add bond0 [ 679.030857][T15142] tipc: Enabling of bearer rejected, failed to enable media [ 679.061742][T15142] syzkaller0: entered promiscuous mode [ 679.076855][T15142] syzkaller0: entered allmulticast mode [ 679.132748][T15149] __nla_validate_parse: 2 callbacks suppressed [ 679.132765][T15149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3093'. [ 679.321212][T15152] syzkaller0: entered promiscuous mode [ 679.331180][T15152] syzkaller0: entered allmulticast mode [ 679.614733][T15162] syzkaller0: entered promiscuous mode [ 679.622413][T15162] syzkaller0: entered allmulticast mode [ 679.844181][T15167] syzkaller0: entered promiscuous mode [ 679.859688][T15167] syzkaller0: entered allmulticast mode [ 680.053778][T15171] bond1: option mode: unable to set because the bond device is up [ 680.112359][T15171] bond_slave_0: entered promiscuous mode [ 680.118175][T15171] bond_slave_1: entered promiscuous mode [ 680.147096][T15171] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 680.155302][T15173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3103'. [ 680.167918][T15171] bond1: (slave macvlan3): making interface the new active one [ 680.176308][T15173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3103'. [ 680.200809][T15171] bond1: (slave macvlan3): Enslaving as an active interface with an up link [ 680.204840][T15174] (null): rxe_set_mtu: Set mtu to 1024 [ 680.240546][T15174] rdma_rxe: rxe_newlink: failed to add bond0 [ 680.415282][T15181] tipc: Enabling of bearer rejected, failed to enable media [ 680.439928][T15181] syzkaller0: entered promiscuous mode [ 680.463812][T15181] syzkaller0: entered allmulticast mode [ 680.491484][T15183] capability: warning: `syz.3.3109' uses 32-bit capabilities (legacy support in use) [ 680.628917][T15188] syzkaller0: entered promiscuous mode [ 680.639109][T15188] syzkaller0: entered allmulticast mode [ 680.805025][T10727] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 681.083526][T10727] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 681.148087][T10727] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.348172][T10727] usb 4-1: config 0 descriptor?? [ 681.526244][T10727] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 681.682858][T15203] syzkaller0: entered promiscuous mode [ 681.688836][T15203] syzkaller0: entered allmulticast mode [ 681.878026][T15208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3114'. [ 681.891449][T10727] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 681.990451][T15210] bond1: option mode: unable to set because the bond device has slaves [ 682.011797][T15210] bond1: (slave macvlan5): Error -98 calling set_mac_address [ 682.057097][T15214] (null): rxe_set_mtu: Set mtu to 1024 [ 682.072266][T15214] rdma_rxe: rxe_newlink: failed to add bond0 [ 682.294098][T10727] gspca_cpia1: usb_control_msg 02, error -71 [ 682.297016][T15218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3118'. [ 682.314121][T10727] gspca_cpia1: usb_control_msg 05, error -71 [ 682.320179][T10727] cpia1 4-1:0.0: unexpected systemstate: 00 [ 682.337592][T15218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3118'. [ 682.367569][T10727] usb 4-1: USB disconnect, device number 2 [ 682.424714][T15220] tipc: Enabling of bearer rejected, failed to enable media [ 682.439684][T15220] syzkaller0: entered promiscuous mode [ 682.448258][T15220] syzkaller0: entered allmulticast mode [ 682.581746][T15222] syzkaller0: entered promiscuous mode [ 682.603605][T15222] syzkaller0: entered allmulticast mode [ 682.945139][ T5086] Bluetooth: hci1: command 0x0406 tx timeout [ 683.557698][T15232] syzkaller0: entered promiscuous mode [ 683.581846][T15232] syzkaller0: entered allmulticast mode [ 683.748169][T15240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3128'. [ 683.749779][T15237] bond1: option mode: unable to set because the bond device has slaves [ 683.788538][T15237] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 683.832921][T15241] (null): rxe_set_mtu: Set mtu to 1024 [ 683.848992][T15241] rdma_rxe: rxe_newlink: failed to add bond0 [ 684.020646][T15248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3130'. [ 684.113820][T15250] syzkaller0: entered promiscuous mode [ 684.122728][T15250] syzkaller0: entered allmulticast mode [ 685.653304][ T12] unregister_netdevice: waiting for lo to become free. Usage count = 3 [ 685.663209][ T12] ref_tracker: lo@ffff88805f1ca5b8 has 1/2 users at [ 685.663209][ T12] dst_init+0xd9/0x460 [ 685.663209][ T12] dst_alloc+0x12e/0x170 [ 685.663209][ T12] ip_route_output_key_hash_rcu+0x14f0/0x2360 [ 685.663209][ T12] ip_route_output_key_hash+0x1f3/0x330 [ 685.663209][ T12] ip_route_output_flow+0x2a/0x150 [ 685.663209][ T12] sctp_v4_get_dst+0x400/0x1230 [ 685.663209][ T12] sctp_transport_route+0x10b/0x2c0 [ 685.663209][ T12] sctp_ootb_pkt_new+0x28b/0x3c0 [ 685.663209][ T12] sctp_sf_tabort_8_4_8+0x30/0x3e0 [ 685.663209][ T12] sctp_sf_do_5_1B_init+0x48e/0xe30 [ 685.663209][ T12] sctp_do_sm+0x23a/0x5a60 [ 685.663209][ T12] sctp_endpoint_bh_rcv+0x59b/0x7e0 [ 685.663209][ T12] sctp_rcv+0x10dd/0x1770 [ 685.663209][ T12] ip_protocol_deliver_rcu+0x20e/0x3f0 [ 685.663209][ T12] ip_local_deliver_finish+0x2ca/0x510 [ 685.663209][ T12] NF_HOOK+0x32d/0x3b0 [ 685.663209][ T12] [ 685.755185][ T12] ref_tracker: lo@ffff88805f1ca5b8 has 1/2 users at [ 685.755185][ T12] dst_init+0xd9/0x460 [ 685.755185][ T12] dst_alloc+0x12e/0x170 [ 685.755185][ T12] ip_route_output_key_hash_rcu+0x14f0/0x2360 [ 685.755185][ T12] ip_route_output_key_hash+0x1f3/0x330 [ 685.755185][ T12] ip_route_output_flow+0x2a/0x150 [ 685.755185][ T12] sctp_v4_get_dst+0x400/0x1230 [ 685.755185][ T12] sctp_transport_route+0x10b/0x2c0 [ 685.755185][ T12] sctp_assoc_add_peer+0x650/0x1390 [ 685.755185][ T12] sctp_connect_new_asoc+0x323/0x6a0 [ 685.755185][ T12] __sctp_connect+0x5b7/0xd80 [ 685.755185][ T12] sctp_getsockopt_connectx3+0x2f5/0x480 [ 685.755185][ T12] sctp_getsockopt+0x986/0xb60 [ 685.755185][ T12] do_sock_getsockopt+0x379/0x450 [ 685.755185][ T12] __x64_sys_getsockopt+0x1d6/0x280 [ 685.755185][ T12] do_syscall_64+0x55/0xa0 [ 685.755185][ T12] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 685.755185][ T12] [ 686.011715][T15266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3138'. [ 686.019631][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 693.184495][ T5086] Bluetooth: hci0: command 0x0406 tx timeout