last executing test programs: 24m22.628594781s ago: executing program 0 (id=1541): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r0, &(0x7f0000002180)=""/4096, 0x1000) 24m22.553689573s ago: executing program 0 (id=1542): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, 0x0, 0x0) r0 = syz_open_dev$evdev(0x0, 0x2, 0x2002) readv(r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000180)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[], 0x48}}, 0x0) syz_io_uring_setup(0x4ad8, &(0x7f0000000300)={0x0, 0x9824, 0x20, 0xffffffff, 0x145}, &(0x7f0000000100), 0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x8, r2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socket$inet6_tcp(0xa, 0x1, 0x0) syz_extract_tcp_res(0x0, 0x8, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0x4e, 0x0, 0x0) 24m21.719508993s ago: executing program 0 (id=1549): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000c00)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 24m21.109164408s ago: executing program 0 (id=1557): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', r5, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xa) 24m20.248772459s ago: executing program 0 (id=1563): r0 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_DESTROY(r0, 0xc0086442, &(0x7f00000000c0)) 24m19.982279365s ago: executing program 0 (id=1567): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000100)=0x5, 0x8) sendmmsg$inet(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000001c0)="07a2b0cebf5e75786f6d0e3c29d0d5432c3fb21e12bbca742e59b53c03da203a64bc722b81b93b9f4b4bab1b4cf8e129781e4e9a76ebd03f2a30066def57baf4452f6bdd5587534615259a657fb188ab8b8bdc928eea1a05c16e0ee35092c47e0aabfb1026c625b66205221dd29c1a177b1ce1e6548d0d8d88b353af1fd0976c4a", 0x81}], 0x1}}], 0x1, 0x4008004) 24m19.679291953s ago: executing program 32 (id=1567): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000100)=0x5, 0x8) sendmmsg$inet(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000001c0)="07a2b0cebf5e75786f6d0e3c29d0d5432c3fb21e12bbca742e59b53c03da203a64bc722b81b93b9f4b4bab1b4cf8e129781e4e9a76ebd03f2a30066def57baf4452f6bdd5587534615259a657fb188ab8b8bdc928eea1a05c16e0ee35092c47e0aabfb1026c625b66205221dd29c1a177b1ce1e6548d0d8d88b353af1fd0976c4a", 0x81}], 0x1}}], 0x1, 0x4008004) 4.11283598s ago: executing program 2 (id=11798): r0 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="a00000001000010428bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="08000000000001007000128009000100766c616e0000000060000280060001000200000006000100020000004c0004800c00010003000000800000000c00010002000000090000000c00010012000000070000000c000100fbffffff040000000c00010009000000090000000c000100008000000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0xa0}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 4.030081181s ago: executing program 2 (id=11799): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='illinois', 0x8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socket$kcm(0x10, 0x2, 0x4) 3.209592461s ago: executing program 2 (id=11800): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x12) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x12, 0x6, 0x4, 0x4, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580)=0x2, &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000200)="02"}, 0x20) 3.170572912s ago: executing program 2 (id=11801): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='illinois', 0x8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000fe7f032171000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46df12f2137e00000000000000000000000000000001000000004229be437bd795feafd68063c8eb82ee80ba9625", 0x89}], 0x1}, 0x4000080) 2.250049165s ago: executing program 2 (id=11806): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x17) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8881}, 0x0) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) unshare(0x8040480) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r4, 0x0, 0x20, 0x0, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="180200000000000000000000a8ea0000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200"], 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c9ab2c90a000000000101016147e4b9fc4c96dca336dfbf00000000000000000200000204001640240001801400018c08000100e000000108000200e00000010c001e"], 0x3c}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="0a012a20", @ANYRES16=0x0, @ANYBLOB="e60f000901008b00005d33cdc96be58bd5b3274e000f", @ANYRES32, @ANYBLOB="0c001a"], 0x2c}}, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xd, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5b", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={&(0x7f0000000280), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@newtclass={0x6c, 0x28, 0x4, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xa}, {0x10, 0xc}, {0x1, 0xfffa}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x31}}, @TCA_RATE={0x6, 0x5, {0x7, 0x2}}, @tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x7}}, @tclass_kind_options=@c_cake={0x9}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44000001}, 0xcc4d439b020545eb) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}}, 0x90) 1.950112172s ago: executing program 1 (id=11808): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="a00000001000010428bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="08000000000001007000128009000100766c616e0000000060000280060001000200000006000100020000004c0004800c00010003000000800000000c00010002000000090000000c00010012000000070000000c000100fbffffff040000000c00010009000000090000000c000100008000000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0xa0}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 1.928967013s ago: executing program 1 (id=11809): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socket$kcm(0x10, 0x2, 0x4) 1.852694655s ago: executing program 2 (id=11811): socket(0x11, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000019000100040000000000000080200009000400050000000008000300038e"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f0000000280)=@default_ap_ssid, 0x6, 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000000c0)=0x100001, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) r5 = socket(0x1e, 0x4, 0x0) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES8=r2, @ANYRES16=r5], 0x14) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2, 0xa, 0xb, 0x2, 0x2, 0x0, 0x70bd25, 0x25dfdbfc}, 0x10}}, 0x20008004) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000740)={'sit0\x00', &(0x7f0000000680)={'gretap0\x00', 0x0, 0x8, 0x0, 0x7fff, 0x1, {{0x17, 0x4, 0x2, 0x15, 0x5c, 0x65, 0x0, 0x3, 0x29, 0x0, @private=0xa010100, @remote, {[@noop, @cipso={0x86, 0x1b, 0x2, [{0x6, 0x12, "b68280ada5f469068490ea27b0b505a5"}, {0x1, 0x3, "b3"}]}, @lsrr={0x83, 0xf, 0x6, [@empty, @loopback, @empty]}, @timestamp_prespec={0x44, 0x1c, 0x54, 0x3, 0x7, [{@broadcast, 0x95}, {@empty, 0x7f8}, {@loopback, 0x2}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0xa, 0xf, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x49}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xf}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @alu={0x7, 0x1, 0x7, 0xb, 0x6, 0x40, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @call={0x85, 0x0, 0x0, 0x88}, @alu={0x4, 0x1, 0x8, 0x4, 0xa, 0xfffffffffffffff4, 0x10}]}, &(0x7f0000000580)='syzkaller\x00', 0xc0, 0x81, &(0x7f00000005c0)=""/129, 0x41000, 0x22, '\x00', r10, @fallback=0x14, r8, 0x8, &(0x7f0000000780)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x1, 0x8, 0x8, 0x5}, 0x10, 0xffffffffffffffff, r8}, 0x94) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r9, &(0x7f0000000040)=ANY=[], 0x6) 1.567602071s ago: executing program 4 (id=11814): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0xd4, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0x0, 0xffff}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0xa4, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4, 0x21}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x98, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x1c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x18cc}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7fff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x24, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xf71}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x6e}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x80}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x54, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xfc}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x81}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x25}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x10}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 1.414090135s ago: executing program 3 (id=11816): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9380, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x80000001}, 0x0, 0x0) close(0x3) 1.407521095s ago: executing program 4 (id=11817): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="a00000001000010428bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="08000000000001007000128009000100766c616e0000000060000280060001000200000006000100020000004c0004800c00010003000000800000000c00010002000000090000000c00010012000000070000000c000100fbffffff040000000c00010009000000090000000c000100008000000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0xa0}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 1.372209676s ago: executing program 4 (id=11818): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x7, 0xfff, 0xa0000000000}) sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x300, 0x80000001, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff2}, {0x0, 0xffff}, {0xffe0, 0xffe0}}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x15, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7f}, [@jmp={0x5, 0x0, 0x8, 0x6, 0x0, 0xfffffffffffffff0, 0x10}, @map_fd={0x18, 0x4}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x84}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @map_val={0x18, 0x6}]}, &(0x7f0000000340)='GPL\x00', 0x8, 0x12, &(0x7f0000000380)=""/18, 0x40f00, 0x22, '\x00', r6, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x2, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000540)=[{0x1, 0x1, 0xc, 0xb}, {0x3, 0x4, 0xf, 0x9}, {0x1, 0x3, 0x6}, {0x0, 0x1, 0x5, 0x4}, {0x3, 0x5, 0xc, 0x7}, {0x1, 0x3, 0x2}, {0x4, 0x2, 0x9, 0x3}, {0x2, 0x5, 0x4, 0x1}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x12, &(0x7f0000000440)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x3}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc16}, @ringbuf_query, @map_idx={0x18, 0x9, 0x5, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @map_idx, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff9}], &(0x7f0000000540)='syzkaller\x00', 0x1, 0xf3, &(0x7f0000000640)=""/243, 0x40f00, 0x8, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x2, 0x0, 0x7, 0x31a}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000880)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x10001}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) 1.171745651s ago: executing program 4 (id=11819): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6c69f68dc1cf3e78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000073"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.084040743s ago: executing program 4 (id=11820): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000480)={@ifindex, 0xffffffffffffffff, 0x2d, 0x4, r0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x5, 0x7, 0x4}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x20000050) 1.082845223s ago: executing program 4 (id=11821): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="414601", @ANYRES32=r4], 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000015c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x8000) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) 1.031234674s ago: executing program 1 (id=11822): socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x18000000000002a0, 0xfffffffffffffdc3, 0x0, &(0x7f0000000780)="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", 0x0, 0xfe, 0x60006000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) socket$packet(0x11, 0x2, 0x300) read$alg(0xffffffffffffffff, &(0x7f00000003c0)=""/109, 0x6d) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280), &(0x7f0000000340)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f0000000480)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$F2FS_IOC_SEC_TRIM_FILE(r4, 0x4018f514, &(0x7f0000000240)={0x4, 0x8001, 0x2}) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={0x0}, 0x18) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 970.037306ms ago: executing program 1 (id=11823): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/245, 0xf5}], 0x1, &(0x7f0000000640)=""/16, 0x10}, 0x3}], 0x1, 0x23, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 581.107595ms ago: executing program 3 (id=11824): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='illinois', 0x8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000fe7f032171000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46df12f2137e00000000000000000000000000000001000000004229be437bd795feafd68063c8eb82ee80ba9625", 0x89}], 0x1}, 0x4000080) 500.831207ms ago: executing program 3 (id=11825): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0xd4, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0x0, 0xffff}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0xa4, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4, 0x21}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x98, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x1c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x18cc}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7fff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x24, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xf71}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x6e}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x80}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x54, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xfc}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x81}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x25}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x10}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 459.270578ms ago: executing program 3 (id=11826): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="a00000001000010428bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="08000000000001007000128009000100766c616e0000000060000280060001000200000006000100020000004c0004800c00010003000000800000000c00010002000000090000000c00010012000000070000000c000100fbffffff040000000c00010009000000090000000c000100008000000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0xa0}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 420.499639ms ago: executing program 3 (id=11827): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x12) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x12, 0x6, 0x4, 0x4, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r3, &(0x7f0000000200)="02"}, 0x20) 342.050991ms ago: executing program 3 (id=11828): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x3, 0x6, 0x1, 0x8, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r9, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 39.935528ms ago: executing program 1 (id=11829): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x3) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000001140), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000001100), 0x9) 0s ago: executing program 1 (id=11830): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) kernel console output (not intermixed with test programs): _slave_1 [ 1428.355734][ T858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1428.375880][ T858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1428.399698][ T858] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.415196][ T858] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.428339][ T858] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.437791][ T858] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.630564][ T1015] syzkaller0: entered promiscuous mode [ 1428.647014][ T1015] syzkaller0: entered allmulticast mode [ 1429.827898][ T1045] syzkaller0: entered promiscuous mode [ 1429.833831][ T1045] syzkaller0: entered allmulticast mode [ 1429.845555][ T1045] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1429.892441][ T1046] Bluetooth: MGMT ver 1.22 [ 1430.221580][ T5776] Bluetooth: hci1: command tx timeout [ 1430.959545][ T1002] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1431.033264][ T3476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1431.041135][ T3476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1431.128493][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1431.136509][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1432.302117][ T5776] Bluetooth: hci1: command tx timeout [ 1432.502225][ T1120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9321'. [ 1432.511685][ T1120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9321'. [ 1432.522061][ T1120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9321'. [ 1432.531140][ T1120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9321'. [ 1432.579053][ T1122] netlink: 'syz.2.9322': attribute type 1 has an invalid length. [ 1432.603275][ T1122] bond6: entered promiscuous mode [ 1432.608558][ T1122] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1434.402385][ T2946] hsr_slave_0: left promiscuous mode [ 1434.408207][ T2946] hsr_slave_1: left promiscuous mode [ 1434.415151][ T2946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1434.427888][ T2946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1434.435880][ T2946] bridge_slave_1: left allmulticast mode [ 1434.441759][ T2946] bridge_slave_1: left promiscuous mode [ 1434.447776][ T2946] bridge0: port 2(bridge_slave_1) entered disabled state [ 1434.456655][ T2946] bridge_slave_0: left allmulticast mode [ 1434.463462][ T2946] bridge_slave_0: left promiscuous mode [ 1434.469222][ T2946] bridge0: port 1(bridge_slave_0) entered disabled state [ 1434.565526][ T1077] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1435.597051][ T2946] team0 (unregistering): Port device team_slave_1 removed [ 1435.662370][ T2946] team0 (unregistering): Port device team_slave_0 removed [ 1435.754676][ T2946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1435.811544][ T2946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1436.228060][ T2946] bond0 (unregistering): Released all slaves [ 1436.337363][ T1148] netlink: 'syz.4.9331': attribute type 1 has an invalid length. [ 1436.345680][ T1148] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1436.373043][ T1155] tipc: Enabling of bearer rejected, failed to enable media [ 1436.844178][ T2946] IPVS: stop unused estimator thread 0... [ 1436.961473][ T1204] netlink: 'syz.3.9343': attribute type 1 has an invalid length. [ 1437.593375][ T1235] tipc: Started in network mode [ 1437.598422][ T1235] tipc: Node identity fe95f8055515, cluster identity 4711 [ 1437.625573][ T1235] tipc: Enabled bearer , priority 0 [ 1437.649708][ T1237] syzkaller0: entered promiscuous mode [ 1437.661470][ T1237] syzkaller0: entered allmulticast mode [ 1437.692769][ T1235] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1438.026972][ T1239] tipc: Resetting bearer [ 1438.086350][ T1234] tipc: Resetting bearer [ 1438.132409][ T1234] tipc: Disabling bearer [ 1438.187802][ T1246] netlink: 'syz.2.9355': attribute type 1 has an invalid length. [ 1438.295771][ T1246] bond7: entered promiscuous mode [ 1438.301032][ T1246] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1439.300136][ T1297] netlink: 'syz.3.9370': attribute type 1 has an invalid length. [ 1439.750825][ T1317] netlink: 'syz.1.9376': attribute type 16 has an invalid length. [ 1439.758944][ T1317] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.9376'. [ 1440.835291][ T1351] netlink: 'syz.4.9387': attribute type 16 has an invalid length. [ 1440.883584][ T1351] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.9387'. [ 1441.941008][ T1398] netlink: 'syz.4.9404': attribute type 16 has an invalid length. [ 1442.010547][ T1398] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.9404'. [ 1443.080315][ T1443] netlink: 'syz.3.9419': attribute type 16 has an invalid length. [ 1443.151968][ T1443] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.9419'. [ 1443.949180][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1443.969020][T21727] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1443.985328][T21727] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1443.994981][T21727] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1444.012068][T21727] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1444.020286][T21727] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1444.030956][T21727] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1444.172797][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1444.346733][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1444.455967][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1444.479509][ T1477] netlink: 'syz.1.9432': attribute type 16 has an invalid length. [ 1444.514512][ T1477] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.9432'. [ 1444.662988][ T1458] chnl_net:caif_netlink_parms(): no params data found [ 1444.946882][ T12] tipc: Left network mode [ 1444.953508][ T1458] bridge0: port 1(bridge_slave_0) entered blocking state [ 1444.992019][ T1458] bridge0: port 1(bridge_slave_0) entered disabled state [ 1444.999304][ T1458] bridge_slave_0: entered allmulticast mode [ 1445.033689][ T1458] bridge_slave_0: entered promiscuous mode [ 1445.059755][ T1458] bridge0: port 2(bridge_slave_1) entered blocking state [ 1445.076007][ T1458] bridge0: port 2(bridge_slave_1) entered disabled state [ 1445.084528][ T1458] bridge_slave_1: entered allmulticast mode [ 1445.101573][ T1458] bridge_slave_1: entered promiscuous mode [ 1445.326927][ T12] bond2: (slave ip6gre1): Releasing backup interface [ 1445.349995][ T1511] netlink: 'syz.1.9441': attribute type 16 has an invalid length. [ 1445.359160][ T12] ip6gre1 (unregistering): left promiscuous mode [ 1445.401937][ T1511] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.9441'. [ 1445.436993][ T12] bond2: Destroying bond [ 1445.728272][ T12] bond2 (unregistering): Released all slaves [ 1445.830882][ T1458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1445.848283][ T1458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1445.989210][ T1458] team0: Port device team_slave_0 added [ 1446.014072][ T1458] team0: Port device team_slave_1 added [ 1446.072480][ T5776] Bluetooth: hci0: command tx timeout [ 1446.130161][ T1458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1446.137197][ T1458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1446.164596][ T1458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1446.180714][ T1458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1446.191118][ T1458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1446.217752][ T1458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1446.302534][ T1458] hsr_slave_0: entered promiscuous mode [ 1446.310018][ T1458] hsr_slave_1: entered promiscuous mode [ 1446.318639][ T1458] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1446.327768][ T1458] Cannot create hsr debugfs directory [ 1446.764904][ T1552] netlink: 'syz.3.9449': attribute type 16 has an invalid length. [ 1446.812523][ T1552] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.9449'. [ 1447.692398][ T1580] syzkaller1: entered promiscuous mode [ 1447.697912][ T1580] syzkaller1: entered allmulticast mode [ 1447.765174][ T12] hsr_slave_0: left promiscuous mode [ 1448.021553][ T12] hsr_slave_1: left promiscuous mode [ 1448.029914][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1448.047900][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1448.070028][ T12] bridge_slave_1: left allmulticast mode [ 1448.081336][ T12] bridge_slave_1: left promiscuous mode [ 1448.087181][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1448.108025][ T12] bridge_slave_0: left allmulticast mode [ 1448.114145][ T12] bridge_slave_0: left promiscuous mode [ 1448.120062][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.141704][ T5776] Bluetooth: hci0: command tx timeout [ 1448.359323][ T1599] netlink: 'syz.1.9459': attribute type 16 has an invalid length. [ 1448.390675][ T1599] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.9459'. [ 1448.499945][ T12] bond7 (unregistering): Released all slaves [ 1448.795523][ T12] bond6 (unregistering): Released all slaves [ 1448.938937][ T12] bond5 (unregistering): Released all slaves [ 1449.089616][ T12] bond4 (unregistering): Released all slaves [ 1449.232637][ T12] bond3 (unregistering): Released all slaves [ 1449.253355][ T12] bond1 (unregistering): Released all slaves [ 1449.796736][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1449.850972][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1449.898498][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1449.963608][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1450.234274][ T5776] Bluetooth: hci0: command tx timeout [ 1450.346628][ T12] bond0 (unregistering): Released all slaves [ 1450.684864][ T1458] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1450.756341][ T1458] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1450.813641][ T1458] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1450.868327][ T1458] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1451.088119][ T12] IPVS: stop unused estimator thread 0... [ 1451.210989][ T1458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1451.228730][ T1633] syzkaller0: entered promiscuous mode [ 1451.242930][ T1633] syzkaller0: entered allmulticast mode [ 1451.304048][ T1458] 8021q: adding VLAN 0 to HW filter on device team0 [ 1451.331804][ T1637] syzkaller1: entered promiscuous mode [ 1451.337324][ T1637] syzkaller1: entered allmulticast mode [ 1451.429790][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 1451.436990][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1451.483881][ T3476] bridge0: port 2(bridge_slave_1) entered blocking state [ 1451.491093][ T3476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1452.188805][ T1458] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1452.301734][ T5776] Bluetooth: hci0: command tx timeout [ 1452.322028][ T1673] syzkaller0: entered promiscuous mode [ 1452.327661][ T1673] syzkaller0: entered allmulticast mode [ 1452.628759][ T1683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9483'. [ 1452.659805][ T1683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9483'. [ 1452.685464][ T1683] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1452.694441][ T1683] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1452.703623][ T1683] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1452.712602][ T1683] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1452.771567][ T1683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9483'. [ 1452.790589][ T1683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9483'. [ 1452.828519][ T1694] syzkaller1: entered promiscuous mode [ 1452.836649][ T1694] syzkaller1: entered allmulticast mode [ 1452.856206][ T1458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1452.966645][ T1458] veth0_vlan: entered promiscuous mode [ 1453.035311][ T1458] veth1_vlan: entered promiscuous mode [ 1453.130931][ T1458] veth0_macvtap: entered promiscuous mode [ 1453.167016][ T1458] veth1_macvtap: entered promiscuous mode [ 1453.207694][ T1458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1453.211393][ T1707] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9490'. [ 1453.248880][ T1458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1453.287173][ T1458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1453.308458][ T1458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1453.328183][ T1458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1453.368954][ T1713] tipc: Started in network mode [ 1453.374066][ T1713] tipc: Node identity e6278fb187b6, cluster identity 4711 [ 1453.383860][ T1713] tipc: Enabled bearer , priority 0 [ 1453.395284][ T1458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1453.426067][ T1458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1453.453204][ T1458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1453.474712][ T1458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1453.502621][ T1458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1453.542948][ T1710] syzkaller0: entered promiscuous mode [ 1453.548963][ T1710] syzkaller0: entered allmulticast mode [ 1453.562884][ T1711] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1453.663698][ T1710] tipc: Resetting bearer [ 1453.675470][ T1458] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.690574][ T1458] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.701175][ T1458] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.713416][ T1458] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.726237][ T1709] tipc: Resetting bearer [ 1453.785345][ T1709] tipc: Disabling bearer [ 1453.996266][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1454.021774][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1454.108243][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1454.131484][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1454.180361][ T1736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9496'. [ 1454.199015][ T1736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9496'. [ 1454.231933][ T1736] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1454.241358][ T1736] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1454.250320][ T1736] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1454.259172][ T1736] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1454.293564][ T1736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9496'. [ 1454.303465][ T1736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9496'. [ 1454.410316][ T1746] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9499'. [ 1454.558428][ T1749] syzkaller1: entered promiscuous mode [ 1454.601329][ T1749] syzkaller1: entered allmulticast mode [ 1456.083623][ T1817] tipc: Enabled bearer , priority 0 [ 1456.098109][ T1817] syzkaller0: entered promiscuous mode [ 1456.104261][ T1817] syzkaller0: entered allmulticast mode [ 1456.114183][ T1817] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1456.196974][ T1816] tipc: Resetting bearer [ 1456.244948][ T1816] tipc: Disabling bearer [ 1456.502670][ T1824] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1456.511794][ T1824] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1456.520486][ T1824] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1456.529808][ T1824] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1456.923889][ T1846] tipc: Started in network mode [ 1456.942010][ T1846] tipc: Node identity 9e4e4d8449e6, cluster identity 4711 [ 1456.949437][ T1846] tipc: Enabled bearer , priority 0 [ 1456.985026][ T1846] syzkaller0: entered promiscuous mode [ 1456.990553][ T1846] syzkaller0: entered allmulticast mode [ 1457.012131][ T1846] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1457.075821][ T1844] tipc: Resetting bearer [ 1457.136772][ T1844] tipc: Disabling bearer [ 1457.854027][ T1877] __nla_validate_parse: 11 callbacks suppressed [ 1457.854044][ T1877] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9541'. [ 1458.057026][ T1885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9545'. [ 1458.082783][ T1885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9545'. [ 1458.104944][ T1885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9545'. [ 1458.125020][ T1885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9545'. [ 1458.438333][ T1902] tipc: Enabled bearer , priority 0 [ 1458.463705][ T1902] syzkaller0: entered promiscuous mode [ 1458.491347][ T1902] syzkaller0: entered allmulticast mode [ 1458.516867][ T1902] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1459.001704][ T1901] tipc: Resetting bearer [ 1459.057680][ T1901] tipc: Disabling bearer [ 1459.219773][ T1930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9558'. [ 1459.247295][ T1930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9558'. [ 1459.280430][ T1930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9558'. [ 1459.295321][ T1930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9558'. [ 1459.986195][ T1961] syzkaller0: entered promiscuous mode [ 1459.994950][ T1961] syzkaller0: entered allmulticast mode [ 1460.150943][ T1967] syzkaller0: entered promiscuous mode [ 1460.171649][ T1967] syzkaller0: entered allmulticast mode [ 1460.739294][ T1992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9584'. [ 1462.065720][ T2034] bond2 (unregistering): Released all slaves [ 1462.168712][ T2043] syz.4.9601 (2043) used obsolete PPPIOCDETACH ioctl [ 1462.187185][ T2045] netlink: 'syz.2.9605': attribute type 1 has an invalid length. [ 1462.196810][ T2041] syzkaller0: entered promiscuous mode [ 1462.208128][ T2041] syzkaller0: entered allmulticast mode [ 1462.216143][ T2040] tipc: Enabled bearer , priority 0 [ 1462.332272][ T2040] syzkaller0: entered promiscuous mode [ 1462.337900][ T2040] syzkaller0: entered allmulticast mode [ 1462.369758][ T2042] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1462.436115][ T2047] tipc: Resetting bearer [ 1462.478846][ T2038] tipc: Resetting bearer [ 1462.518870][ T2038] tipc: Disabling bearer [ 1463.112801][ T2073] netlink: 'syz.2.9614': attribute type 16 has an invalid length. [ 1463.180418][ T2073] __nla_validate_parse: 6 callbacks suppressed [ 1463.180434][ T2073] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.9614'. [ 1463.688552][ T2064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9611'. [ 1463.824476][ T2078] syzkaller0: entered promiscuous mode [ 1463.830011][ T2078] syzkaller0: entered allmulticast mode [ 1463.852939][ T2080] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9616'. [ 1464.450085][ T2100] tipc: Enabled bearer , priority 0 [ 1464.552458][ T2101] syzkaller0: entered promiscuous mode [ 1464.557998][ T2101] syzkaller0: entered allmulticast mode [ 1464.593300][ T2100] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1464.650201][ T2100] tipc: Resetting bearer [ 1464.691596][ T2098] tipc: Resetting bearer [ 1464.775155][ T2098] tipc: Disabling bearer [ 1465.166302][ T2106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9625'. [ 1465.184449][ T2114] syzkaller0: entered promiscuous mode [ 1465.194901][ T2114] syzkaller0: entered allmulticast mode [ 1465.468590][ T2123] netlink: 'syz.2.9633': attribute type 1 has an invalid length. [ 1465.503136][ T2123] bond1: entered promiscuous mode [ 1465.508675][ T2123] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1465.574281][ T2123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9633'. [ 1465.657769][ T2127] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1465.665097][ T2127] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1465.675811][ T2127] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1465.688996][ T2127] bond1: (slave ip6gre1): making interface the new active one [ 1465.711513][ T2127] ip6gre1: entered promiscuous mode [ 1465.733402][ T2127] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 1466.173515][ T2137] syzkaller1: entered promiscuous mode [ 1466.207676][ T2137] syzkaller1: entered allmulticast mode [ 1466.310916][ T2149] syzkaller0: entered promiscuous mode [ 1466.318583][ T2149] syzkaller0: entered allmulticast mode [ 1466.334749][ T2152] syzkaller0: entered promiscuous mode [ 1466.346363][ T2152] syzkaller0: entered allmulticast mode [ 1466.725299][ T2154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9642'. [ 1466.784921][ T2162] tipc: Enabled bearer , priority 0 [ 1466.802716][ T2162] syzkaller0: entered promiscuous mode [ 1466.808243][ T2162] syzkaller0: entered allmulticast mode [ 1466.852043][ T2162] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1466.958338][ T2162] tipc: Resetting bearer [ 1466.997421][ T2161] tipc: Resetting bearer [ 1467.063600][ T2161] tipc: Disabling bearer [ 1467.350936][ T2179] syzkaller0: entered promiscuous mode [ 1467.368096][ T2179] syzkaller0: entered allmulticast mode [ 1467.455893][ T2178] syzkaller1: entered promiscuous mode [ 1467.465418][ T2178] syzkaller1: entered allmulticast mode [ 1467.503398][ T2181] syzkaller0: entered promiscuous mode [ 1467.509387][ T2181] syzkaller0: entered allmulticast mode [ 1468.310095][ T2184] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1468.332384][ T2201] netlink: 'syz.1.9662': attribute type 1 has an invalid length. [ 1468.358934][ T2189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9657'. [ 1468.439481][ T2201] bond3: entered promiscuous mode [ 1468.450740][ T2201] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1468.721041][ T2217] syzkaller1: entered promiscuous mode [ 1468.731572][ T2217] syzkaller1: entered allmulticast mode [ 1468.746116][ T2221] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9668'. [ 1468.759680][ T2221] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9668'. [ 1469.237418][ T2229] syzkaller0: entered promiscuous mode [ 1469.251339][ T2229] syzkaller0: entered allmulticast mode [ 1469.709630][ T2241] netlink: 148 bytes leftover after parsing attributes in process `syz.3.9676'. [ 1469.731363][ T2241] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1469.777954][ T2243] syzkaller0: entered promiscuous mode [ 1469.796087][ T2243] syzkaller0: entered allmulticast mode [ 1469.934397][ T2247] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9678'. [ 1469.951708][ T2247] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9678'. [ 1470.142466][ T2255] syzkaller0: entered promiscuous mode [ 1470.148143][ T2255] syzkaller0: entered allmulticast mode [ 1470.594530][ T2271] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9689'. [ 1470.669831][ T2271] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9689'. [ 1470.721213][ T2269] syzkaller0: entered promiscuous mode [ 1470.726917][ T2269] syzkaller0: entered allmulticast mode [ 1470.925940][ T2277] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9691'. [ 1471.061465][ T2281] netlink: 'syz.1.9692': attribute type 1 has an invalid length. [ 1471.099916][ T2281] bond4: entered promiscuous mode [ 1471.109415][ T2281] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1471.296526][ T2286] syzkaller0: entered promiscuous mode [ 1471.309006][ T2286] syzkaller0: entered allmulticast mode [ 1471.464036][ T2296] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9699'. [ 1471.533716][ T2300] syzkaller0: entered promiscuous mode [ 1471.539836][ T2300] syzkaller0: entered allmulticast mode [ 1472.769068][ T2337] syzkaller0: entered promiscuous mode [ 1472.778602][ T2337] syzkaller0: entered allmulticast mode [ 1472.850794][ T2341] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1473.353345][ T2360] tipc: Started in network mode [ 1473.358258][ T2360] tipc: Node identity b225ce689273, cluster identity 4711 [ 1473.366357][ T2360] tipc: Enabled bearer , priority 0 [ 1473.379744][ T2360] syzkaller0: entered promiscuous mode [ 1473.386798][ T2360] syzkaller0: entered allmulticast mode [ 1473.405722][ T2359] tipc: Resetting bearer [ 1473.447887][ T2333] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1473.522095][ T2359] tipc: Disabling bearer [ 1473.917760][ T2369] syzkaller0: entered promiscuous mode [ 1473.935581][ T2369] syzkaller0: entered allmulticast mode [ 1474.049744][ T2377] netlink: 'syz.3.9730': attribute type 16 has an invalid length. [ 1474.078346][ T2377] __nla_validate_parse: 1 callbacks suppressed [ 1474.078362][ T2377] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.9730'. [ 1474.652120][ T2402] netlink: 'syz.2.9739': attribute type 1 has an invalid length. [ 1474.740859][ T2402] bond2: entered promiscuous mode [ 1474.747152][ T2402] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1474.913000][ T3476] bond1: (slave ip6gre1): Releasing backup interface [ 1474.922597][ T3476] ip6gre1 (unregistering): left promiscuous mode [ 1474.930862][ T3476] bond1: Destroying bond [ 1475.150321][ T3476] bond1 (unregistering): Released all slaves [ 1475.512340][ T2418] syzkaller0: entered promiscuous mode [ 1475.517896][ T2418] syzkaller0: entered allmulticast mode [ 1475.925128][ T2432] netlink: 'syz.3.9746': attribute type 16 has an invalid length. [ 1476.021327][ T2432] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.9746'. [ 1476.135594][ T2440] netlink: 'syz.2.9749': attribute type 1 has an invalid length. [ 1476.209889][ T2440] bond3: entered promiscuous mode [ 1476.225759][ T2440] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1476.581519][ T2448] tipc: Enabling of bearer rejected, failed to enable media [ 1476.790742][T21727] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1476.805966][T21727] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1476.816979][T21727] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1476.833547][T21727] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1476.855756][T21727] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1476.872505][T21727] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1476.975856][ T2448] syzkaller0: entered promiscuous mode [ 1476.985167][ T2448] syzkaller0: entered allmulticast mode [ 1477.056843][ T3476] hsr_slave_0: left promiscuous mode [ 1477.093737][ T3476] hsr_slave_1: left promiscuous mode [ 1477.108445][ T3476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1477.136429][ T3476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1477.145875][ T3476] bridge_slave_1: left allmulticast mode [ 1477.151898][ T3476] bridge_slave_1: left promiscuous mode [ 1477.157774][ T3476] bridge0: port 2(bridge_slave_1) entered disabled state [ 1477.177224][ T3476] bridge_slave_0: left allmulticast mode [ 1477.186741][ T3476] bridge_slave_0: left promiscuous mode [ 1477.193802][ T3476] bridge0: port 1(bridge_slave_0) entered disabled state [ 1477.497224][ T3476] bond5 (unregistering): Released all slaves [ 1477.854776][ T3476] bond4 (unregistering): Released all slaves [ 1478.022735][ T3476] bond3 (unregistering): Released all slaves [ 1478.188517][ T3476] bond2 (unregistering): Released all slaves [ 1478.882991][ T3476] team0 (unregistering): Port device team_slave_1 removed [ 1478.938391][ T3476] team0 (unregistering): Port device team_slave_0 removed [ 1478.951377][T21727] Bluetooth: hci2: command tx timeout [ 1478.999129][ T3476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1479.051122][ T3476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1479.465204][ T3476] bond0 (unregistering): Released all slaves [ 1479.582523][ T2473] syzkaller0: entered promiscuous mode [ 1479.588176][ T2473] syzkaller0: entered allmulticast mode [ 1479.730437][ T2511] netlink: 'syz.3.9758': attribute type 1 has an invalid length. [ 1479.790863][ T2511] bond1: entered promiscuous mode [ 1479.840957][ T2511] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1479.963825][ T2523] netlink: 'syz.2.9759': attribute type 16 has an invalid length. [ 1480.048289][ T2523] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.9759'. [ 1480.172000][ T3476] IPVS: stop unused estimator thread 0... [ 1480.333080][ T2452] chnl_net:caif_netlink_parms(): no params data found [ 1480.795695][ T2548] syzkaller0: entered promiscuous mode [ 1480.802494][ T2548] syzkaller0: entered allmulticast mode [ 1480.821153][ T2452] bridge0: port 1(bridge_slave_0) entered blocking state [ 1480.841465][ T2452] bridge0: port 1(bridge_slave_0) entered disabled state [ 1480.848942][ T2452] bridge_slave_0: entered allmulticast mode [ 1480.856634][ T2452] bridge_slave_0: entered promiscuous mode [ 1480.989051][ T2452] bridge0: port 2(bridge_slave_1) entered blocking state [ 1481.009116][ T2452] bridge0: port 2(bridge_slave_1) entered disabled state [ 1481.021595][T21727] Bluetooth: hci2: command tx timeout [ 1481.046916][ T2452] bridge_slave_1: entered allmulticast mode [ 1481.072771][ T2452] bridge_slave_1: entered promiscuous mode [ 1481.200049][ T2559] netlink: 'syz.3.9768': attribute type 1 has an invalid length. [ 1481.264931][ T2559] bond2: entered promiscuous mode [ 1481.270920][ T2559] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1481.289698][ T2452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1481.327979][ T2452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1481.553428][ T2452] team0: Port device team_slave_0 added [ 1481.582373][ T2452] team0: Port device team_slave_1 added [ 1481.635433][ T2580] syzkaller0: entered promiscuous mode [ 1481.640983][ T2580] syzkaller0: entered allmulticast mode [ 1481.649744][ T2452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1481.661866][ T2452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1481.691865][ T2452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1481.714094][ T2452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1481.721119][ T2452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1481.755876][ T2452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1481.775011][ T2586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9775'. [ 1481.786045][ T2586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9775'. [ 1482.045853][ T2594] netlink: 'syz.4.9778': attribute type 1 has an invalid length. [ 1482.077150][ T2594] bond2: entered promiscuous mode [ 1482.093597][ T2594] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1482.119062][ T2452] hsr_slave_0: entered promiscuous mode [ 1482.130225][ T2452] hsr_slave_1: entered promiscuous mode [ 1482.358743][ T2607] netlink: 'syz.4.9782': attribute type 1 has an invalid length. [ 1482.410232][ T2607] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1482.475509][ T2611] bond3: (slave geneve2): making interface the new active one [ 1482.490071][ T2611] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1482.555754][ T2616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9784'. [ 1482.589775][ T2616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9784'. [ 1482.706722][ T2452] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1482.775869][ T2621] syzkaller0: entered promiscuous mode [ 1482.786407][ T2621] syzkaller0: entered allmulticast mode [ 1482.925089][ T2452] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1482.949542][ T2634] netlink: 'syz.4.9788': attribute type 1 has an invalid length. [ 1482.978107][ T2634] bond4: entered promiscuous mode [ 1482.985103][ T2634] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1483.033351][ T2452] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1483.050750][ T2638] sch_tbf: burst 5 is lower than device syzkaller0 mtu (1500) ! [ 1483.106384][T21727] Bluetooth: hci2: command tx timeout [ 1483.147730][ T2452] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1483.583244][ T2452] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1483.606229][ T2452] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1483.697679][ T2452] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1483.731896][ T2452] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1483.944340][ T2664] netlink: 'syz.2.9797': attribute type 1 has an invalid length. [ 1483.979328][ T2664] bond4: entered promiscuous mode [ 1483.986693][ T2664] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1483.996879][ T2665] syzkaller0: entered promiscuous mode [ 1484.003734][ T2665] syzkaller0: entered allmulticast mode [ 1484.015302][ T2452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1484.105407][ T2668] sch_tbf: burst 5 is lower than device syzkaller0 mtu (1500) ! [ 1484.163751][ T2452] 8021q: adding VLAN 0 to HW filter on device team0 [ 1484.213820][ T3476] bridge0: port 1(bridge_slave_0) entered blocking state [ 1484.221000][ T3476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1484.257398][ T3476] bridge0: port 2(bridge_slave_1) entered blocking state [ 1484.264644][ T3476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1484.369665][ T2680] syzkaller1: entered promiscuous mode [ 1484.392751][ T2680] syzkaller1: entered allmulticast mode [ 1484.688145][ T2452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1484.778528][ T2702] netlink: 'syz.2.9806': attribute type 1 has an invalid length. [ 1484.787663][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.801859][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.833643][ T2702] bond5: entered promiscuous mode [ 1484.838874][ T2702] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1484.998840][ T2452] veth0_vlan: entered promiscuous mode [ 1485.042539][ T2452] veth1_vlan: entered promiscuous mode [ 1485.104781][ T2708] syzkaller0: entered promiscuous mode [ 1485.110301][ T2708] syzkaller0: entered allmulticast mode [ 1485.136375][ T2452] veth0_macvtap: entered promiscuous mode [ 1485.186449][T21727] Bluetooth: hci2: command tx timeout [ 1485.208355][ T2452] veth1_macvtap: entered promiscuous mode [ 1485.254099][ T2452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1485.267842][ T2452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1485.278288][ T2452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1485.288942][ T2452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1485.298867][ T2452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1485.310228][ T2452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1485.354107][ T2452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1485.368554][ T2452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1485.390601][ T2452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1485.401120][ T2452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1485.413632][ T2452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1485.425991][ T2452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1485.438724][ T2452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1485.484900][ T2452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1485.531210][ T2452] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1485.546378][ T2452] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1485.592328][ T2452] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1485.611815][ T2452] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1485.638631][ T2719] netlink: 'syz.3.9810': attribute type 3 has an invalid length. [ 1485.647304][ T2719] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.9810'. [ 1485.769639][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1485.798714][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1485.879958][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1485.889158][ T2732] syzkaller0: entered promiscuous mode [ 1485.895251][ T2732] syzkaller0: entered allmulticast mode [ 1485.898686][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1486.390544][ T2748] syzkaller0: entered promiscuous mode [ 1486.401751][ T2748] syzkaller0: entered allmulticast mode [ 1486.808296][ T2759] sch_tbf: burst 5 is lower than device syzkaller0 mtu (1500) ! [ 1487.072633][ T2771] syzkaller0: entered promiscuous mode [ 1487.078298][ T2771] syzkaller0: entered allmulticast mode [ 1487.715478][ T2796] syzkaller0: entered promiscuous mode [ 1487.723595][ T2796] syzkaller0: entered allmulticast mode [ 1487.991212][ T2807] syzkaller0: entered promiscuous mode [ 1487.997159][ T2807] syzkaller0: entered allmulticast mode [ 1488.039611][ T2812] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.9838'. [ 1488.177441][T13542] IPVS: starting estimator thread 0... [ 1488.184619][ T2821] IPVS: dh: TCP 127.0.0.1:21 - no destination available [ 1488.281426][ T2822] IPVS: using max 26 ests per chain, 62400 per kthread [ 1488.829977][ T2838] syzkaller0: entered promiscuous mode [ 1488.836066][ T2838] syzkaller0: entered allmulticast mode [ 1488.943093][ T2847] syzkaller0: entered promiscuous mode [ 1488.949601][ T2847] syzkaller0: entered allmulticast mode [ 1489.142512][ T2856] netlink: 'syz.1.9850': attribute type 1 has an invalid length. [ 1489.771498][ T2881] syzkaller0: entered promiscuous mode [ 1489.777028][ T2881] syzkaller0: entered allmulticast mode [ 1490.097757][ T2890] syzkaller0: entered promiscuous mode [ 1490.116370][ T2890] syzkaller0: entered allmulticast mode [ 1490.401353][ T2890] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1490.883447][ T2922] syzkaller0: entered promiscuous mode [ 1490.889071][ T2922] syzkaller0: entered allmulticast mode [ 1491.548162][ T2939] syzkaller0: entered promiscuous mode [ 1491.556773][ T2939] syzkaller0: entered allmulticast mode [ 1491.569600][ T2939] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1491.859252][ T2951] netlink: 'syz.4.9882': attribute type 1 has an invalid length. [ 1491.886246][ T2951] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1491.920728][ T2950] syzkaller0: entered promiscuous mode [ 1491.937287][ T2950] syzkaller0: entered allmulticast mode [ 1492.243580][ T2967] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.9889'. [ 1492.879950][ T2987] syzkaller0: entered promiscuous mode [ 1492.893507][ T2987] syzkaller0: entered allmulticast mode [ 1493.273469][ T3003] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.9899'. [ 1493.319592][ T3001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9898'. [ 1493.455112][ T3013] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9904'. [ 1493.679843][ T3020] syzkaller0: entered promiscuous mode [ 1493.695619][ T3020] syzkaller0: entered allmulticast mode [ 1494.038027][ T3040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9914'. [ 1494.288541][ T3053] syzkaller0: entered promiscuous mode [ 1494.300516][ T3053] syzkaller0: entered allmulticast mode [ 1494.646007][ T3065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9926'. [ 1494.921955][ T3074] syzkaller0: entered promiscuous mode [ 1494.927488][ T3074] syzkaller0: entered allmulticast mode [ 1495.037289][ T3076] syzkaller1: entered promiscuous mode [ 1495.043663][ T3076] syzkaller1: entered allmulticast mode [ 1495.079090][ T3082] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9933'. [ 1495.207768][ T3086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9936'. [ 1495.730985][ T3106] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.9941'. [ 1495.858680][ T3112] syzkaller0: entered promiscuous mode [ 1495.865082][ T3112] syzkaller0: entered allmulticast mode [ 1496.225277][ T3122] syzkaller1: entered promiscuous mode [ 1496.241457][ T3122] syzkaller1: entered allmulticast mode [ 1496.523738][ T3126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9950'. [ 1496.809868][ T3129] tipc: Enabled bearer , priority 0 [ 1496.914767][ T3127] tipc: Disabling bearer [ 1497.074362][ T3137] syzkaller0: entered promiscuous mode [ 1497.082661][ T3137] syzkaller0: entered allmulticast mode [ 1497.274902][ T3141] syzkaller0: entered promiscuous mode [ 1497.280433][ T3141] syzkaller0: entered allmulticast mode [ 1498.278405][ T3161] __nla_validate_parse: 1 callbacks suppressed [ 1498.278423][ T3161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9961'. [ 1498.597558][ T3171] netlink: 'syz.2.9963': attribute type 16 has an invalid length. [ 1498.608212][ T3171] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.9963'. [ 1498.611969][ T3169] tipc: Started in network mode [ 1498.659422][ T3169] tipc: Node identity ca01cf34a7dd, cluster identity 4711 [ 1498.689297][ T3169] tipc: Enabled bearer , priority 0 [ 1498.714770][ T3166] syzkaller0: entered promiscuous mode [ 1498.736750][ T3166] syzkaller0: entered allmulticast mode [ 1498.762581][ T3174] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1498.873940][ T3163] tipc: Disabling bearer [ 1498.919011][ T3177] syzkaller0: entered promiscuous mode [ 1498.933939][ T3177] syzkaller0: entered allmulticast mode [ 1499.451529][ T3208] syzkaller0: entered promiscuous mode [ 1499.465715][ T3208] syzkaller0: entered allmulticast mode [ 1499.651068][ T3213] netlink: 'syz.4.9977': attribute type 16 has an invalid length. [ 1499.677562][ T3213] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.9977'. [ 1499.794433][ T3220] syzkaller0: entered promiscuous mode [ 1499.808399][ T3220] syzkaller0: entered allmulticast mode [ 1500.435849][ T3236] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.9986'. [ 1500.718113][ T3249] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9988'. [ 1500.765192][ T3249] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9988'. [ 1501.233253][ T3265] netlink: 'syz.2.9992': attribute type 16 has an invalid length. [ 1501.300726][ T3265] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.9992'. [ 1501.884020][ T3279] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9997'. [ 1501.893489][ T3279] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9997'. [ 1502.379460][ T3300] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10003'. [ 1502.509478][ T3305] netlink: 'syz.1.10004': attribute type 16 has an invalid length. [ 1502.949546][ T3317] syzkaller1: entered promiscuous mode [ 1502.966691][ T3317] syzkaller1: entered allmulticast mode [ 1503.573270][T13542] IPVS: starting estimator thread 0... [ 1503.592014][ T3344] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1503.614323][ T3347] sch_tbf: peakrate 7 is lower than or equals to rate 213 ! [ 1503.683411][ T3345] IPVS: using max 36 ests per chain, 86400 per kthread [ 1503.780191][ T3358] __nla_validate_parse: 1 callbacks suppressed [ 1503.780209][ T3358] netlink: 600 bytes leftover after parsing attributes in process `syz.2.10021'. [ 1503.918991][ T3366] syzkaller0: entered promiscuous mode [ 1503.924734][ T3366] syzkaller0: entered allmulticast mode [ 1504.268006][ T3386] syzkaller1: entered promiscuous mode [ 1504.275010][ T3386] syzkaller1: entered allmulticast mode [ 1505.363404][ T3420] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.10036'. [ 1506.050288][ T3325] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1506.324257][ T3424] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1506.815742][ T3452] syzkaller0: entered promiscuous mode [ 1506.821557][ T3452] syzkaller0: entered allmulticast mode [ 1506.910537][ T3453] syzkaller1: entered promiscuous mode [ 1506.922937][ T3453] syzkaller1: entered allmulticast mode [ 1507.115821][ T3464] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.10047'. [ 1507.200889][ T3468] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10051'. [ 1507.210511][ T3468] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10051'. [ 1507.680411][ T3487] netlink: 'syz.1.10057': attribute type 16 has an invalid length. [ 1507.746423][ T3487] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.10057'. [ 1508.258050][ T3503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10062'. [ 1508.371724][ T3506] syzkaller1: entered promiscuous mode [ 1508.377256][ T3506] syzkaller1: entered allmulticast mode [ 1508.727749][ T3519] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.10067'. [ 1509.217427][ T3527] netlink: 'syz.1.10070': attribute type 16 has an invalid length. [ 1509.261641][ T3527] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.10070'. [ 1509.657174][ T3534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10073'. [ 1509.749961][ T3534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10073'. [ 1509.943251][ T3541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10075'. [ 1510.119809][ T3546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10076'. [ 1510.457707][ T3543] bridge0: port 2(bridge_slave_1) entered disabled state [ 1510.465442][ T3543] bridge0: port 1(bridge_slave_0) entered disabled state [ 1511.389797][ T3543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1511.439036][ T3543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1511.761208][ T3543] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.770334][ T3543] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.779877][ T3543] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.789911][ T3543] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.888892][ T3552] syzkaller1: entered promiscuous mode [ 1511.895751][ T3552] syzkaller1: entered allmulticast mode [ 1511.907272][ T3572] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.10082'. [ 1512.050652][ T3576] tipc: Enabling of bearer rejected, failed to enable media [ 1513.290069][ T3634] tipc: Enabling of bearer rejected, failed to enable media [ 1513.399260][ T3637] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10103'. [ 1514.631756][ T3672] syzkaller0: entered promiscuous mode [ 1514.637294][ T3672] syzkaller0: entered allmulticast mode [ 1514.986506][ T3684] tipc: Enabling of bearer rejected, failed to enable media [ 1515.307798][ T3700] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.727690][ T3715] syzkaller0: entered promiscuous mode [ 1515.733909][ T3715] syzkaller0: entered allmulticast mode [ 1516.168630][ T3717] bridge_slave_0: left allmulticast mode [ 1516.241371][ T3717] bridge_slave_0: left promiscuous mode [ 1516.261574][ T3717] bridge0: port 1(bridge_slave_0) entered disabled state [ 1516.321535][ T3717] bridge_slave_1: left allmulticast mode [ 1516.352412][ T3717] bridge_slave_1: left promiscuous mode [ 1516.382485][ T3717] bridge0: port 2(bridge_slave_1) entered disabled state [ 1516.434966][ T3717] bond0: (slave bond_slave_0): Releasing backup interface [ 1516.494909][ T3717] bond0: (slave bond_slave_1): Releasing backup interface [ 1516.536358][ T3717] team0: Port device team_slave_0 removed [ 1516.559947][ T3717] team0: Port device team_slave_1 removed [ 1516.573894][ T3717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1516.583357][ T3717] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1516.592722][ T3717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1516.606892][ T3717] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1516.728023][ T3732] tipc: Enabling of bearer rejected, failed to enable media [ 1517.096735][ T3754] syzkaller0: entered promiscuous mode [ 1517.103836][ T3754] syzkaller0: entered allmulticast mode [ 1520.240704][T26251] IPVS: starting estimator thread 0... [ 1520.345178][ T3810] IPVS: using max 23 ests per chain, 55200 per kthread [ 1521.266902][ T3821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10155'. [ 1521.388769][ T3821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10155'. [ 1521.415000][ T3831] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10158'. [ 1524.232975][ T3856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10164'. [ 1525.042406][ T3855] bridge0: port 2(bridge_slave_1) entered disabled state [ 1525.565080][ T3855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1525.602252][ T3855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1525.999529][ T3855] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1526.008529][ T3855] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1526.017725][ T3855] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1526.026717][ T3855] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1526.065591][ T3855] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.075132][ T3855] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.084470][ T3855] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.093764][ T3855] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.136349][ T3871] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10168'. [ 1526.265890][ T3882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10171'. [ 1526.336616][ T3882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10171'. [ 1529.710530][ T3922] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10180'. [ 1529.839138][ T3924] syzkaller1: entered promiscuous mode [ 1529.851527][ T3924] syzkaller1: entered allmulticast mode [ 1533.447241][ T3948] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10191'. [ 1533.747128][ T3977] syzkaller1: entered promiscuous mode [ 1533.756037][ T3977] syzkaller1: entered allmulticast mode [ 1533.874921][ T3984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10202'. [ 1533.975307][ T3984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10202'. [ 1534.184606][ T3990] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10204'. [ 1537.481750][ T4014] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10214'. [ 1537.528034][ T4016] syzkaller0: entered promiscuous mode [ 1537.542382][ T4016] syzkaller0: entered allmulticast mode [ 1537.670907][ T4021] netlink: 1672 bytes leftover after parsing attributes in process `syz.3.10216'. [ 1537.704043][ T4023] syzkaller1: entered promiscuous mode [ 1537.721812][ T4023] syzkaller1: entered allmulticast mode [ 1537.891112][T26251] IPVS: starting estimator thread 0... [ 1537.991362][ T4029] IPVS: using max 19 ests per chain, 45600 per kthread [ 1538.562537][T21727] Bluetooth: hci2: link tx timeout [ 1538.569715][T21727] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1538.583691][T21727] Bluetooth: hci2: link tx timeout [ 1538.588845][T21727] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1538.694754][ T4054] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10225'. [ 1538.787285][ T4059] syzkaller0: entered promiscuous mode [ 1538.812373][ T4059] syzkaller0: entered allmulticast mode [ 1539.645317][T21727] Bluetooth: hci2: link tx timeout [ 1539.650497][T21727] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1539.658589][T21727] Bluetooth: hci2: link tx timeout [ 1539.664159][T21727] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1539.791605][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1539.835655][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1539.915328][ T4096] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10236'. [ 1540.541989][T21727] Bluetooth: hci2: link tx timeout [ 1540.547175][T21727] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1540.555101][T21727] Bluetooth: hci2: link tx timeout [ 1540.561524][T21727] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1540.631309][T21727] Bluetooth: hci2: command 0x0406 tx timeout [ 1541.650034][ T4126] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10247'. [ 1541.727714][ T4129] syzkaller0: entered promiscuous mode [ 1541.736670][ T4129] syzkaller0: entered allmulticast mode [ 1542.701957][T21727] Bluetooth: hci2: command 0x0406 tx timeout [ 1542.711601][ T4087] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1543.017240][ T4142] netlink: 'syz.1.10251': attribute type 16 has an invalid length. [ 1543.064897][ T4142] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.10251'. [ 1543.181308][ T5776] Bluetooth: hci4: command 0x0406 tx timeout [ 1543.278850][ T4150] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10256'. [ 1543.878903][ T4161] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.10259'. [ 1544.067872][ T4169] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10263'. [ 1544.162617][ T4173] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10265'. [ 1545.679950][ T4180] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.689169][ T4180] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.698162][ T4180] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.707124][ T4180] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.802709][ T4180] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1545.811705][ T4180] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1545.820591][ T4180] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1545.830022][ T4180] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1545.871493][ T4216] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10274'. [ 1545.983558][ T4221] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10276'. [ 1546.225296][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.232145][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.368266][ T4242] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10284'. [ 1546.465165][ T4246] syzkaller0: entered promiscuous mode [ 1546.470696][ T4246] syzkaller0: entered allmulticast mode [ 1546.486077][ T4246] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1546.836722][ T4263] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10294'. [ 1546.994867][ T4267] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10296'. [ 1547.010630][ T4267] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10296'. [ 1547.226207][ T4284] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10303'. [ 1548.231677][ T2462] Bluetooth: hci2: command 0x0406 tx timeout [ 1548.266077][ T4341] netlink: 'syz.3.10326': attribute type 16 has an invalid length. [ 1550.172163][ T4278] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1550.299837][ T4351] __nla_validate_parse: 6 callbacks suppressed [ 1550.299854][ T4351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10331'. [ 1550.595117][ T4367] netlink: 'syz.3.10336': attribute type 16 has an invalid length. [ 1550.634830][ T4367] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.10336'. [ 1550.708033][ T4377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10339'. [ 1550.878790][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1550.924377][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1551.530749][ T4401] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10347'. [ 1551.593148][ T4403] netlink: 92 bytes leftover after parsing attributes in process `syz.2.10348'. [ 1551.965443][ T4417] syzkaller0: entered promiscuous mode [ 1551.971000][ T4417] syzkaller0: entered allmulticast mode [ 1551.987975][ T4417] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1553.844592][ T4381] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1554.048092][ T4429] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10357'. [ 1554.140736][ T4433] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.10358'. [ 1554.650309][ T3476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1554.681338][ T3476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1554.775728][ T4470] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10368'. [ 1554.873210][ T4474] macvlan0: entered promiscuous mode [ 1554.882607][ T4474] netlink: 'syz.2.10370': attribute type 1 has an invalid length. [ 1554.890488][ T4474] netlink: 'syz.2.10370': attribute type 2 has an invalid length. [ 1555.099789][ T4486] netlink: 'syz.3.10372': attribute type 16 has an invalid length. [ 1555.134287][ T4486] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.10372'. [ 1555.457326][ T4503] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 1555.482955][ T4505] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10378'. [ 1555.613185][ T4514] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.10381'. [ 1555.707120][ T4520] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10383'. [ 1557.563349][ T4458] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1557.751744][ T4531] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10387'. [ 1557.770045][ T4533] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 1557.788357][ T4532] Bluetooth: MGMT ver 1.22 [ 1558.102340][ T4544] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1558.159213][ T4552] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 1558.216080][ T4554] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.10391'. [ 1558.501988][ T4575] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 1558.541852][ T5776] Bluetooth: hci1: command 0x0406 tx timeout [ 1558.634918][ T4579] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10399'. [ 1558.924353][ T4588] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1559.022476][ T4595] netlink: 14207 bytes leftover after parsing attributes in process `syz.4.10405'. [ 1559.230370][ T4601] sch_tbf: peakrate 11 is lower than or equals to rate 2048 ! [ 1559.323308][ T4603] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10408'. [ 1561.452733][ T4572] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1561.579306][ T4609] netlink: 'syz.4.10412': attribute type 1 has an invalid length. [ 1561.659167][ T4609] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1561.666824][ T4613] macvlan0: entered promiscuous mode [ 1561.682383][ T4613] netlink: 'syz.3.10411': attribute type 1 has an invalid length. [ 1561.706184][ T4613] netlink: 'syz.3.10411': attribute type 2 has an invalid length. [ 1561.965533][ T4632] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10417'. [ 1562.175889][ T4638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10420'. [ 1562.514648][ T4654] netlink: 'syz.1.10426': attribute type 1 has an invalid length. [ 1562.543779][ T4654] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1562.718465][ T4662] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10428'. [ 1563.052555][ T4677] netlink: 'syz.3.10435': attribute type 1 has an invalid length. [ 1563.075969][ T4677] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1563.086439][ T4678] netlink: 112 bytes leftover after parsing attributes in process `syz.2.10434'. [ 1565.385735][ T4645] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1565.453844][ T4693] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10439'. [ 1565.679848][ T4702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10441'. [ 1565.705578][ T4706] netlink: 'syz.4.10445': attribute type 1 has an invalid length. [ 1565.747620][ T4706] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1565.855337][ T4717] netlink: 660 bytes leftover after parsing attributes in process `syz.2.10447'. [ 1565.870738][ T4719] vlan2: entered promiscuous mode [ 1565.876661][ T4719] bridge0: entered promiscuous mode [ 1565.920484][ T4722] netlink: 'syz.4.10449': attribute type 2 has an invalid length. [ 1566.021557][ T4726] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10451'. [ 1566.483716][ T4749] netlink: 'syz.4.10458': attribute type 1 has an invalid length. [ 1566.528715][ T4749] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1567.090431][ T4784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10467'. [ 1567.130042][ T4788] netlink: 660 bytes leftover after parsing attributes in process `syz.1.10470'. [ 1567.228135][ T4793] netlink: 'syz.1.10472': attribute type 1 has an invalid length. [ 1567.251169][ T4793] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1567.952730][ T4820] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10480'. [ 1567.984251][ T4823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10482'. [ 1568.466836][ T4848] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10491'. [ 1568.526424][ T4847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10489'. [ 1568.766313][ T4862] netlink: 1672 bytes leftover after parsing attributes in process `syz.4.10496'. [ 1569.379875][ T4873] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10501'. [ 1569.402304][ T4874] syzkaller1: entered promiscuous mode [ 1569.410277][ T4874] syzkaller1: entered allmulticast mode [ 1569.421484][ T2462] Bluetooth: hci2: command 0x0406 tx timeout [ 1569.921001][ T4891] netlink: 1672 bytes leftover after parsing attributes in process `syz.4.10506'. [ 1570.187917][ T4900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10508'. [ 1570.378903][ T4916] syzkaller1: entered promiscuous mode [ 1570.387266][ T4916] syzkaller1: entered allmulticast mode [ 1571.123198][ T4935] syzkaller1: entered promiscuous mode [ 1571.128708][ T4935] syzkaller1: entered allmulticast mode [ 1571.502609][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 1572.212623][ T4979] syzkaller1: entered promiscuous mode [ 1572.218153][ T4979] syzkaller1: entered allmulticast mode [ 1572.291001][ T4981] __nla_validate_parse: 5 callbacks suppressed [ 1572.291019][ T4981] netlink: 888 bytes leftover after parsing attributes in process `syz.1.10541'. [ 1573.052599][ T5003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10551'. [ 1573.106422][ T5008] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10553'. [ 1573.367271][ T5019] syzkaller1: entered promiscuous mode [ 1573.373984][ T5019] syzkaller1: entered allmulticast mode [ 1573.581552][ T2462] Bluetooth: hci2: command 0x0406 tx timeout [ 1573.926138][ T5030] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10563'. [ 1574.073045][ T5038] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10567'. [ 1574.174809][ T5045] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.10570'. [ 1574.446588][ T5062] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10577'. [ 1574.570402][ T5070] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10578'. [ 1574.700259][ T5076] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.10581'. [ 1574.753930][ T5078] netlink: 888 bytes leftover after parsing attributes in process `syz.1.10582'. [ 1574.909342][ T5088] syzkaller0: entered promiscuous mode [ 1574.916553][ T5088] syzkaller0: entered allmulticast mode [ 1574.926722][ T5088] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1575.528645][ T5119] syzkaller0: entered promiscuous mode [ 1575.534412][ T5119] syzkaller0: entered allmulticast mode [ 1575.553134][ T5119] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1575.671762][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 1576.318328][ T5162] syzkaller0: entered promiscuous mode [ 1576.324996][ T5162] syzkaller0: entered allmulticast mode [ 1576.334334][ T5162] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1577.604414][ T5207] block nbd0: not configured, cannot reconfigure [ 1577.741550][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 1578.293379][ T5241] netlink: 'syz.3.10648': attribute type 1 has an invalid length. [ 1578.311786][ T5241] netlink: 'syz.3.10648': attribute type 2 has an invalid length. [ 1578.637417][ T5259] __nla_validate_parse: 12 callbacks suppressed [ 1578.637435][ T5259] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.10653'. [ 1578.789565][ T5270] macvlan0: entered promiscuous mode [ 1578.795463][ T5270] netlink: 'syz.1.10660': attribute type 1 has an invalid length. [ 1578.803898][ T5270] netlink: 'syz.1.10660': attribute type 2 has an invalid length. [ 1579.642652][ T5311] netlink: 1900 bytes leftover after parsing attributes in process `syz.4.10673'. [ 1579.822068][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 1580.164131][ T5341] netlink: 14207 bytes leftover after parsing attributes in process `syz.4.10679'. [ 1580.468281][ T5435] veth0_macvtap: left promiscuous mode [ 1580.553478][ T5355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10684'. [ 1580.752103][ T5363] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1581.072808][ T5385] netlink: 1660 bytes leftover after parsing attributes in process `syz.2.10690'. [ 1581.382251][ T5399] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10695'. [ 1581.565116][ T5403] syzkaller0: entered promiscuous mode [ 1581.570646][ T5403] syzkaller0: entered allmulticast mode [ 1581.624834][ T5409] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1581.903185][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 1582.373944][ T5454] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10706'. [ 1582.470421][ T5456] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10707'. [ 1582.561560][ T5458] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1582.579086][ T5461] netlink: 1660 bytes leftover after parsing attributes in process `syz.1.10710'. [ 1582.748851][ T5472] netlink: 'syz.3.10713': attribute type 16 has an invalid length. [ 1582.771405][ T5472] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.10713'. [ 1583.401458][ T5504] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1583.588341][ T5520] netlink: 'syz.3.10728': attribute type 16 has an invalid length. [ 1583.881563][ T5535] __nla_validate_parse: 3 callbacks suppressed [ 1583.881581][ T5535] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10732'. [ 1583.950829][ T5540] netlink: 1672 bytes leftover after parsing attributes in process `syz.4.10733'. [ 1584.366474][ T5563] netlink: 'syz.2.10740': attribute type 16 has an invalid length. [ 1584.423853][ T5563] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.10740'. [ 1584.781794][ T5572] syzkaller0: entered promiscuous mode [ 1584.787324][ T5572] syzkaller0: entered allmulticast mode [ 1584.816722][ T5572] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1587.496694][ T5595] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.10750'. [ 1587.604066][ T5601] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10751'. [ 1587.849784][ T5620] netlink: 1244 bytes leftover after parsing attributes in process `syz.4.10758'. [ 1588.135439][ T5632] tipc: Enabling of bearer rejected, failed to enable media [ 1588.149114][ T5632] syzkaller0: entered promiscuous mode [ 1588.157204][ T5632] syzkaller0: entered allmulticast mode [ 1588.169622][ T5632] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1588.720345][ T5653] netlink: 1244 bytes leftover after parsing attributes in process `syz.2.10769'. [ 1590.710016][ T5645] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10766'. [ 1590.924299][ T5674] Bluetooth: MGMT ver 1.22 [ 1591.030360][ T5680] netlink: 1672 bytes leftover after parsing attributes in process `syz.1.10779'. [ 1591.270880][ T5694] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10781'. [ 1592.218682][ T5739] netlink: 1672 bytes leftover after parsing attributes in process `syz.2.10789'. [ 1594.359140][ T5724] tipc: Enabling of bearer rejected, failed to enable media [ 1594.426202][ T5755] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10792'. [ 1594.737604][ T5777] netlink: 1672 bytes leftover after parsing attributes in process `syz.2.10799'. [ 1594.769002][ T5780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10795'. [ 1594.836036][ T2946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1594.859786][ T2946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1594.998012][ T5797] syzkaller0: entered promiscuous mode [ 1595.010661][ T5797] syzkaller0: entered allmulticast mode [ 1595.021478][ T5797] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1595.406706][ T5815] netlink: 'syz.2.10811': attribute type 16 has an invalid length. [ 1595.420734][ T5815] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.10811'. [ 1596.049989][ T5841] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.10821'. [ 1597.004232][ T5848] netlink: 'syz.2.10823': attribute type 16 has an invalid length. [ 1597.012747][ T5848] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.10823'. [ 1597.778779][ T5782] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1598.235429][ T5876] tipc: Enabling of bearer rejected, failed to enable media [ 1598.252540][ T5876] syzkaller0: entered promiscuous mode [ 1598.259149][ T5876] syzkaller0: entered allmulticast mode [ 1598.292691][ T5876] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1598.359810][ T5880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10836'. [ 1598.438799][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1598.449521][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1598.780126][ T5909] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10847'. [ 1598.849643][ T5912] netlink: 388 bytes leftover after parsing attributes in process `syz.1.10848'. [ 1598.960647][ T5916] syzkaller0: entered promiscuous mode [ 1598.966401][ T5916] syzkaller0: entered allmulticast mode [ 1598.978969][ T5916] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1601.314611][ T5888] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1601.467948][ T5933] netlink: 1900 bytes leftover after parsing attributes in process `syz.4.10858'. [ 1601.498736][ T5938] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10856'. [ 1601.819530][ T5953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10860'. [ 1602.178322][ T5978] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10870'. [ 1602.672119][ T6006] netlink: 1900 bytes leftover after parsing attributes in process `syz.2.10881'. [ 1603.123180][ T6034] netlink: 1900 bytes leftover after parsing attributes in process `syz.4.10894'. [ 1603.235237][ T6040] syzkaller0: entered promiscuous mode [ 1603.243702][ T6040] syzkaller0: entered allmulticast mode [ 1603.254264][ T6040] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1603.429131][ T6047] netlink: 'syz.2.10899': attribute type 16 has an invalid length. [ 1603.458016][ T6047] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.10899'. [ 1603.541594][ T6052] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10901'. [ 1603.852061][ T6063] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.10904'. [ 1603.884067][ T6065] netlink: 1900 bytes leftover after parsing attributes in process `syz.3.10906'. [ 1604.137817][ T6079] netlink: 'syz.3.10913': attribute type 1 has an invalid length. [ 1604.165736][ T6079] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1604.352287][ T6090] netlink: 'syz.3.10916': attribute type 16 has an invalid length. [ 1604.687094][ T6104] netlink: 'syz.3.10924': attribute type 1 has an invalid length. [ 1604.725257][ T6104] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1604.859427][ T6113] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1604.867605][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 1604.883185][ T6114] netlink: 'syz.3.10928': attribute type 16 has an invalid length. [ 1605.240622][ T6131] netlink: 'syz.2.10936': attribute type 1 has an invalid length. [ 1605.278033][ T6131] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1605.444393][ T6140] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1605.502914][ T6144] netlink: 'syz.3.10940': attribute type 16 has an invalid length. [ 1605.766907][ T6155] netlink: 'syz.3.10946': attribute type 1 has an invalid length. [ 1605.799174][ T6155] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1605.892566][ T6161] xt_nfacct: accounting object `syz0' does not exist [ 1606.018324][ T6165] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1606.178814][ T6170] netlink: 'syz.4.10952': attribute type 16 has an invalid length. [ 1606.459535][ T6183] netlink: 'syz.4.10958': attribute type 1 has an invalid length. [ 1606.503550][ T6183] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1606.523305][ T6188] __nla_validate_parse: 5 callbacks suppressed [ 1606.523322][ T6188] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.10960'. [ 1606.618947][ T6191] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1606.941346][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 1606.949904][ T6209] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.10967'. [ 1607.048074][ T6208] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1607.149042][ T6215] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1607.256369][ T6222] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.10973'. [ 1607.542045][ T6234] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1607.664864][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.674007][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.703247][ T6243] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.10983'. [ 1607.743184][ T6245] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.10980'. [ 1609.022158][ T2462] Bluetooth: hci2: command 0x0406 tx timeout [ 1610.416562][ T6264] syzkaller1: entered promiscuous mode [ 1610.422234][ T6264] syzkaller1: entered allmulticast mode [ 1610.434509][ T6276] validate_nla: 4 callbacks suppressed [ 1610.434560][ T6276] netlink: 'syz.3.10993': attribute type 1 has an invalid length. [ 1610.449760][ T6276] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1610.648651][ T6282] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.10995'. [ 1610.745003][ T6288] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1611.101483][ T2462] Bluetooth: hci2: command 0x0406 tx timeout [ 1613.183011][ T2462] Bluetooth: hci2: command 0x0406 tx timeout [ 1613.511560][ T6318] netlink: 'syz.3.11007': attribute type 1 has an invalid length. [ 1613.545225][ T6318] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1613.567221][ T6318] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1613.576667][ T6318] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1613.585972][ T6318] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1613.595407][ T6318] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1613.606990][ T6318] bond8: (slave geneve3): making interface the new active one [ 1613.618403][ T6318] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 1613.702611][ T6321] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.11008'. [ 1613.822859][ T6329] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1614.086045][ T6343] netlink: 'syz.2.11016': attribute type 16 has an invalid length. [ 1614.126017][ T6343] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.11016'. [ 1615.261323][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 1616.755841][ T6357] netlink: 'syz.4.11020': attribute type 1 has an invalid length. [ 1616.764682][ T6357] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 1617.104163][ T6375] netlink: 'syz.2.11027': attribute type 16 has an invalid length. [ 1617.142073][ T6375] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.11027'. [ 1617.341322][ T2462] Bluetooth: hci2: command 0x0406 tx timeout [ 1619.421673][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 1620.314184][ T6416] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 1620.369079][ T6416] syzkaller0: entered promiscuous mode [ 1620.374913][ T6416] syzkaller0: entered allmulticast mode [ 1620.480275][ T6425] netlink: 'syz.2.11041': attribute type 16 has an invalid length. [ 1620.509284][ T6425] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.11041'. [ 1622.631477][ T2462] Bluetooth: hci2: command 0x0406 tx timeout [ 1623.217994][ T6450] netlink: 1900 bytes leftover after parsing attributes in process `syz.2.11048'. [ 1623.255849][ T6452] syzkaller1: entered promiscuous mode [ 1623.271344][ T6452] syzkaller1: entered allmulticast mode [ 1623.674382][ T6469] netlink: 'syz.2.11052': attribute type 16 has an invalid length. [ 1623.721311][ T6469] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.11052'. [ 1623.961349][ T6465] netlink: 112 bytes leftover after parsing attributes in process `syz.3.11051'. [ 1624.240706][ T6476] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.11055'. [ 1624.348910][ T6486] netlink: 1900 bytes leftover after parsing attributes in process `syz.3.11059'. [ 1624.758137][ T6499] netlink: 'syz.3.11063': attribute type 16 has an invalid length. [ 1624.777457][ T6499] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.11063'. [ 1624.810961][ T6501] syzkaller1: entered promiscuous mode [ 1624.823160][ T6501] syzkaller1: entered allmulticast mode [ 1625.220830][ T6509] netlink: 14207 bytes leftover after parsing attributes in process `syz.3.11067'. [ 1625.230861][ T6510] netlink: 1900 bytes leftover after parsing attributes in process `syz.4.11068'. [ 1625.594945][ T6532] netlink: 'syz.1.11075': attribute type 16 has an invalid length. [ 1625.634375][ T6532] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.11075'. [ 1625.706139][ T6538] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.11079'. [ 1625.838306][ T6542] netlink: 1900 bytes leftover after parsing attributes in process `syz.3.11080'. [ 1625.884405][ T6544] syzkaller1: entered promiscuous mode [ 1625.889952][ T6544] syzkaller1: entered allmulticast mode [ 1626.072875][ T6553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11086'. [ 1626.086305][ T6553] netlink: 'syz.3.11086': attribute type 1 has an invalid length. [ 1626.094348][ T6553] netlink: 'syz.3.11086': attribute type 2 has an invalid length. [ 1626.224288][ T2462] Bluetooth: hci2: command 0x0406 tx timeout [ 1626.258407][ T6555] syzkaller0: entered promiscuous mode [ 1626.268103][ T6555] syzkaller0: entered allmulticast mode [ 1628.302497][ T2462] Bluetooth: hci2: command 0x0406 tx timeout [ 1628.776052][ T6570] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.11090'. [ 1628.909839][ T6588] netlink: 1900 bytes leftover after parsing attributes in process `syz.1.11093'. [ 1629.011093][ T6594] netlink: 'syz.2.11096': attribute type 1 has an invalid length. [ 1629.027604][ T6594] netlink: 'syz.2.11096': attribute type 2 has an invalid length. [ 1629.109199][ T6600] syzkaller1: entered promiscuous mode [ 1629.118109][ T6600] syzkaller1: entered allmulticast mode [ 1629.264338][ T6609] netlink: 14207 bytes leftover after parsing attributes in process `syz.4.11102'. [ 1629.557768][ T6619] syzkaller0: entered promiscuous mode [ 1629.563481][ T6619] syzkaller0: entered allmulticast mode [ 1629.575628][ T6619] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1630.118153][ T6648] syzkaller1: entered promiscuous mode [ 1630.131418][ T6648] syzkaller1: entered allmulticast mode [ 1630.319631][ T6651] Set syz1 is full, maxelem 1029 reached [ 1631.111373][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 1632.706855][ T6624] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1632.915689][ T6666] syzkaller0: entered promiscuous mode [ 1632.921914][ T6666] syzkaller0: entered allmulticast mode [ 1632.951707][ T6666] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1633.181648][ T2462] Bluetooth: hci2: command 0x0406 tx timeout [ 1633.306895][ T6691] syzkaller1: entered promiscuous mode [ 1633.313847][ T6691] syzkaller1: entered allmulticast mode [ 1633.875200][ T6705] syzkaller0: entered promiscuous mode [ 1633.880725][ T6705] syzkaller0: entered allmulticast mode [ 1633.902734][ T6705] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1634.177229][ T6713] syzkaller1: entered promiscuous mode [ 1634.204590][ T6713] syzkaller1: entered allmulticast mode [ 1634.720274][ T6737] syzkaller0: entered promiscuous mode [ 1634.726424][ T6737] syzkaller0: entered allmulticast mode [ 1634.736917][ T6737] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1635.040090][ T6750] syzkaller0: entered promiscuous mode [ 1635.046154][ T6750] syzkaller0: entered allmulticast mode [ 1635.270087][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 1637.344080][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 1637.912294][ T6776] netlink: 'syz.2.11161': attribute type 5 has an invalid length. [ 1637.964321][ T6778] tipc: Invalid UDP bearer configuration [ 1637.964373][ T6778] tipc: Enabling of bearer rejected, failed to enable media [ 1638.402699][ T6807] syzkaller1: entered promiscuous mode [ 1638.408213][ T6807] syzkaller1: entered allmulticast mode [ 1638.872373][ T6817] netlink: 'syz.2.11176': attribute type 16 has an invalid length. [ 1638.880338][ T6817] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.11176'. [ 1639.062617][ T6823] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.11179'. [ 1639.387576][ T6831] syzkaller1: entered promiscuous mode [ 1639.396538][ T6831] syzkaller1: entered allmulticast mode [ 1639.855611][ T6850] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.11190'. [ 1640.141344][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 1640.356832][ T6873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11197'. [ 1640.382338][ T6880] syzkaller1: entered promiscuous mode [ 1640.387858][ T6880] syzkaller1: entered allmulticast mode [ 1640.531445][ T6887] syzkaller0: entered promiscuous mode [ 1640.538045][ T6887] syzkaller0: entered allmulticast mode [ 1640.907218][ T6893] netlink: 'syz.4.11205': attribute type 16 has an invalid length. [ 1640.926626][ T6893] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.11205'. [ 1641.310058][ T6915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11214'. [ 1641.322068][ T6915] netlink: del zone limit has 4 unknown bytes [ 1641.447336][ T6921] syzkaller1: entered promiscuous mode [ 1641.453151][ T6921] syzkaller1: entered allmulticast mode [ 1641.713040][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11218'. [ 1642.232832][ T6954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11230'. [ 1642.332225][ T6958] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11231'. [ 1642.382705][ T6958] ipvlan0: entered promiscuous mode [ 1642.409370][ T6958] ipvlan0: left promiscuous mode [ 1642.437493][ T6963] syzkaller1: entered promiscuous mode [ 1642.447831][ T6963] syzkaller1: entered allmulticast mode [ 1642.575214][ T6968] syzkaller1: entered promiscuous mode [ 1642.580850][ T6968] syzkaller1: entered allmulticast mode [ 1644.150328][ T7008] syzkaller1: entered promiscuous mode [ 1644.155941][ T7008] syzkaller1: entered allmulticast mode [ 1645.181369][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 1646.077513][ T6988] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1646.270893][ T7033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11255'. [ 1646.514647][ T7044] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11260'. [ 1646.670626][ T7050] syzkaller1: entered promiscuous mode [ 1646.676469][ T7050] syzkaller1: entered allmulticast mode [ 1647.370938][ T7077] netlink: 'syz.3.11270': attribute type 16 has an invalid length. [ 1647.400591][ T7077] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.11270'. [ 1647.695779][ T7088] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1647.705026][ T7088] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1647.714887][ T7088] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1647.724519][ T7088] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1647.738185][ T7089] syzkaller1: entered promiscuous mode [ 1647.744242][ T7089] syzkaller1: entered allmulticast mode [ 1648.301442][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 1650.075844][ T7055] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1650.384769][ T7104] syzkaller0: entered promiscuous mode [ 1650.390297][ T7104] syzkaller0: entered allmulticast mode [ 1650.454662][ T7108] netlink: 'syz.2.11284': attribute type 12 has an invalid length. [ 1650.480025][ T7108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11284'. [ 1650.607758][ T7114] syzkaller1: entered promiscuous mode [ 1650.615128][ T7114] syzkaller1: entered allmulticast mode [ 1650.685400][ T2946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1650.710074][ T2946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1651.228495][ T7133] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11292'. [ 1651.329672][ T7137] syzkaller0: entered promiscuous mode [ 1651.335445][ T7137] syzkaller0: entered allmulticast mode [ 1651.712809][ T7143] syzkaller0: entered promiscuous mode [ 1651.718307][ T7143] syzkaller0: entered allmulticast mode [ 1653.624405][ T7116] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1654.089025][ T7168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11301'. [ 1654.439157][ T7153] syzkaller1: entered promiscuous mode [ 1654.451382][ T7153] syzkaller1: entered allmulticast mode [ 1654.457912][ T7157] syzkaller1: entered promiscuous mode [ 1654.471449][ T7157] syzkaller1: entered allmulticast mode [ 1654.713020][ T7179] netlink: 'syz.1.11305': attribute type 12 has an invalid length. [ 1654.740081][ T7179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11305'. [ 1654.753212][ T7182] syzkaller0: entered promiscuous mode [ 1654.758791][ T7182] syzkaller0: entered allmulticast mode [ 1654.860208][ T7188] syzkaller0: entered promiscuous mode [ 1654.873080][ T7188] syzkaller0: entered allmulticast mode [ 1655.144664][ T7197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11311'. [ 1655.695418][ T7194] bridge0: port 2(bridge_slave_1) entered disabled state [ 1655.702842][ T7194] bridge0: port 1(bridge_slave_0) entered disabled state [ 1656.013328][ T7194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1656.046996][ T7194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1656.420731][ T7194] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1656.429748][ T7194] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1656.438978][ T7194] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1656.448061][ T7194] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1656.516197][ T7194] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.525694][ T7194] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.535149][ T7194] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.544883][ T7194] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.677471][ T7219] syzkaller1: entered promiscuous mode [ 1656.702484][ T7219] syzkaller1: entered allmulticast mode [ 1656.871529][ T7226] syzkaller0: entered promiscuous mode [ 1656.877053][ T7226] syzkaller0: entered allmulticast mode [ 1656.972452][ T7233] netlink: 'syz.4.11322': attribute type 12 has an invalid length. [ 1656.990848][ T7233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11322'. [ 1657.005126][ T7234] syzkaller0: entered promiscuous mode [ 1657.010656][ T7234] syzkaller0: entered allmulticast mode [ 1657.328842][ T7236] syzkaller0: entered promiscuous mode [ 1657.336411][ T7236] syzkaller0: entered allmulticast mode [ 1657.357339][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11325'. [ 1657.597821][ T7252] tipc: Enabling of bearer rejected, failed to enable media [ 1658.015426][ T7276] syzkaller0: entered promiscuous mode [ 1658.024078][ T7276] syzkaller0: entered allmulticast mode [ 1660.807718][ T7264] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1660.980689][ T7287] syzkaller0: entered promiscuous mode [ 1660.995741][ T7287] syzkaller0: entered allmulticast mode [ 1661.008817][ T7291] syzkaller0: entered promiscuous mode [ 1661.018028][ T7291] syzkaller0: entered allmulticast mode [ 1661.409381][ T7314] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11350'. [ 1661.522770][ T7310] syzkaller0: entered promiscuous mode [ 1661.528357][ T7310] syzkaller0: entered allmulticast mode [ 1661.651778][ T7323] syzkaller1: entered promiscuous mode [ 1661.657312][ T7323] syzkaller1: entered allmulticast mode [ 1661.815382][ T7326] syzkaller0: entered promiscuous mode [ 1661.828356][ T7326] syzkaller0: entered allmulticast mode [ 1664.730919][ T7354] syzkaller0: entered promiscuous mode [ 1664.745913][ T7354] syzkaller0: entered allmulticast mode [ 1664.900866][ T7363] syzkaller0: entered promiscuous mode [ 1664.907443][ T7363] syzkaller0: entered allmulticast mode [ 1664.995231][ T3476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1665.004452][ T3476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1665.018807][ T7374] netlink: 'syz.1.11373': attribute type 12 has an invalid length. [ 1665.029399][ T7374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11373'. [ 1665.072615][ T7375] syzkaller1: entered promiscuous mode [ 1665.078399][ T7375] syzkaller1: entered allmulticast mode [ 1665.148129][ T7377] syzkaller0: entered promiscuous mode [ 1665.160632][ T7377] syzkaller0: entered allmulticast mode [ 1665.993732][ T7397] syzkaller0: entered promiscuous mode [ 1665.999390][ T7397] syzkaller0: entered allmulticast mode [ 1666.217940][ T7400] syzkaller0: entered promiscuous mode [ 1666.223604][ T7400] syzkaller0: entered allmulticast mode [ 1666.730556][ T7408] syzkaller0: entered promiscuous mode [ 1666.736472][ T7408] syzkaller0: entered allmulticast mode [ 1667.288545][ T7417] batman_adv: batadv0: Adding interface: wlan1 [ 1667.295407][ T7417] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1667.320910][ T7417] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 1667.560076][ T7427] netlink: 'syz.1.11395': attribute type 12 has an invalid length. [ 1667.569949][ T7427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11395'. [ 1667.898995][ T7372] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1668.106791][ T7442] syzkaller0: entered promiscuous mode [ 1668.117958][ T7442] syzkaller0: entered allmulticast mode [ 1668.272337][ T7446] syzkaller0: entered promiscuous mode [ 1668.277853][ T7446] syzkaller0: entered allmulticast mode [ 1668.457842][ T7456] syzkaller1: entered promiscuous mode [ 1668.464632][ T7456] syzkaller1: entered allmulticast mode [ 1669.109475][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.122032][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.207722][ T7479] tipc: Enabled bearer , priority 0 [ 1669.221968][ T7479] syzkaller0: entered promiscuous mode [ 1669.227485][ T7479] syzkaller0: entered allmulticast mode [ 1669.278739][ T7479] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 1669.309664][ T7479] tipc: Resetting bearer [ 1669.327891][ T7478] tipc: Resetting bearer [ 1669.367929][ T7478] tipc: Disabling bearer [ 1669.395694][ T7486] syzkaller0: entered promiscuous mode [ 1669.402345][ T7486] syzkaller0: entered allmulticast mode [ 1669.840931][ T7505] syzkaller1: entered promiscuous mode [ 1669.852070][ T7505] syzkaller1: entered allmulticast mode [ 1669.925988][ T7507] syzkaller0: entered promiscuous mode [ 1669.939840][ T7507] syzkaller0: entered allmulticast mode [ 1670.060816][ T7512] syzkaller0: entered promiscuous mode [ 1670.080552][ T7512] syzkaller0: entered allmulticast mode [ 1670.442320][ T7520] syzkaller0: entered promiscuous mode [ 1670.447847][ T7520] syzkaller0: entered allmulticast mode [ 1670.574967][ T7522] syzkaller0: entered promiscuous mode [ 1670.580560][ T7522] syzkaller0: entered allmulticast mode [ 1670.965898][ T7541] syzkaller1: entered promiscuous mode [ 1670.981243][ T7541] syzkaller1: entered allmulticast mode [ 1671.083990][ T7545] syzkaller0: entered promiscuous mode [ 1671.089708][ T7545] syzkaller0: entered allmulticast mode [ 1671.145479][ T7546] syzkaller0: entered promiscuous mode [ 1671.154843][ T7546] syzkaller0: entered allmulticast mode [ 1671.458359][ T7550] syzkaller0: entered promiscuous mode [ 1671.464368][ T7550] syzkaller0: entered allmulticast mode [ 1671.602277][ T7556] syzkaller0: entered promiscuous mode [ 1671.608600][ T7556] syzkaller0: entered allmulticast mode [ 1671.872478][ T7570] netlink: 'syz.4.11455': attribute type 12 has an invalid length. [ 1671.899365][ T7570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11455'. [ 1671.915502][ T7574] syzkaller0: entered promiscuous mode [ 1671.932114][ T7574] syzkaller0: entered allmulticast mode [ 1672.053372][ T7577] syzkaller1: entered promiscuous mode [ 1672.058892][ T7577] syzkaller1: entered allmulticast mode [ 1672.066132][ T7575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11457'. [ 1672.406834][ T7584] syzkaller0: entered promiscuous mode [ 1672.424431][ T7584] syzkaller0: entered allmulticast mode [ 1672.772748][ T7594] netlink: 'syz.4.11466': attribute type 12 has an invalid length. [ 1672.792697][ T7594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11466'. [ 1672.841627][ T7598] syzkaller0: entered promiscuous mode [ 1672.847145][ T7598] syzkaller0: entered allmulticast mode [ 1672.872922][ T7597] syzkaller0: entered promiscuous mode [ 1672.885683][ T7597] syzkaller0: entered allmulticast mode [ 1673.013828][ T7602] tipc: Enabled bearer , priority 0 [ 1673.032632][ T7602] syzkaller0: entered promiscuous mode [ 1673.047700][ T7602] syzkaller0: entered allmulticast mode [ 1673.063048][ T7602] sch_tbf: peakrate 11 is lower than or equals to rate 2048 ! [ 1673.105924][ T7602] tipc: Resetting bearer [ 1673.114756][ T7601] tipc: Resetting bearer [ 1673.144728][ T7601] tipc: Disabling bearer [ 1673.164699][ T7607] syzkaller0: entered promiscuous mode [ 1673.170225][ T7607] syzkaller0: entered allmulticast mode [ 1673.401018][ T7618] syzkaller1: entered promiscuous mode [ 1673.406789][ T7618] syzkaller1: entered allmulticast mode [ 1673.475867][ T7619] syzkaller0: entered promiscuous mode [ 1673.483318][ T7619] syzkaller0: entered allmulticast mode [ 1673.547973][ T7624] netlink: 'syz.4.11477': attribute type 12 has an invalid length. [ 1673.564563][ T7624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11477'. [ 1673.843253][ T7628] syzkaller0: entered promiscuous mode [ 1673.853684][ T7628] syzkaller0: entered allmulticast mode [ 1676.436862][ T7643] tipc: Enabling of bearer rejected, failed to enable media [ 1676.758100][ T7675] netlink: 'syz.4.11491': attribute type 12 has an invalid length. [ 1676.790160][ T7675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11491'. [ 1676.857304][ T7679] syzkaller0: entered promiscuous mode [ 1676.867744][ T7679] syzkaller0: entered allmulticast mode [ 1676.968287][ T7684] syzkaller1: entered promiscuous mode [ 1676.973906][ T7684] syzkaller1: entered allmulticast mode [ 1677.080497][ T7683] syzkaller0: entered promiscuous mode [ 1677.087237][ T7683] syzkaller0: entered allmulticast mode [ 1679.750911][ T7700] tipc: Enabling of bearer rejected, failed to enable media [ 1680.018907][ T7725] syzkaller0: entered promiscuous mode [ 1680.031285][ T7725] syzkaller0: entered allmulticast mode [ 1680.060698][ T7727] syzkaller0: entered promiscuous mode [ 1680.073308][ T7727] syzkaller0: entered allmulticast mode [ 1680.470180][ T7750] syzkaller1: entered promiscuous mode [ 1680.478327][ T7750] syzkaller1: entered allmulticast mode [ 1680.496890][ T7752] tipc: Enabled bearer , priority 0 [ 1680.508631][ T7752] syzkaller0: entered promiscuous mode [ 1680.517967][ T7752] syzkaller0: entered allmulticast mode [ 1680.573070][ T7752] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1680.890963][ T7768] tipc: Resetting bearer [ 1680.907586][ T7751] tipc: Resetting bearer [ 1680.966846][ T7751] tipc: Disabling bearer [ 1681.054959][ T7774] syzkaller0: entered promiscuous mode [ 1681.060924][ T7774] syzkaller0: entered allmulticast mode [ 1681.173064][ T7776] syzkaller0: entered promiscuous mode [ 1681.191417][ T7776] syzkaller0: entered allmulticast mode [ 1681.396221][ T7790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11520'. [ 1681.434972][ T7790] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1681.451692][ T7786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1681.459677][ T7786] bond9: (slave bond0): Enslaving as an active interface with an up link [ 1681.675938][ T7786] bond9: entered promiscuous mode [ 1681.681035][ T7786] bond0: entered promiscuous mode [ 1681.699564][ T7786] bond9: entered allmulticast mode [ 1681.710214][ T7786] bond0: entered allmulticast mode [ 1681.749495][ T7803] tipc: Enabled bearer , priority 0 [ 1681.760452][ T7803] syzkaller0: entered promiscuous mode [ 1681.769769][ T7803] syzkaller0: entered allmulticast mode [ 1681.785639][ T7803] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1681.808142][ T7805] syzkaller1: entered promiscuous mode [ 1681.813841][ T7805] syzkaller1: entered allmulticast mode [ 1681.825249][ T7803] tipc: Resetting bearer [ 1681.842895][ T7807] syzkaller0: entered promiscuous mode [ 1681.849998][ T7807] syzkaller0: entered allmulticast mode [ 1681.857865][ T7802] tipc: Resetting bearer [ 1681.880801][ T7802] tipc: Disabling bearer [ 1682.642145][ T7838] tipc: Enabled bearer , priority 0 [ 1682.660542][ T7838] syzkaller0: entered promiscuous mode [ 1682.666537][ T7838] syzkaller0: entered allmulticast mode [ 1682.682104][ T7838] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1682.732001][ T7838] tipc: Resetting bearer [ 1682.752347][ T7837] tipc: Resetting bearer [ 1682.772986][ T7837] tipc: Disabling bearer [ 1682.793601][ T7842] syzkaller0: entered promiscuous mode [ 1682.799499][ T7842] syzkaller0: entered allmulticast mode [ 1682.809359][ T7844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11541'. [ 1682.841912][ T7844] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1682.856215][ T7848] bond5: (slave erspan0): Enslaving as an active interface with an up link [ 1682.927193][ T7844] bond5: entered promiscuous mode [ 1682.932576][ T7844] erspan0: entered promiscuous mode [ 1682.938023][ T7844] bond5: entered allmulticast mode [ 1682.945848][ T7844] erspan0: entered allmulticast mode [ 1683.014832][ T7852] syzkaller1: entered promiscuous mode [ 1683.022226][ T7852] syzkaller1: entered allmulticast mode [ 1683.968306][ T7888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11556'. [ 1684.107763][ T2462] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1684.121000][ T2462] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1684.132166][ T2462] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1684.144173][ T2462] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1684.152758][ T2462] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1684.160144][ T2462] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1684.397024][ T7904] syzkaller1: entered promiscuous mode [ 1684.403436][ T7904] syzkaller1: entered allmulticast mode [ 1684.438443][ T7892] chnl_net:caif_netlink_parms(): no params data found [ 1684.552988][ T7892] bridge0: port 1(bridge_slave_0) entered blocking state [ 1684.560431][ T7892] bridge0: port 1(bridge_slave_0) entered disabled state [ 1684.568093][ T7892] bridge_slave_0: entered allmulticast mode [ 1684.575811][ T7892] bridge_slave_0: entered promiscuous mode [ 1684.585110][ T7892] bridge0: port 2(bridge_slave_1) entered blocking state [ 1684.592506][ T7892] bridge0: port 2(bridge_slave_1) entered disabled state [ 1684.599954][ T7892] bridge_slave_1: entered allmulticast mode [ 1684.607640][ T7892] bridge_slave_1: entered promiscuous mode [ 1684.650764][ T7892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1684.663841][ T7892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1684.774789][ T7892] team0: Port device team_slave_0 added [ 1684.807770][ T7892] team0: Port device team_slave_1 added [ 1684.885268][ T7892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1684.909490][ T7892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1684.962936][ T7892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1684.997037][ T7892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1685.018972][ T7892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1685.119765][ T7892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1685.309131][ T7892] hsr_slave_0: entered promiscuous mode [ 1685.342016][ T7892] hsr_slave_1: entered promiscuous mode [ 1685.358990][ T7892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1685.370589][ T7892] Cannot create hsr debugfs directory [ 1685.696273][ T7930] syzkaller1: entered promiscuous mode [ 1685.706162][ T7930] syzkaller1: entered allmulticast mode [ 1685.761734][ T7934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11570'. [ 1685.798723][ T7934] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1685.865265][ T7938] bond12: (slave erspan0): Enslaving as an active interface with an up link [ 1685.919204][ T7934] bond12: entered promiscuous mode [ 1685.926885][ T7934] erspan0: entered promiscuous mode [ 1685.942759][ T7934] bond12: entered allmulticast mode [ 1685.950728][ T7934] erspan0: entered allmulticast mode [ 1686.148753][ T7951] syzkaller1: entered promiscuous mode [ 1686.160388][ T7951] syzkaller1: entered allmulticast mode [ 1686.221515][ T5776] Bluetooth: hci3: command tx timeout [ 1686.850216][ T7892] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1686.880664][ T7892] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1686.902811][ T7892] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1686.923766][ T7892] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1686.947337][ T7975] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11585'. [ 1687.026535][ T7975] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1687.121747][ T7975] bond13: entered promiscuous mode [ 1687.126931][ T7975] bond13: entered allmulticast mode [ 1687.235648][ T7986] syzkaller0: entered promiscuous mode [ 1687.251967][ T7986] syzkaller0: entered allmulticast mode [ 1687.262449][ T7988] syzkaller1: entered promiscuous mode [ 1687.267956][ T7988] syzkaller1: entered allmulticast mode [ 1687.344665][ T7892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1687.378510][ T7892] 8021q: adding VLAN 0 to HW filter on device team0 [ 1687.403684][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1687.410894][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1687.433745][ T2955] bridge0: port 2(bridge_slave_1) entered blocking state [ 1687.440915][ T2955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1687.499832][ T7892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1687.734448][ T7892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1687.879417][ T7999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11594'. [ 1687.939543][ T7999] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1687.994629][ T8001] bond5: (slave erspan0): Releasing backup interface [ 1688.003114][ T8001] erspan0: left promiscuous mode [ 1688.008211][ T8001] erspan0: left allmulticast mode [ 1688.019413][ T8001] bond6: (slave erspan0): Enslaving as an active interface with an up link [ 1688.032378][ T7892] veth0_vlan: entered promiscuous mode [ 1688.052611][ T7999] bond6: entered promiscuous mode [ 1688.057697][ T7999] erspan0: entered promiscuous mode [ 1688.078032][ T7999] bond6: entered allmulticast mode [ 1688.097261][ T7999] erspan0: entered allmulticast mode [ 1688.141039][ T7892] veth1_vlan: entered promiscuous mode [ 1688.210227][ T7892] veth0_macvtap: entered promiscuous mode [ 1688.243155][ T7892] veth1_macvtap: entered promiscuous mode [ 1688.271596][ T8013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11600'. [ 1688.312897][ T5776] Bluetooth: hci3: command tx timeout [ 1688.338311][ T8013] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1688.357069][ T7892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1688.378119][ T8017] bond7: entered promiscuous mode [ 1688.384419][ T8017] bond7: entered allmulticast mode [ 1688.410175][ T7892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1688.449663][ T7892] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1688.469434][ T7892] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1688.493032][ T7892] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1688.517040][ T7892] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1688.535186][ T8019] syzkaller1: entered promiscuous mode [ 1688.542017][ T8019] syzkaller1: entered allmulticast mode [ 1689.009791][ T3476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1689.021635][ T3476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1689.100768][ T2946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1689.122817][ T2946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1689.358953][ T8053] netlink: 'syz.3.11551': attribute type 12 has an invalid length. [ 1689.486581][ T8059] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11617'. [ 1689.538741][ T8059] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1689.613271][ T8059] bond14: entered promiscuous mode [ 1689.619233][ T8059] bond14: entered allmulticast mode [ 1689.634989][ T8067] syzkaller1: entered promiscuous mode [ 1689.651063][ T8067] syzkaller1: entered allmulticast mode [ 1690.220607][ T8076] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11624'. [ 1690.381387][ T5776] Bluetooth: hci3: command tx timeout [ 1690.491729][ T8082] netlink: 'syz.1.11628': attribute type 12 has an invalid length. [ 1690.576511][ T2462] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1690.587073][ T2462] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1690.611686][ T2462] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1690.622320][ T2462] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1690.633820][ T2462] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1690.652403][ T2462] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1690.769674][ T8088] batman_adv: batadv0: Interface activated: wlan1 [ 1690.777687][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1690.794026][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1690.897611][ T8083] chnl_net:caif_netlink_parms(): no params data found [ 1691.052651][ T8083] bridge0: port 1(bridge_slave_0) entered blocking state [ 1691.066508][ T8083] bridge0: port 1(bridge_slave_0) entered disabled state [ 1691.073870][ T8083] bridge_slave_0: entered allmulticast mode [ 1691.080698][ T8083] bridge_slave_0: entered promiscuous mode [ 1691.091307][ T8083] bridge0: port 2(bridge_slave_1) entered blocking state [ 1691.098532][ T8083] bridge0: port 2(bridge_slave_1) entered disabled state [ 1691.106358][ T8083] bridge_slave_1: entered allmulticast mode [ 1691.113754][ T8083] bridge_slave_1: entered promiscuous mode [ 1691.149318][ T8083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1691.162548][ T8083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1691.208259][ T8083] team0: Port device team_slave_0 added [ 1691.224531][ T8083] team0: Port device team_slave_1 added [ 1691.278463][ T8083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1691.286040][ T8083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1691.312768][ T8083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1691.331991][ T8083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1691.339141][ T8083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1691.377966][ T8083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1691.440716][ T8083] hsr_slave_0: entered promiscuous mode [ 1691.448233][ T8083] hsr_slave_1: entered promiscuous mode [ 1691.456777][ T8083] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1691.467839][ T8083] Cannot create hsr debugfs directory [ 1692.361984][ T8123] Bluetooth: MGMT ver 1.22 [ 1692.471445][ T5776] Bluetooth: hci3: command tx timeout [ 1692.711510][ T5776] Bluetooth: hci1: command tx timeout [ 1693.689589][ T8088] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1693.713554][ T8083] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1693.754522][ T8083] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1693.794402][ T8083] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1693.840052][ T8083] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1693.909377][ T8126] syzkaller0: entered promiscuous mode [ 1693.932945][ T8126] syzkaller0: entered allmulticast mode [ 1694.140192][ T8083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1694.192602][ T8083] 8021q: adding VLAN 0 to HW filter on device team0 [ 1694.226586][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1694.233853][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1694.266777][ T2946] bridge0: port 2(bridge_slave_1) entered blocking state [ 1694.273985][ T2946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1694.330664][ T8145] tipc: Enabled bearer , priority 0 [ 1694.346826][ T8143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11643'. [ 1694.374721][ T8143] team0: Device vcan0 is of different type [ 1694.412837][ T8145] syzkaller0: entered promiscuous mode [ 1694.418366][ T8145] syzkaller0: entered allmulticast mode [ 1694.430302][ T8148] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1694.463760][ T8143] team0: entered promiscuous mode [ 1694.479132][ T8143] team_slave_0: entered promiscuous mode [ 1694.485287][ T8143] team_slave_1: entered promiscuous mode [ 1694.492576][ T8143] team0: entered allmulticast mode [ 1694.497726][ T8143] team_slave_0: entered allmulticast mode [ 1694.503773][ T8143] team_slave_1: entered allmulticast mode [ 1694.553285][ T8145] tipc: Resetting bearer [ 1694.577458][ T8144] tipc: Resetting bearer [ 1694.613693][ T8144] tipc: Disabling bearer [ 1694.781544][ T5776] Bluetooth: hci1: command tx timeout [ 1694.845535][ T8168] syzkaller0: entered promiscuous mode [ 1694.851510][ T8168] syzkaller0: entered allmulticast mode [ 1695.014344][ T8083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1695.313461][ T8188] netlink: 'syz.1.11658': attribute type 12 has an invalid length. [ 1695.325089][ T8188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11658'. [ 1695.343862][ T8083] veth0_vlan: entered promiscuous mode [ 1695.367061][ T8083] veth1_vlan: entered promiscuous mode [ 1695.407743][ T8083] veth0_macvtap: entered promiscuous mode [ 1695.430189][ T8083] veth1_macvtap: entered promiscuous mode [ 1695.455421][ T8083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1695.466013][ T8083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1695.478898][ T8083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1695.497526][ T8083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1695.508237][ T8083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1695.519665][ T8083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1695.527356][ T8191] syzkaller0: entered promiscuous mode [ 1695.533734][ T8191] syzkaller0: entered allmulticast mode [ 1695.546813][ T8191] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1695.572692][ T8083] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1695.582527][ T8083] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1695.595360][ T8083] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1695.604268][ T8083] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1696.861378][ T5776] Bluetooth: hci1: command tx timeout [ 1697.548504][ T8152] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1697.613543][T32727] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1697.641796][T32727] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1697.711971][ T8083] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: wlan1 [ 1697.740788][ T8083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1697.766992][ T8193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11660'. [ 1697.794178][ T8193] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1697.805656][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1697.829438][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1697.857292][ T8193] bond8: entered promiscuous mode [ 1697.863144][ T8193] bond8: entered allmulticast mode [ 1697.878687][ T8197] syzkaller0: entered promiscuous mode [ 1697.891277][ T8197] syzkaller0: entered allmulticast mode [ 1698.161088][ T8215] netlink: 'syz.1.11666': attribute type 16 has an invalid length. [ 1698.209511][ T8215] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.11666'. [ 1698.291014][ T8224] syzkaller0: entered promiscuous mode [ 1698.299143][ T8224] syzkaller0: entered allmulticast mode [ 1698.308668][ T8224] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1698.951384][ T5776] Bluetooth: hci1: command tx timeout [ 1698.988526][ T8234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11673'. [ 1698.999697][ T8234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1699.009941][ T8234] batadv_slave_1: entered promiscuous mode [ 1699.018759][ T8234] batadv_slave_1: entered allmulticast mode [ 1699.350336][ T8243] netlink: 'syz.3.11677': attribute type 16 has an invalid length. [ 1699.358568][ T8243] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.11677'. [ 1700.431372][ T8260] bridge0: port 3(vlan2) entered blocking state [ 1700.437777][ T8260] bridge0: port 3(vlan2) entered disabled state [ 1700.445950][ T8260] vlan2: entered allmulticast mode [ 1700.451100][ T8260] dummy0: entered allmulticast mode [ 1700.457484][ T8260] vlan2: entered promiscuous mode [ 1700.464143][ T8260] dummy0: entered promiscuous mode [ 1701.018127][ T8206] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1701.192672][ T8275] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1701.567397][ T8294] tipc: Enabled bearer , priority 0 [ 1701.575990][ T8294] syzkaller0: entered promiscuous mode [ 1701.583161][ T8294] syzkaller0: entered allmulticast mode [ 1701.592640][ T8294] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1701.636770][ T8294] tipc: Resetting bearer [ 1701.662548][ T8293] tipc: Resetting bearer [ 1701.721106][ T8293] tipc: Disabling bearer [ 1703.001734][ T8333] syzkaller0: entered promiscuous mode [ 1703.007699][ T8333] syzkaller0: entered allmulticast mode [ 1703.016254][ T8333] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1704.688707][ T8296] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1705.252275][ T8356] tipc: Enabled bearer , priority 0 [ 1705.270814][ T8356] syzkaller0: entered promiscuous mode [ 1705.291205][ T8356] syzkaller0: entered allmulticast mode [ 1705.329418][ T8356] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1705.403008][ T8356] tipc: Resetting bearer [ 1705.424307][ T8355] tipc: Resetting bearer [ 1705.460039][ T8355] tipc: Disabling bearer [ 1707.688818][ T8417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11740'. [ 1708.096147][ T8432] netlink: 'syz.1.11745': attribute type 16 has an invalid length. [ 1708.104160][ T8432] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.11745'. [ 1708.341482][ T8359] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1708.780968][ T8456] netlink: 'syz.2.11754': attribute type 16 has an invalid length. [ 1708.826765][ T8456] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.11754'. [ 1710.119222][ T8493] netlink: 'syz.3.11767': attribute type 16 has an invalid length. [ 1710.130168][ T8493] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.11767'. [ 1710.394065][ T8496] syzkaller0: entered promiscuous mode [ 1710.399572][ T8496] syzkaller0: entered allmulticast mode [ 1710.408408][ T8496] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1711.932646][ T8463] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1712.264880][ T8509] syzkaller0: entered promiscuous mode [ 1712.281826][ T8509] syzkaller0: entered allmulticast mode [ 1712.479024][ T8514] netlink: 'syz.3.11776': attribute type 16 has an invalid length. [ 1712.531311][ T8514] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.11776'. [ 1712.877484][ T8521] tipc: Enabled bearer , priority 0 [ 1712.885373][ T8521] syzkaller0: entered promiscuous mode [ 1712.890877][ T8521] syzkaller0: entered allmulticast mode [ 1712.902264][ T8521] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1712.939567][ T8521] tipc: Resetting bearer [ 1712.956692][ T8520] tipc: Resetting bearer [ 1712.980051][ T8520] tipc: Disabling bearer [ 1713.316422][ T8545] syzkaller0: entered promiscuous mode [ 1713.322131][ T8545] syzkaller0: entered allmulticast mode [ 1713.627817][ T8551] netlink: 'syz.4.11788': attribute type 16 has an invalid length. [ 1713.651277][ T8551] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.11788'. [ 1714.172710][ T8561] syzkaller0: entered promiscuous mode [ 1714.178199][ T8561] syzkaller0: entered allmulticast mode [ 1714.490994][ T8573] netlink: 'syz.2.11797': attribute type 16 has an invalid length. [ 1714.501287][ T8573] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.11797'. [ 1716.060005][ T8527] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1716.512209][ T8597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11807'. [ 1716.533555][ T8598] netlink: 'syz.2.11806': attribute type 16 has an invalid length. [ 1716.567494][ T8598] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.11806'. [ 1716.602471][ T8597] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1718.340728][ T8665] syzkaller0: entered promiscuous mode [ 1718.347394][ T8665] syzkaller0: entered allmulticast mode [ 1718.356516][ T8665] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1718.673380][ T8670] [ 1718.675954][ T8670] ============================= [ 1718.680793][ T8670] WARNING: suspicious RCU usage [ 1718.685814][ T8670] syzkaller #0 Not tainted [ 1718.690239][ T8670] ----------------------------- [ 1718.695283][ T8670] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 1718.703906][ T8670] [ 1718.703906][ T8670] other info that might help us debug this: [ 1718.703906][ T8670] [ 1718.714241][ T8670] [ 1718.714241][ T8670] rcu_scheduler_active = 2, debug_locks = 1 [ 1718.722432][ T8670] 1 lock held by syz.1.11830/8670: [ 1718.727727][ T8670] #0: ffffffff8d131f80 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 1718.738602][ T8670] [ 1718.738602][ T8670] stack backtrace: [ 1718.744629][ T8670] CPU: 0 PID: 8670 Comm: syz.1.11830 Not tainted syzkaller #0 [ 1718.752099][ T8670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1718.762162][ T8670] Call Trace: [ 1718.765504][ T8670] [ 1718.768488][ T8670] dump_stack_lvl+0x18c/0x250 [ 1718.773254][ T8670] ? show_regs_print_info+0x20/0x20 [ 1718.778483][ T8670] ? load_image+0x420/0x420 [ 1718.783020][ T8670] lockdep_rcu_suspicious+0x1e1/0x300 [ 1718.788424][ T8670] get_callchain_entry+0x2a9/0x3c0 [ 1718.793544][ T8670] get_perf_callchain+0xc6/0x510 [ 1718.798481][ T8670] ? put_callchain_entry+0xb0/0xb0 [ 1718.803597][ T8670] __bpf_get_stack+0x2e4/0x540 [ 1718.808368][ T8670] ? stack_map_get_build_id_offset+0x720/0x720 [ 1718.814522][ T8670] ? __cant_sleep+0x220/0x220 [ 1718.819226][ T8670] ? bpf_prog_b8a90dd1efcc4ad9+0x45/0x49 [ 1718.824859][ T8670] bpf_get_stack_raw_tp+0x1a4/0x210 [ 1718.830070][ T8670] bpf_prog_b8a90dd1efcc4ad9+0x45/0x49 [ 1718.835524][ T8670] bpf_prog_run_pin_on_cpu+0x64/0x150 [ 1718.840904][ T8670] bpf_prog_test_run_syscall+0x320/0x4b0 [ 1718.846538][ T8670] ? sock_gen_cookie+0x60/0x60 [ 1718.851306][ T8670] ? sock_gen_cookie+0x60/0x60 [ 1718.856064][ T8670] bpf_prog_test_run+0x31f/0x390 [ 1718.860999][ T8670] __sys_bpf+0x49d/0x890 [ 1718.865235][ T8670] ? bpf_link_show_fdinfo+0x390/0x390 [ 1718.870601][ T8670] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1718.876587][ T8670] ? lock_chain_count+0x20/0x20 [ 1718.881441][ T8670] __x64_sys_bpf+0x7c/0x90 [ 1718.885852][ T8670] do_syscall_64+0x55/0xb0 [ 1718.890320][ T8670] ? clear_bhb_loop+0x40/0x90 [ 1718.895032][ T8670] ? clear_bhb_loop+0x40/0x90 [ 1718.899706][ T8670] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1718.905605][ T8670] RIP: 0033:0x7f25e299e0d9 [ 1718.910060][ T8670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1718.929694][ T8670] RSP: 002b:00007f25e3928028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1718.938147][ T8670] RAX: ffffffffffffffda RBX: 00007f25e2c25fa0 RCX: 00007f25e299e0d9 [ 1718.946128][ T8670] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 1718.954101][ T8670] RBP: 00007f25e2a35024 R08: 0000000000000000 R09: 0000000000000000 [ 1718.962071][ T8670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1718.970039][ T8670] R13: 00007f25e2c26038 R14: 00007f25e2c25fa0 R15: 00007ffc14e66518 [ 1718.978028][ T8670] [ 1719.121610][ T8614] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1720.352368][ T59] tipc: Left network mode [ 1720.468750][ T59] bond1: (slave ip6gre1): Releasing backup interface [ 1720.478146][ T59] ip6gre1 (unregistering): left promiscuous mode [ 1720.485819][ T59] bond1: Destroying bond [ 1720.659013][ T59] bond1 (unregistering): Released all slaves [ 1721.455806][ T59] hsr_slave_0: left promiscuous mode [ 1721.466424][ T59] hsr_slave_1: left promiscuous mode [ 1721.476651][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1721.485084][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1721.493425][ T59] bridge_slave_1: left allmulticast mode [ 1721.499644][ T59] bridge_slave_1: left promiscuous mode [ 1721.505940][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1721.515370][ T59] bridge_slave_0: left allmulticast mode [ 1721.521039][ T59] bridge_slave_0: left promiscuous mode [ 1721.535578][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1721.758789][ T59] bond7 (unregistering): Released all slaves [ 1721.917523][ T59] bond6 (unregistering): (slave geneve2): Releasing backup interface [ 1722.091612][ T59] bond6 (unregistering): Released all slaves [ 1722.239631][ T59] bond5 (unregistering): Released all slaves [ 1722.378914][ T59] bond4 (unregistering): Released all slaves [ 1722.528576][ T59] bond3 (unregistering): Released all slaves [ 1722.683055][ T59] bond2 (unregistering): Released all slaves [ 1723.244259][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1723.296132][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1723.346598][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1723.394762][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1723.806992][ T59] bond0 (unregistering): Released all slaves [ 1724.308367][ T59] IPVS: stop unused estimator thread 0... [ 1724.438522][ T59] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1724.534084][ T59] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1724.592740][ T59] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1724.682953][ T59] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1724.874742][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1724.959229][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1725.055157][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1725.149747][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1728.160881][ T59] hsr_slave_0: left promiscuous mode [ 1728.167225][ T59] hsr_slave_1: left promiscuous mode [ 1728.183360][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1728.190835][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1728.205982][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1728.217800][ T59] bridge0: port 3(vlan2) entered disabled state [ 1728.230102][ T59] bridge_slave_1: left allmulticast mode [ 1728.239095][ T59] bridge_slave_1: left promiscuous mode [ 1728.248698][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1728.266105][ T59] bridge_slave_0: left allmulticast mode [ 1728.275278][ T59] bridge_slave_0: left promiscuous mode [ 1728.281057][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1728.298592][ T59] hsr_slave_0: left promiscuous mode [ 1728.306217][ T59] hsr_slave_1: left promiscuous mode [ 1728.313427][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1728.320851][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1728.329443][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1728.337520][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1728.346880][ T59] bridge_slave_1: left allmulticast mode [ 1728.352633][ T59] bridge_slave_1: left promiscuous mode [ 1728.358367][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1728.367072][ T59] bridge_slave_0: left allmulticast mode [ 1728.373159][ T59] bridge_slave_0: left promiscuous mode [ 1728.378818][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1728.435889][ T59] veth1_macvtap: left promiscuous mode [ 1728.441531][ T59] veth0_macvtap: left promiscuous mode [ 1728.447187][ T59] veth1_vlan: left promiscuous mode [ 1728.452889][ T59] veth0_vlan: left promiscuous mode [ 1728.459694][ T59] veth1_macvtap: left promiscuous mode [ 1728.465705][ T59] veth0_macvtap: left promiscuous mode [ 1728.471937][ T59] veth1_vlan: left promiscuous mode [ 1728.477205][ T59] veth0_vlan: left promiscuous mode